Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File:                     QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier:          2aAc8/cbXKZUe+TSCIetnvQhLza5Ol4OoqEu4cjLIc0=
Subject key identifier:   D6:70:22:21:63:C7:FF:11:F1:CA:D8:4A:66:6A:59:31:6F:6B:0C:25
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer:       /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial:       01962E61DED1FDDFE88CB19E79403729054C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number:          0DC2
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
                          2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: VwTFyJOv2rTdfwZP9ZfmpMKHkCoqfP2/z4sM8Tjg11g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:de:d1:fd:df:e8:8c:b1:9e:79:40:37:29:05:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=d670222163c7ff11f1cad84a666a59316f6b0c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:f7:1a:f0:46:8f:8a:7d:aa:09:a4:cb:f5:
                    3f:5a:3d:df:29:ae:b1:84:25:91:c5:0b:5d:60:9b:
                    60:ca:ca:27:eb:aa:f2:09:d5:cd:e2:b9:cf:e5:ba:
                    fd:b0:15:44:68:9f:a1:fd:3a:e9:98:57:99:7a:9f:
                    02:4a:a3:a9:11:ea:12:9d:e4:95:32:40:91:60:46:
                    7e:f5:83:a8:f3:3b:be:94:b3:7e:e1:7b:c2:8a:57:
                    70:f9:4a:b0:0c:11:2c:14:76:bf:85:1f:36:ae:55:
                    75:c9:8f:33:a9:a5:25:7d:a2:bb:98:7f:f4:ac:73:
                    03:89:cc:9d:1c:0c:3d:96:28:83:e1:9f:74:42:f4:
                    de:07:a3:01:39:b6:aa:7c:43:a3:58:9c:38:79:a3:
                    15:e3:20:bb:e6:fa:32:99:af:ec:6a:6b:ac:2f:5d:
                    10:fa:9a:9f:59:e3:1f:ba:aa:38:e9:b3:43:75:a7:
                    0f:0e:1a:91:aa:dc:09:8b:04:54:0d:e1:ea:9f:08:
                    9b:44:2f:99:ac:c8:c9:b9:fa:49:55:ba:1d:94:ec:
                    ee:ed:20:90:47:72:d4:49:d7:f6:d7:1c:76:fe:1b:
                    46:0b:cd:a8:22:ca:fd:14:5f:8a:f7:a6:54:f2:59:
                    ed:ee:34:76:6d:c5:2f:e3:93:6f:81:80:6c:0e:cf:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:70:22:21:63:C7:FF:11:F1:CA:D8:4A:66:6A:59:31:6F:6B:0C:25
            X509v3 Authority Key Identifier:
                keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:74:00:ad:42:ea:3e:38:38:20:1f:09:fc:70:fd:aa:0c:dc:
         93:8b:d9:d4:48:13:a2:ef:74:1e:e4:d0:48:1b:68:f9:4b:e6:
         31:4e:ae:89:8c:84:65:f2:82:7c:6d:7f:86:b9:af:24:12:b9:
         de:16:3a:f5:b2:4a:7a:4c:dd:3f:e8:4e:37:81:cf:8d:14:43:
         2b:e4:71:0d:5e:f5:15:d0:78:fb:5e:ec:d3:0c:90:95:be:f7:
         0e:2c:ec:e0:3b:0f:b7:b3:1c:19:0b:87:8f:57:0d:d7:b1:d6:
         22:8d:c2:49:a4:e2:f0:a6:ae:8f:e4:f6:48:c2:e8:64:93:a5:
         69:9c:f1:ea:ec:6d:3b:ca:de:7f:64:c1:01:c5:4c:8c:c4:4c:
         4e:1e:64:35:9a:c4:85:ae:64:24:08:8b:14:55:d7:4f:be:2a:
         a6:32:96:66:88:9c:85:1e:b6:b4:f0:66:2a:32:fa:7f:ef:aa:
         74:65:b7:73:ea:86:30:11:01:ee:ba:4f:88:cc:13:1a:17:08:
         e4:ce:f2:ab:59:8a:2b:f8:a8:ee:42:1c:c5:05:4f:c5:3d:13:
         f3:b9:2d:ec:53:e5:6b:7a:9d:db:44:d5:0d:76:49:a0:76:d3:
         d1:e1:26:90:63:84:4e:d5:b0:cf:84:4a:fe:ab:a6:a3:ae:5e:
         3d:b8:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----