Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File:                     QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier:          QDSWuRmJUSwK6AShyBAzKPt2MfYMroG7TEY5mpiFpzA=
Subject key identifier:   2C:D0:35:C0:17:42:33:96:23:D4:A8:55:BC:3B:89:6E:91:C4:62:0B
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer:       /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial:       01962E2B0D9512A3F5552FAA56F875E955E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number:          02B4
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
                          2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: CgGLachLqdwWoiQ4M6N46LXbCAG6m5RxcByOhzE3Wz4=)
                          3: nz1XOf28Ogcs8fiWug2xbFcdTSI.roa (hash: ztlz9ATge0wUo5eGVXQllv/BlyjO+lbBdkDSEy3I//E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:95:12:a3:f5:55:2f:aa:56:f8:75:e9:55:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=2cd035c01742339623d4a855bc3b896e91c4620b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:37:4a:1a:0e:d1:17:d9:6e:e7:81:29:34:
                    c5:4c:c4:24:77:fd:13:4b:2f:96:0c:eb:1a:cf:11:
                    15:0d:cc:5c:b1:a5:82:3b:f5:cd:03:fe:a3:68:a7:
                    c3:a7:f7:f1:dd:d1:64:97:7b:7b:b2:1a:b1:63:b3:
                    f5:62:75:91:d3:4b:6f:8b:81:c6:f6:8a:8c:7e:e5:
                    5e:b5:2b:02:a2:83:49:fb:56:b2:ad:ab:1b:08:68:
                    1a:19:2c:af:8f:41:4e:ab:21:52:52:99:89:14:f8:
                    e6:da:bf:b4:a5:4f:ed:9b:f1:79:0a:59:12:9d:f0:
                    49:fb:87:46:94:a7:de:ce:81:f9:ec:71:8d:2d:0d:
                    fc:26:bd:af:04:5e:63:62:01:d2:4c:af:76:d6:2d:
                    0b:e6:49:7e:12:3c:78:f3:ef:7d:85:c2:42:6b:35:
                    5e:f9:23:16:70:1e:4d:f6:fd:e4:21:b0:48:6d:e9:
                    0f:57:4b:6b:86:53:18:30:2e:96:8b:c2:d0:45:99:
                    e2:dd:cd:f9:1f:c1:ca:12:b0:50:16:e2:0c:2d:be:
                    29:5f:09:3a:4e:e0:4f:6f:df:5f:7e:c9:6d:c0:04:
                    33:fe:29:9c:3b:ff:ff:6a:c8:a7:90:ab:f9:e2:99:
                    77:86:90:9a:b3:cf:8b:08:a3:a0:2f:d8:1a:f6:c4:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D0:35:C0:17:42:33:96:23:D4:A8:55:BC:3B:89:6E:91:C4:62:0B
            X509v3 Authority Key Identifier:
                keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:df:be:5b:35:e4:2b:0b:bb:cc:49:0b:57:d0:6e:10:f2:ff:
         e3:84:33:b8:c4:dd:44:f2:f4:2d:21:55:57:d2:f5:cc:08:c9:
         55:c0:76:37:b1:40:e4:e3:50:aa:c5:ba:9d:48:c3:64:44:b5:
         3c:51:31:b8:fb:25:27:5d:74:0b:bf:b7:2f:e3:c6:15:4a:92:
         f1:5b:84:c6:a4:36:8c:6d:26:6a:59:db:ed:fd:1d:a7:5e:a1:
         01:62:e5:b7:60:f0:21:49:0d:ba:5d:0a:20:59:34:4d:fd:70:
         bb:9e:12:81:26:ea:74:5b:f3:2f:90:10:25:21:15:84:42:b9:
         44:b9:f6:c9:21:39:6b:b8:f8:6f:50:02:47:44:58:d3:41:83:
         f3:a1:9e:79:02:0a:2b:ca:6a:71:0b:28:54:7b:69:dd:88:48:
         28:81:42:12:bd:f8:52:2e:6d:72:a9:0f:46:a8:01:6f:c0:04:
         8e:da:c0:e3:84:82:96:0a:40:52:9f:c2:81:6e:c8:49:45:69:
         76:82:9d:fb:e2:79:0a:6b:c1:44:49:a0:18:70:68:59:21:a5:
         eb:08:fc:1b:b3:a7:5a:97:20:c7:da:9c:aa:0c:da:48:aa:33:
         88:47:6a:5f:33:f8:06:9b:21:ed:7b:21:c9:43:b6:2a:84:01:
         5f:ab:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----