Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File:                     QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier:          ml9x3GfFt429RIQmFoQ40W9z6aQ9t2/i/Nm80iDOYu8=
Subject key identifier:   D8:9F:52:83:CE:73:E5:0A:BA:7B:A7:F5:D7:B4:1D:48:76:B2:50:F4
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer:       /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial:       01962E61E8884628004F361E4B79AEE99E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number:          0174
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
                          2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: AGpsfF5MCUK328/0HJd7Wi4+aQ9RwA4e48ed6Tr6lfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e8:88:46:28:00:4f:36:1e:4b:79:ae:e9:9e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=d89f5283ce73e50aba7ba7f5d7b41d4876b250f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:b2:0d:47:d4:df:dc:00:06:cc:2c:1a:bd:
                    2e:4b:f1:c8:43:92:3e:53:6f:14:ae:64:81:0d:dc:
                    f1:d1:89:af:9c:74:ea:28:ed:58:ea:25:93:16:a7:
                    2b:96:82:c8:33:21:53:92:11:e1:7f:25:f0:95:b6:
                    26:52:6a:8d:25:14:7c:73:04:b1:a1:96:b1:e0:68:
                    8a:b8:50:f2:86:bd:e6:2d:b9:47:7a:1c:f8:38:da:
                    80:7d:e5:e4:1e:2a:a2:e9:5a:be:02:15:64:ea:78:
                    98:3b:7c:6d:4d:54:b3:86:a4:a4:e7:96:df:58:c3:
                    18:f0:c9:d3:95:a9:f6:b7:6f:20:5a:3c:f6:78:bc:
                    db:5d:f7:62:6f:97:b9:4d:29:48:db:1b:e7:23:44:
                    c3:5f:69:bb:e5:1b:f4:09:fc:65:eb:b2:91:ff:9d:
                    64:a9:15:ad:0d:34:6b:15:f6:b7:07:1d:b5:0d:76:
                    9b:ca:d9:b4:c3:b1:d8:f6:9a:fa:d0:e2:96:50:d4:
                    33:b0:36:24:29:82:a4:d4:fa:ed:58:4d:7a:9d:3c:
                    ef:78:e8:4f:03:ba:ff:8a:b2:7b:f4:61:0a:8b:a3:
                    e8:92:60:1b:fb:1d:81:14:15:02:93:6d:34:5e:41:
                    a3:02:f3:66:3b:c8:b0:42:71:e2:92:35:24:d5:33:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9F:52:83:CE:73:E5:0A:BA:7B:A7:F5:D7:B4:1D:48:76:B2:50:F4
            X509v3 Authority Key Identifier:
                keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:20:dc:86:28:8a:45:56:08:3a:fb:c1:67:e2:ce:e7:8c:87:
         3c:8e:50:8a:1c:34:7f:d4:92:0a:78:81:ae:c0:a7:90:68:c3:
         f2:f5:d8:59:b6:c0:83:0c:14:fa:41:0d:3a:a9:f2:92:19:a9:
         ad:c3:5e:b7:fd:75:fd:10:7e:6d:07:e6:41:8a:a5:b2:5d:be:
         2a:50:3f:61:2f:c2:8d:7b:30:93:8e:82:14:49:e1:73:57:83:
         94:91:42:bd:c4:bb:40:c1:15:69:49:5c:b7:35:8e:d8:96:ec:
         ef:c4:1a:4b:6f:5d:22:03:b3:ba:1c:9c:fc:b3:7b:f6:74:50:
         22:56:ae:10:b0:4f:25:d9:81:6e:70:fb:40:da:8e:5a:68:e2:
         b1:00:48:0e:8f:05:ea:d8:88:d6:10:65:b6:6f:06:8f:fb:42:
         2d:6e:6a:cc:2f:71:7d:ec:64:a0:7c:c2:b4:c9:0e:26:d1:de:
         c1:17:47:d4:a1:0e:1f:81:b2:ae:01:0c:bf:6b:29:de:b1:a5:
         c0:c9:ed:d1:85:16:ea:05:a1:80:dc:d6:b4:c4:95:cf:58:ee:
         ea:72:bc:24:4b:08:a6:18:a5:14:96:7a:d7:b0:87:45:36:a2:
         22:2d:34:06:2f:7b:a8:0e:a4:b6:1a:aa:8f:33:87:90:f1:c7:
         3c:8b:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----