Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File:                     QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier:          tJgGbU72XB6Hjrss4xH+kCHOPh6xcfLjOmKiZyGE1dY=
Subject key identifier:   B2:6A:74:F0:20:A3:4E:AC:CD:FE:CC:2D:DC:33:8A:B1:42:96:97:94
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer:       /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial:       01962FAB7EA1FB597663D13E1B922E42BF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number:          0918
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: dZ7gUSQpeMrbWM46HosWo6Gh+LYrhbuuqi9NCGwmxzQ=)
                          2: wNJ0eSGK9CrxDXUJzqBGqZt1qoM.roa (hash: VARvN8MLdkZvFPQ8eRPdT6OVeyMm4bYhMp4omxBERho=)
                          3: yhcAHEKxZVCODOjWlW2pWrhXUoA.roa (hash: BQdy1juZTcnmVxJwEM6u9j9UTa+bDec5eXCStK/qQwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:a1:fb:59:76:63:d1:3e:1b:92:2e:42:bf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=b26a74f020a34eaccdfecc2ddc338ab142969794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:16:e6:d3:58:b0:0a:6a:83:1f:e9:c1:d6:
                    d6:07:90:43:51:f2:ac:32:c1:cf:63:e9:64:e6:0e:
                    ee:40:81:d4:f3:0f:3d:6e:b9:ad:85:a1:23:d7:ff:
                    91:af:e0:bc:fa:29:7a:b1:9c:f5:b8:e7:77:c8:cf:
                    79:7b:27:35:c2:c0:5f:5e:aa:c4:ef:1b:2e:db:d4:
                    24:72:ee:88:c1:36:36:69:bd:e0:5b:a6:af:20:51:
                    c6:3a:2e:a1:2e:cf:a9:57:84:bc:a9:61:2c:f4:94:
                    c3:34:14:4e:2f:e0:8b:3f:98:16:b2:fd:1f:3e:64:
                    03:a8:60:be:15:ff:f1:ba:52:1d:93:b4:aa:c9:cc:
                    38:a4:0a:b3:24:f4:ef:e0:5d:fa:ce:0d:75:9a:df:
                    f0:a3:35:3b:af:61:d7:1f:c6:4f:22:0d:e5:cd:ed:
                    7c:0f:a7:f8:fb:3d:3a:63:10:a4:97:eb:53:07:e3:
                    bb:9b:eb:30:16:85:98:9d:ad:93:af:61:10:7d:93:
                    45:e0:90:84:a1:bf:82:5a:19:78:e0:6f:16:10:42:
                    75:7c:6f:a0:d7:fb:60:4d:9f:01:e8:80:de:af:00:
                    b4:ba:06:11:ed:7f:b4:fd:8b:2c:77:00:01:9d:1d:
                    52:88:3e:f2:0e:b8:cd:b3:a8:b2:60:91:56:17:f3:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6A:74:F0:20:A3:4E:AC:CD:FE:CC:2D:DC:33:8A:B1:42:96:97:94
            X509v3 Authority Key Identifier:
                keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:38:d9:0b:c5:35:c5:87:d7:91:31:fb:93:0f:d8:00:20:
         b2:e9:66:cd:b1:54:17:52:a9:33:4b:ca:09:ab:df:54:8a:09:
         c3:95:d4:9b:c6:c4:7b:97:33:99:a3:c4:3e:5b:9c:16:06:d3:
         4b:55:20:37:74:3c:9b:21:c7:28:72:be:32:00:cd:94:c2:d8:
         6e:ea:32:b0:95:db:38:23:c2:d5:ac:61:fa:bd:68:76:9e:63:
         ee:34:bd:f4:f0:b7:be:57:78:5a:d0:57:7f:5c:ed:85:2d:0b:
         02:ce:1f:36:9e:47:dc:27:9e:d1:c4:0d:1d:f1:32:5e:fa:3c:
         07:64:ba:0f:20:71:00:2b:a8:fe:c0:01:e7:1a:b3:64:f9:88:
         72:c3:dc:91:e7:ae:8c:f8:19:56:f7:10:cc:a8:94:84:fd:e4:
         56:8f:5a:de:35:9f:39:b2:d0:78:31:fc:8f:0f:69:f3:8b:4a:
         28:5b:67:7f:db:9c:51:ca:a9:11:fb:53:93:4d:d8:ae:37:4f:
         b3:bd:d1:b0:38:10:fa:87:ca:5d:2e:e6:c0:94:ee:d8:56:68:
         d7:c7:20:ad:9a:35:4e:26:1f:b2:63:da:1c:a5:3e:58:46:07:
         55:0a:81:92:12:59:7d:6f:2d:bd:b3:4e:81:e3:9b:fc:74:b7:
         1a:e3:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----