Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File:                     QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier:          F1U7QIbhKUBHPB8ZJHOItnZsc+TQTJtn2z9ZydPK00o=
Subject key identifier:   34:75:85:D4:44:08:E5:AF:46:98:F3:59:71:88:F0:B4:33:2C:57:D8
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer:       /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial:       01962FAB98E94E9123AB1876B5A12560A65E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number:          127F
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
                          2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: +5mqKnZP9JFenxVJ+dxW+uj50hRO1GBjZlge9SRqTlQ=)
                          3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
                          4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:98:e9:4e:91:23:ab:18:76:b5:a1:25:60:a6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=347585d44408e5af4698f3597188f0b4332c57d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:68:23:22:ff:97:c3:7a:6f:f6:ef:25:51:
                    ac:33:d1:e5:b4:0b:3b:d3:b0:54:d0:75:e7:34:fb:
                    9c:5a:9b:8e:0c:33:19:ec:bf:70:f8:ba:16:40:31:
                    30:3f:c6:ec:57:4c:4e:f4:b8:a7:43:13:34:6c:8f:
                    e6:aa:db:6e:d8:a2:3e:0c:33:ba:93:1a:34:74:35:
                    06:d8:8d:fc:75:61:d0:e1:ef:fe:d6:b6:b1:a1:58:
                    68:f0:14:fb:b7:0a:c9:26:1c:db:a6:f3:8e:94:a9:
                    a2:27:ea:7c:30:63:90:fd:51:88:48:ff:d3:36:d6:
                    6d:b5:27:0d:24:9a:ad:9d:4a:25:f3:6b:3f:e3:9b:
                    79:4a:1d:46:bc:cd:a3:c4:0d:43:00:95:54:8c:b1:
                    80:45:3f:0d:27:44:54:91:d0:5d:f7:44:a4:76:ea:
                    bd:3f:ab:b5:12:10:1b:80:1d:c1:bb:49:f6:21:cd:
                    20:4c:3b:52:1e:5d:fc:04:ba:e5:0d:ef:a6:21:5f:
                    b6:81:05:96:44:de:5a:ed:e2:40:99:01:b9:d5:af:
                    58:3d:18:d4:41:8b:3c:05:b8:66:b7:bc:f5:52:40:
                    4b:d5:39:47:ce:8e:be:d7:b2:9b:18:55:f1:f8:68:
                    c4:4d:83:26:79:f5:55:33:57:5b:be:0d:70:bf:87:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:85:D4:44:08:E5:AF:46:98:F3:59:71:88:F0:B4:33:2C:57:D8
            X509v3 Authority Key Identifier:
                keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:76:89:a6:55:bd:d9:37:15:51:9f:e8:e2:3b:d4:8c:51:c3:
         9b:80:c0:6b:b1:ad:3c:dd:76:25:ba:d7:b0:a8:1f:6f:d4:fe:
         6b:c8:be:b0:b7:de:65:b3:b0:ee:c5:c2:88:75:8a:57:2b:3c:
         ad:27:a7:ea:34:c4:2f:05:46:51:55:77:21:c5:b8:d4:e9:13:
         2e:18:f2:bd:04:ed:78:6d:17:28:c3:4e:26:b8:67:f8:35:95:
         0a:f6:19:ca:2d:84:22:3b:70:19:a9:63:c5:b7:e0:d4:b7:aa:
         c5:98:af:fc:98:4f:14:1b:73:03:8c:4e:b3:16:5f:ac:09:ea:
         f1:55:00:d3:25:12:72:14:1f:f3:9e:7f:d3:84:33:8f:87:bf:
         6a:30:8e:7f:40:eb:ab:87:44:13:97:83:ee:c5:54:ea:4c:d4:
         77:0e:1c:59:bc:69:47:06:00:fa:df:9e:49:e9:d4:d6:30:7c:
         c9:f9:98:69:61:c0:a0:80:98:6c:79:c6:43:32:83:ee:b2:6f:
         0b:38:4f:fc:03:e4:05:69:6e:c5:9c:4a:62:a3:75:c2:04:38:
         8d:d3:44:33:54:c8:e3:e9:6c:ad:0b:8b:db:8f:d0:a2:d8:43:
         31:47:01:37:8a:0f:6b:b5:e4:60:9c:77:45:83:c4:4e:44:00:
         80:f4:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----