Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File:                     QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier:          Ys877B+qdTBSR8ewVeHmKIPOIZAXKOK2c32Zcfa4bKk=
Subject key identifier:   78:FC:96:9D:14:71:EF:9D:D5:A8:09:8F:AD:AD:2C:CE:81:84:83:CE
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer:       /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial:       01962DF3A1D62E61E67710201E2379C89485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number:          0335
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
                          2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: lMQYjEq9zlGTmRqhPL8CzjGe05llWFVnkDZyw+SbjFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a1:d6:2e:61:e6:77:10:20:1e:23:79:c8:94:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=78fc969d1471ef9dd5a8098fadad2cce818483ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:cc:60:78:74:8c:c3:e4:c4:4b:36:c9:6d:
                    f7:d9:12:d2:87:ac:89:49:99:9c:3d:aa:55:fe:59:
                    b1:73:a3:05:a7:60:7d:b1:41:de:c1:9b:98:ff:36:
                    2b:73:d3:09:e5:50:50:fb:6f:af:a4:27:11:b8:cf:
                    aa:4c:b6:92:74:f4:31:2e:26:9d:8a:84:aa:d9:7b:
                    6f:8c:b7:2b:6c:d9:86:1d:67:94:85:5c:08:2e:07:
                    5b:2d:b2:7f:66:03:02:f2:50:28:4e:da:4b:9d:84:
                    7e:f9:4e:2c:56:4b:4d:1c:77:c7:43:1d:56:8a:09:
                    05:17:33:1a:e0:05:07:21:31:a3:a0:f4:e3:c6:ca:
                    df:42:7d:0a:42:52:36:26:28:aa:61:b6:38:9e:3a:
                    6f:5f:c8:bb:c9:0a:55:fa:87:d8:cb:ac:1b:7e:a4:
                    01:4b:c6:1c:4f:23:a8:cf:32:e0:c1:5f:2e:07:0b:
                    d1:a4:ef:f1:fd:a3:3c:a8:a4:aa:5a:41:5d:cf:9a:
                    ba:6a:61:94:57:74:9f:00:29:94:b5:3f:fa:30:3b:
                    e4:62:b6:63:91:ea:80:ff:91:95:63:da:9b:bd:64:
                    a9:6d:13:6c:a3:ab:ae:ad:3b:2d:b4:0f:2d:bf:98:
                    bf:30:82:4d:d2:30:dc:42:9a:f3:d1:ab:03:f7:d4:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FC:96:9D:14:71:EF:9D:D5:A8:09:8F:AD:AD:2C:CE:81:84:83:CE
            X509v3 Authority Key Identifier:
                keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:b0:79:0f:7f:41:12:e5:36:9e:e7:e7:df:f2:1c:58:b1:
         f8:bb:89:1b:c8:d1:1e:8a:4a:53:73:6d:c1:cd:1c:c7:9e:e4:
         dd:53:c4:f4:df:ae:4e:b6:23:6d:d8:2f:bc:14:16:fa:1e:8c:
         db:b4:dc:27:e1:f3:7e:29:f9:7a:de:24:36:8c:12:f1:a1:c8:
         6f:5a:96:22:1a:8a:d0:da:0d:14:c9:87:78:15:cf:1b:26:62:
         01:7e:1a:16:02:fc:df:bc:22:36:c9:50:d3:86:2b:aa:80:49:
         c5:6f:a7:b6:13:2a:2e:40:5a:7a:ff:f9:85:8f:96:99:75:fe:
         7d:b8:af:47:d6:09:a7:f9:93:35:9a:d5:42:70:6d:8a:ba:a7:
         2b:23:17:16:ca:8c:7e:75:c9:08:ec:e7:47:90:c3:54:d7:e6:
         33:63:d8:b5:33:98:81:ec:69:6b:c3:2a:cb:91:22:27:c4:c7:
         61:40:05:44:0a:47:09:49:69:ed:13:08:ad:ef:f6:5b:c6:4a:
         c7:7c:88:75:d5:e4:8e:09:fd:c9:4d:b5:25:fa:c3:d1:e6:2f:
         0a:5a:dd:22:31:19:ce:7a:68:9b:2b:75:39:ce:a4:2a:02:8b:
         d2:20:10:70:7b:1e:21:8f:86:64:46:76:66:01:86:22:5d:c3:
         57:6a:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----