Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File:                     QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier:          LkoPwL+K0D8uRM/yPkfzWP0poCnF0dLCKbTIL1PW1Ks=
Subject key identifier:   CA:EA:FA:F7:52:FF:B1:04:0E:C2:6F:6F:0F:65:F5:15:A3:D8:DA:FB
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer:       /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial:       01962F065CB22DAAC197EA5B5A5A218117E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: cM8KpjtgfM9AZZsBwP4Bsl5rfDcJZgZrcIqNKiKI87A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5c:b2:2d:aa:c1:97:ea:5b:5a:5a:21:81:17:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=caeafaf752ffb1040ec26f6f0f65f515a3d8dafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:ee:d2:76:b4:2c:00:c4:26:8a:95:eb:75:
                    fb:89:1d:56:a2:d8:65:87:51:38:d1:9a:19:38:2f:
                    ef:af:d7:ec:ff:f5:97:34:92:00:7b:61:e3:e7:b7:
                    61:75:7c:14:17:ba:22:95:d8:6f:17:87:3a:a7:8a:
                    ed:c2:2e:b8:f3:50:8d:d9:08:85:67:15:51:d0:3b:
                    b6:24:50:10:3a:1d:f0:63:e5:f5:fc:27:3b:c6:a4:
                    5e:78:6e:01:29:05:b9:0e:04:9f:35:93:dc:25:2d:
                    d7:7d:19:4b:cc:8c:0d:72:c8:ad:2f:41:66:be:18:
                    81:c4:8a:d3:3f:15:31:09:90:21:c3:c6:e7:7d:1d:
                    5d:2f:bc:e1:fa:29:b0:19:3e:0e:d9:5c:6d:8b:d5:
                    0b:0f:61:8a:0c:19:53:03:8c:43:8c:10:ea:32:5f:
                    73:2d:71:1b:4b:9a:08:d0:b2:c9:37:d5:d4:44:11:
                    b6:ed:89:f2:ed:3b:fc:b4:94:c2:ee:9c:5c:78:55:
                    cf:41:bb:ff:59:08:fd:3b:df:0d:a7:9f:e5:cc:d2:
                    02:e9:98:fc:75:e5:11:4f:46:51:da:36:da:e8:01:
                    f7:42:7c:a7:f0:1d:7d:1d:67:39:c2:b4:bf:13:e6:
                    f9:94:9e:62:05:8b:bc:6d:d8:5d:e4:66:6d:d5:b3:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EA:FA:F7:52:FF:B1:04:0E:C2:6F:6F:0F:65:F5:15:A3:D8:DA:FB
            X509v3 Authority Key Identifier:
                keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:ed:d3:46:e2:2f:33:bb:d6:d2:89:f3:9f:0f:cc:e0:2d:
         cd:b0:3d:5e:1d:98:8f:62:a8:89:d0:c5:d0:06:e5:e0:84:35:
         e1:f5:78:97:9d:76:e0:c0:6d:29:1e:85:e2:cc:52:22:fd:82:
         02:f9:64:da:2f:0b:e5:ee:29:7b:dd:99:41:7b:72:8d:bd:29:
         e7:97:d0:f6:b3:91:a0:45:ea:0a:0e:c3:0d:ce:d0:16:94:6c:
         b7:4d:80:65:32:b7:4a:2a:f4:4a:21:80:03:fc:bf:f1:e6:ff:
         70:68:b9:19:07:2a:dc:d4:e9:6f:cb:26:cc:52:60:53:e4:aa:
         1c:76:6f:8d:d5:15:31:29:db:a1:9b:cf:bc:e7:a0:55:a2:74:
         29:11:7f:6d:02:8c:9e:1d:b0:c5:a7:2e:5e:dd:e5:c8:47:47:
         40:da:4a:48:6b:a0:fa:b9:d0:ca:4a:c6:03:b5:69:6b:d1:89:
         98:f2:1a:b5:c6:b0:28:42:f5:96:e1:6d:25:1d:1b:88:4c:89:
         84:6f:b8:d8:17:fe:7c:b1:fa:c4:2c:d3:e4:4c:73:07:d9:12:
         07:75:c5:80:91:a5:2b:dd:a0:d8:b0:f9:57:2e:d4:8f:a3:10:
         86:a3:06:46:92:87:19:1e:0d:0d:16:fc:2e:67:fc:2b:56:ee:
         22:fd:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----