Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File:                     Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier:          k+qPCDzUZY8X31N6JYoN/H7PIpRvdXft9152GKWHioI=
Subject key identifier:   4C:85:96:BE:2E:98:0C:A3:E6:23:DB:DB:D7:A5:4E:A9:73:8A:BA:1D
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer:       /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial:       01962E98CB5EEC840DCC17554A442B97D77F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number:          0A61
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: hBRflExI/+2aCIEJ/SQbI01Tc1L6xJwaZBOCy6u67aM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cb:5e:ec:84:0d:cc:17:55:4a:44:2b:97:d7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=4c8596be2e980ca3e623dbdbd7a54ea9738aba1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:0a:99:d2:35:9e:85:e8:3f:b3:4a:1c:8e:
                    1f:18:5b:e6:05:c8:42:30:75:a7:c8:1f:59:1d:e0:
                    c8:51:1d:5f:2d:3f:c9:2e:89:07:77:00:2e:91:10:
                    2b:80:fc:e5:08:fc:2e:b1:db:36:95:1e:09:4e:a7:
                    82:42:61:20:11:17:77:df:f3:1c:62:df:ee:d5:5b:
                    ad:f1:2c:99:04:99:66:c7:28:51:da:9b:67:d4:ee:
                    ed:e3:72:4e:6b:59:e7:bd:3c:f3:7b:c4:b5:89:88:
                    6d:27:f9:44:dd:06:78:c6:2e:22:9e:2c:b1:22:94:
                    5d:09:91:b0:fa:2f:e6:6d:6e:ba:29:a2:89:ee:ad:
                    64:f5:3c:ad:b6:36:9b:80:ab:53:cf:66:5d:ca:26:
                    26:32:28:9e:37:2b:4f:f2:0b:de:6e:e0:3a:7a:49:
                    0e:fa:7c:13:c6:33:00:8b:3c:f0:ff:25:b9:9b:54:
                    9f:d3:bc:b5:83:69:44:ba:11:26:32:41:39:cf:da:
                    4a:e7:a7:5b:21:2d:b8:10:08:3d:0f:3b:92:98:1b:
                    bb:21:14:36:9f:0b:e5:9b:ea:94:eb:9d:68:2b:ae:
                    48:91:ce:fb:75:66:24:32:a7:4f:c9:04:1e:23:6c:
                    10:86:1d:87:e6:c7:10:ff:13:43:33:fa:bb:73:9f:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:85:96:BE:2E:98:0C:A3:E6:23:DB:DB:D7:A5:4E:A9:73:8A:BA:1D
            X509v3 Authority Key Identifier:
                keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d5:64:b7:33:8e:61:61:44:93:b4:3f:0e:f3:60:8d:0b:5a:
         cd:27:e9:57:83:08:5d:92:17:f9:8f:e1:f9:8c:05:74:7b:a4:
         da:15:cf:9c:bf:aa:1c:3d:a0:14:7b:2b:d6:1b:0a:1e:23:f3:
         2e:ce:0b:e3:1b:fa:08:67:d5:1d:1f:a8:7d:e1:e5:7a:8f:f0:
         99:99:41:06:d4:55:f3:75:16:94:7f:7c:c2:00:46:b7:83:4e:
         49:5f:cf:09:4a:97:b8:59:ad:87:82:a6:d7:07:b3:df:d0:42:
         13:f7:b8:c9:8b:cd:bf:c3:c6:15:dc:24:d9:19:5d:28:3d:95:
         71:e2:63:23:b3:3b:c4:30:5c:fd:14:05:58:25:7e:2d:da:19:
         13:ee:5c:6a:fe:4b:2a:3a:ed:d2:b5:56:55:d0:bc:6c:b5:70:
         94:d9:5b:af:d0:29:d1:b2:a7:13:89:1e:bc:90:59:e4:34:45:
         db:6f:70:76:10:29:58:19:4b:2d:7b:b3:49:50:28:b7:87:65:
         b5:9a:4c:ed:e2:f9:86:44:df:c8:bd:d7:6c:07:b7:b8:df:73:
         e7:92:51:98:11:5a:2a:2c:40:85:cf:8c:b5:8b:3a:fa:1c:d1:
         85:b6:9d:ef:10:69:6c:72:36:12:ba:a6:50:a5:06:5c:93:6f:
         18:36:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----