Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File:                     QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier:          1ahbpCGifNgxkWCJH7fnNG1XAoN4vvA7JDOVQhz6lOM=
Subject key identifier:   B9:0A:A3:B4:C5:30:E9:5E:1C:C9:A0:61:54:12:E8:D6:BE:78:6C:EE
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer:       /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial:       01962F070AA59E606F5DDE78AD285933C09F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number:          07CB
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: ptfWfUh89jbWa4gBbFCrCO+UMYXygCYd5quCL5djehw=)
                          2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0a:a5:9e:60:6f:5d:de:78:ad:28:59:33:c0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=b90aa3b4c530e95e1cc9a0615412e8d6be786cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:b9:94:fd:17:77:8f:d0:c8:01:25:8b:49:
                    0a:69:eb:53:b0:87:da:b7:b5:f3:8c:f5:71:26:f6:
                    af:8a:95:92:37:56:b8:7c:84:3b:11:c7:0c:2c:7d:
                    ee:4c:b6:b7:21:8b:66:1d:d0:99:c2:0e:40:6f:90:
                    83:40:03:9d:85:96:91:1e:fe:28:eb:2c:df:83:34:
                    fe:c0:35:ca:7a:57:0c:0d:c1:9f:67:e6:40:eb:ca:
                    76:f9:0b:28:47:60:b6:dc:18:0b:8b:f1:bf:9e:f5:
                    65:d4:cd:a8:ee:ec:c0:82:d9:14:e2:55:1d:c5:64:
                    83:fe:64:08:b4:8b:6a:3d:b4:c4:31:a7:07:b4:78:
                    16:2e:cf:77:d8:ec:0f:80:ad:ae:1f:66:9c:7f:a4:
                    80:50:be:39:85:f3:93:0c:bc:70:03:1f:7d:f8:90:
                    f9:d7:c5:29:5c:db:fc:42:e2:de:cf:53:1d:9d:37:
                    df:39:0d:3a:e4:22:2d:ea:a3:02:ae:ec:5b:3d:64:
                    3e:76:5f:c2:f6:c6:88:0f:a2:ab:b8:91:b9:69:cb:
                    f6:28:b2:23:de:c0:5b:07:56:b0:48:9c:7b:38:5c:
                    5e:28:ca:94:8e:37:bd:1b:95:64:15:f5:9a:f2:7a:
                    26:23:8e:e5:fc:09:7f:bf:de:4d:e8:62:30:05:29:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:A3:B4:C5:30:E9:5E:1C:C9:A0:61:54:12:E8:D6:BE:78:6C:EE
            X509v3 Authority Key Identifier:
                keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:05:8f:e9:0d:75:26:73:af:24:23:c0:47:f7:6e:c3:b7:
         cd:ef:cd:79:6d:f2:df:4b:64:1c:a4:33:7c:61:7c:5b:4a:e2:
         28:30:11:6b:09:93:6a:76:f9:00:61:17:20:d2:57:45:e9:5e:
         b6:1e:6a:ed:61:12:83:58:20:15:f8:5d:7a:76:6f:63:4e:86:
         5a:9a:4f:48:85:5f:4d:22:86:ba:d7:e1:f2:88:62:6b:b7:9a:
         8c:20:57:f1:d8:0f:7e:9a:db:90:fa:bb:e4:bd:23:ed:3e:8c:
         86:21:fa:94:ea:53:06:ef:4a:f8:39:f2:9e:37:b5:4e:d9:a0:
         e5:c9:c8:28:89:77:6f:34:28:b9:38:8e:61:f0:8f:43:df:95:
         a5:ca:f8:de:10:76:6e:5e:7c:fd:52:71:62:c0:fb:b5:a1:30:
         96:4d:19:e9:5d:da:19:fa:68:e4:22:f1:8b:45:e6:5e:ab:74:
         6c:6b:b3:d2:50:04:4e:3e:e8:ea:41:ea:a6:c3:10:23:cb:76:
         d0:f4:87:9f:9d:46:43:fa:af:f4:a8:16:a2:2a:92:ee:ca:c2:
         fb:97:15:53:ab:75:aa:06:da:bf:2a:9b:ad:37:10:15:12:3d:
         f2:e3:d4:5f:f9:ca:25:bf:4d:9c:37:75:b2:4b:04:ca:b0:86:
         58:12:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----