Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File:                     QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier:          x03VQppdNt7673iI/rY/3BY4ciED5n5AhZ1GrNt//Qg=
Subject key identifier:   82:08:8B:23:93:DF:3E:62:E4:98:8C:68:A9:3B:46:A3:63:30:B7:42
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer:       /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial:       01962E98C3EF479ED982C0843F788790A3CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: 53sMLIdvcr74bisEGe51ZgKl61cJUXxqQJ00Zi8drxs=)
                          2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c3:ef:47:9e:d9:82:c0:84:3f:78:87:90:a3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=82088b2393df3e62e4988c68a93b46a36330b742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:0e:c6:22:9d:a3:9f:a9:e8:6a:85:b2:72:
                    6b:b4:83:95:bf:12:9c:b1:44:bc:6b:99:89:35:39:
                    48:45:a9:a9:53:72:e2:db:53:1d:bb:f3:10:4f:f6:
                    b4:69:ee:9f:39:a8:7a:41:00:5f:d4:5c:f3:d0:00:
                    99:1c:ec:7e:e5:f3:6c:b9:17:6a:93:37:24:cf:db:
                    85:a7:da:2c:52:67:d6:bb:e9:2e:71:9b:e3:46:d4:
                    24:03:e5:3a:fe:93:74:40:2d:b5:45:21:23:4d:cb:
                    eb:8b:d1:56:82:40:99:25:08:d1:32:3e:ef:44:35:
                    90:16:0d:ea:b9:c8:eb:41:40:55:fb:a2:f3:02:42:
                    af:91:91:06:93:e1:e3:ac:77:91:2b:4f:d6:e5:01:
                    6a:2c:94:fb:d3:b0:e7:ec:85:c4:65:cd:75:52:1d:
                    9c:12:89:ba:e1:6f:41:bb:78:b4:63:4a:df:91:a3:
                    c9:d5:8b:94:89:3e:c7:c0:9a:02:fe:8c:13:88:e4:
                    84:77:0d:5f:04:1f:1a:29:ab:3d:c5:15:d2:98:47:
                    0e:89:75:3a:39:13:75:b4:f6:e6:71:1a:41:01:67:
                    27:18:3b:cf:80:be:d1:16:08:c6:0a:7c:2a:6f:72:
                    46:0c:a6:ae:68:ed:2a:31:82:05:3c:9c:94:f2:37:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:08:8B:23:93:DF:3E:62:E4:98:8C:68:A9:3B:46:A3:63:30:B7:42
            X509v3 Authority Key Identifier:
                keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:de:31:83:0d:92:80:99:9a:98:35:6c:70:8e:23:40:24:0e:
         d8:a5:10:2e:6a:bc:d7:b1:5a:f6:0f:e4:bc:45:99:39:61:ad:
         f8:a1:13:34:fd:1d:8e:fe:66:f6:2f:af:81:9c:c3:36:6f:36:
         84:e4:46:73:b0:12:63:b6:f0:34:bd:23:4a:f2:94:4b:15:11:
         05:32:89:40:bc:47:ed:65:2a:7e:57:96:70:d7:f2:14:63:77:
         d2:19:f8:38:c7:17:87:b4:66:c5:87:ea:71:97:dd:ea:27:87:
         1d:89:b5:50:d1:d8:0a:2a:f6:6b:c3:e9:27:ba:a9:6e:67:e3:
         28:c7:4e:42:1f:03:7f:5b:49:8d:89:c1:10:bc:0d:d2:06:c1:
         ad:6b:2b:eb:2a:78:be:75:f7:a5:24:56:ec:68:47:6d:f8:78:
         b7:8d:91:47:7c:7f:15:b0:61:01:22:92:e2:ba:10:6c:dd:2f:
         1f:c4:ec:2d:52:11:54:7c:53:b0:4c:a1:85:6e:86:16:57:96:
         10:e3:c1:09:02:4b:7e:9b:75:42:27:7f:72:9d:8f:29:7c:f8:
         b9:ed:24:33:8f:89:50:93:94:f4:7e:67:2a:d2:7d:99:3e:90:
         83:24:dc:d3:65:12:3c:e2:5a:0a:59:2d:a2:0b:71:f4:56:f1:
         e1:3b:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----