Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File:                     QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier:          v+5ZjRzuzq6P9E5Bw2wGX6e9seOHTQF+GsGtMK0MDo4=
Subject key identifier:   42:44:3C:7E:52:A7:CA:CF:6D:BF:17:B0:5B:CE:7C:AA:83:93:EF:72
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer:       /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial:       01962E61FEEE3162546C13CD200F812F74B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number:          0E6A
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
                          2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: 4kCtx0KJXxbgACNnX9bgeT1rlP4F89yn5IMTRM4pP10=)
                          3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fe:ee:31:62:54:6c:13:cd:20:0f:81:2f:74:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=42443c7e52a7cacf6dbf17b05bce7caa8393ef72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:39:c2:f8:32:cf:8d:fe:b6:10:60:36:d0:4d:
                    47:d6:ee:ab:8c:f1:31:42:e6:95:65:37:8b:27:c1:
                    48:df:9d:fe:d8:8b:2d:3b:d2:93:c5:6b:fc:32:0a:
                    37:80:9f:ed:a2:ca:d0:ec:8b:db:e4:5b:39:7c:5e:
                    1b:81:57:5f:da:c4:91:fa:ce:00:2b:5f:21:59:29:
                    6a:5e:ac:22:ba:4c:cb:65:2d:d4:da:3b:98:52:27:
                    09:cf:3c:a4:be:0d:fa:97:8a:86:7a:d8:e1:e7:31:
                    3a:56:89:79:a2:fc:c1:be:24:69:91:e5:6d:36:16:
                    46:d0:d4:14:ab:9d:5f:ff:c5:ad:11:f7:f8:75:d7:
                    9a:57:73:f9:8c:e9:33:8d:06:19:05:5f:94:d6:a2:
                    d6:e3:4e:6d:a6:35:1d:dc:92:89:4f:73:59:6b:47:
                    43:c2:96:c2:66:cd:f0:62:55:93:85:8a:3d:0b:96:
                    21:3b:2d:93:c5:fd:dd:95:25:de:5c:f0:04:1a:0c:
                    cc:d8:f4:03:9d:4f:70:c0:e8:e9:64:6c:6d:42:bc:
                    03:08:37:e1:c4:b1:75:3e:e6:09:fc:58:e2:ad:d7:
                    d5:8f:48:da:39:00:62:1c:38:cb:48:e2:a6:c6:b6:
                    fd:93:f3:0b:34:9b:1c:c3:3b:f7:42:d6:65:a9:6f:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:44:3C:7E:52:A7:CA:CF:6D:BF:17:B0:5B:CE:7C:AA:83:93:EF:72
            X509v3 Authority Key Identifier:
                keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:30:a5:a9:ff:11:bb:01:4b:bd:42:b4:1a:20:5c:81:f1:
         c2:e2:d2:3c:f9:15:5d:fe:ca:1f:fc:d8:ac:c6:c9:91:a2:cf:
         9b:0a:22:78:72:ce:e0:2f:65:4c:c2:97:c9:7a:04:04:65:9f:
         78:3b:60:68:04:9a:4f:d3:49:ae:80:97:d9:81:32:1d:89:4d:
         1a:e0:67:ce:d3:e6:ee:47:a3:df:35:1d:b9:cd:af:85:91:91:
         d9:6e:7b:95:ea:1d:3c:69:d6:6c:17:c5:85:c2:e3:9b:f5:fe:
         8d:0b:ce:af:9f:8f:aa:e6:09:5b:3b:ae:f9:a1:35:3c:6c:cf:
         08:4f:52:30:ea:cc:32:89:ae:10:ea:47:61:bc:a2:f1:95:79:
         a8:c2:60:c0:ea:3b:c9:18:33:fe:87:08:d7:f4:60:4d:60:f6:
         58:1b:30:24:a0:09:28:51:40:27:6a:7f:5f:b7:9d:f9:55:86:
         3e:25:c2:35:7a:38:38:8c:a0:02:c5:6f:9d:a6:17:54:31:7e:
         8a:66:b7:f3:95:02:b2:c7:4c:ff:5b:cb:8c:30:16:28:05:3a:
         56:f6:fa:59:71:99:c9:9a:06:1b:b1:a2:4e:23:20:18:65:cc:
         f1:a5:72:44:60:32:4b:8a:39:8e:37:4d:e9:b2:09:2d:8a:22:
         64:a6:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----