Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft
File:                     QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft (raw, json)
Hash identifier:          dE3I/e3VReXqP1l85HtcuXhJK4QG+LVP6vVmctJzDzQ=
Subject key identifier:   52:10:EB:23:D8:64:81:6B:6A:5D:7F:ED:8D:E3:E7:F3:CC:68:29:70
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Certificate issuer:       /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial:       018EF343BC28633FB04A073727DD1C60D0E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft
Manifest number:          72
Signing time:             Thu 18 Apr 2024 22:11:26 +0000
Manifest this update:     Thu 18 Apr 2024 22:11:26 +0000
Manifest next update:     Fri 19 Apr 2024 22:11:26 +0000
Files and hashes:         1: Q-lnsGxlvry4vjwp90hzH3WatFs.roa (hash: FwjeHdUrdj743T4fRxkxfvOvCIDqSP4VXFZvjoe3n5E=)
                          2: QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl (hash: HJ1VesyLZtmwimBlgLxRMyntlMrvzWvCGu5vl4mYoPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f3:43:bc:28:63:3f:b0:4a:07:37:27:dd:1c:60:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
        Validity
            Not Before: Apr 18 22:11:26 2024 GMT
            Not After : Apr 19 22:11:26 2024 GMT
        Subject: CN=5210eb23d864816b6a5d7fed8de3e7f3cc682970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:ea:3a:70:46:64:72:e6:dc:a4:ff:52:3b:
                    28:fe:d4:63:43:4c:7c:02:90:56:2b:a9:f2:d3:11:
                    f9:51:92:12:9f:08:7e:4f:67:a9:de:3b:bd:bb:59:
                    a0:5c:6a:0f:28:8d:71:4e:4c:39:72:0e:ff:8a:9e:
                    aa:19:1f:79:8a:00:3f:96:a6:aa:82:44:dc:a4:bf:
                    77:c5:12:c4:de:cb:a7:b1:89:27:a4:32:35:84:6b:
                    f5:05:a2:ef:e2:7f:9e:dc:95:63:ac:04:f3:22:8e:
                    ed:8a:5f:9d:34:34:19:57:f6:55:ea:72:d5:32:ac:
                    07:35:92:24:19:08:fa:af:f8:4e:da:03:17:3b:60:
                    8d:a4:1a:01:ee:e8:21:9a:29:f1:8b:1a:40:ce:09:
                    28:33:08:3e:d3:22:d3:d1:f6:49:49:ee:75:fa:9d:
                    93:9e:30:8b:4d:40:d3:ab:df:05:62:12:04:e6:05:
                    cb:cf:3f:9e:c7:f4:99:bf:6e:17:b4:ef:40:5c:81:
                    8a:78:91:83:e8:b0:6e:87:d3:3f:0b:97:bb:60:74:
                    14:97:10:9a:61:9b:d1:66:c9:0b:16:f7:44:5e:c7:
                    5b:da:33:5d:79:e1:eb:07:d6:18:0b:36:72:dd:97:
                    0e:ac:0f:3e:d5:79:76:71:3c:2b:9c:58:d0:17:0c:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:EB:23:D8:64:81:6B:6A:5D:7F:ED:8D:E3:E7:F3:CC:68:29:70
            X509v3 Authority Key Identifier:
                keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:21:84:0d:e8:13:2b:4a:a5:b3:af:e6:94:13:0c:65:c0:
         8a:e0:90:90:4c:21:28:f0:a6:7c:5c:d5:ea:30:f4:7a:25:da:
         e0:2b:5f:d7:c7:19:30:ef:3e:19:69:dc:1f:d2:02:69:37:1e:
         21:ad:e6:19:6c:f4:95:fc:30:37:0b:92:22:61:c1:89:b4:6b:
         a2:a7:26:e1:ba:5a:a2:b1:66:4d:c9:85:da:0b:31:a5:cb:77:
         79:50:0c:41:ea:1e:af:1e:b4:3e:73:5c:c4:b7:47:d9:f2:df:
         e2:ad:ec:36:62:8a:67:9e:de:81:4c:e2:6f:96:af:38:73:18:
         4f:cd:c6:1e:53:e8:76:8f:77:f3:7c:a2:89:1b:cb:fa:34:31:
         8e:f5:03:ff:82:2b:fb:a2:c7:94:b9:ec:e0:33:5a:5b:33:30:
         f7:e5:7a:85:3c:3a:90:04:43:97:a6:6f:66:fa:8b:de:e7:00:
         47:94:8d:2b:c4:9f:15:db:09:4f:9d:d9:90:23:6f:8b:89:ef:
         67:c9:f6:33:f7:df:29:df:ac:aa:2a:11:0a:40:d3:91:9d:93:
         79:2f:db:a2:f1:83:0a:33:2b:9e:63:3a:d4:35:a5:ff:a2:a6:
         ad:8a:26:38:49:93:73:d6:02:97:c2:18:bc:ad:3f:0d:fb:5e:
         d5:24:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----