Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File:                     Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier:          Z4XZr0u8MCcNi3+1dg7598DPZ0lr+8DaTnYiNNrveh4=
Subject key identifier:   3A:1F:84:85:34:AE:84:C7:A7:E9:78:A3:7B:7C:57:F2:A4:92:7C:A7
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer:       /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial:       01962E99E88ACC3D978E51B3D9FDCE6F084C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:40 +0000
Files and hashes:         1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: 9L0/XVh8+dUV9MsK05AlZN8D3g+MzZFPMCNsSu1MjrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:e8:8a:cc:3d:97:8e:51:b3:d9:fd:ce:6f:08:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
        Validity
            Not Before: Apr 13 10:02:40 2025 GMT
            Not After : Apr 14 10:02:40 2025 GMT
        Subject: CN=3a1f848534ae84c7a7e978a37b7c57f2a4927ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:03:98:e4:30:ee:7c:31:e0:34:12:00:55:
                    af:b2:28:ef:3a:93:9b:3b:b2:cf:11:28:95:d6:31:
                    d0:74:83:d9:1b:44:d8:bb:49:e4:2d:d9:0a:22:10:
                    2c:9d:54:5c:c0:43:2f:99:19:26:9e:da:62:da:04:
                    df:7c:2e:35:d3:91:ef:5d:01:7e:1c:bf:81:de:b0:
                    8d:c7:b8:64:38:9a:40:09:21:70:a3:7a:06:73:71:
                    e2:38:1d:a5:64:18:e4:c1:5e:e4:8b:c5:40:53:e2:
                    6f:93:c4:83:96:3e:f1:ca:11:50:da:55:cb:5a:09:
                    8d:e8:4c:95:ab:f8:6f:d6:03:6c:5e:c1:dd:6c:41:
                    2c:c4:0f:72:16:5e:0a:30:13:ae:5d:66:8f:31:8b:
                    18:66:ca:e0:46:c5:77:7f:5a:a2:b0:e4:9d:db:26:
                    8f:f1:10:8a:05:ec:5e:07:ef:72:69:4a:31:79:20:
                    32:82:de:79:e3:b2:26:42:bb:c6:48:c6:d4:29:e7:
                    08:a3:b2:f3:57:b7:97:06:2b:0e:60:0c:a8:03:99:
                    3f:88:a8:23:da:25:26:11:5a:d3:db:c5:5f:dd:8d:
                    e9:e4:3a:46:0d:16:06:b7:c5:02:5b:0b:8d:3c:26:
                    86:1a:c0:0d:9c:5c:19:fb:b2:cd:b1:18:6a:2f:0a:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1F:84:85:34:AE:84:C7:A7:E9:78:A3:7B:7C:57:F2:A4:92:7C:A7
            X509v3 Authority Key Identifier:
                keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:c3:59:31:e3:0c:86:cc:12:0c:9a:d1:e9:cb:7f:bc:4f:
         03:52:6d:1c:f3:56:78:be:3e:09:93:e1:74:26:b8:a6:6e:3f:
         ff:f3:01:9e:5a:ae:7f:b2:05:48:a9:6e:9f:e4:1b:ca:af:03:
         0d:23:9e:08:ca:a8:1d:f8:d1:3d:2c:38:56:44:f7:12:1f:d1:
         09:5f:5a:92:29:45:8f:6f:08:f0:ea:be:7a:9d:b0:72:07:30:
         8a:5c:ed:d1:35:c0:85:b2:c5:40:87:bb:08:bf:48:34:7a:99:
         2b:26:70:3b:08:9d:32:5b:32:c5:a2:34:6e:f8:d1:8f:f3:d2:
         4a:bd:47:f2:18:eb:b4:0a:ba:a7:07:79:bc:93:46:a3:9f:34:
         35:4e:f8:85:39:11:ae:93:22:78:7c:59:f4:f3:8e:37:e1:32:
         cc:fc:25:54:e3:4f:d8:65:87:7d:25:1a:e8:f6:a6:fb:c5:cc:
         8a:1e:43:11:4e:39:17:00:a0:89:2e:4c:77:ca:3b:52:3c:29:
         36:8c:32:6f:3c:79:a2:12:c2:b0:c5:ec:f1:b6:3a:74:d5:cd:
         ff:c2:53:12:48:e4:92:2e:8e:f1:c3:23:ae:1d:b7:67:88:15:
         f9:d8:89:db:5b:30:c2:40:39:51:6c:04:4e:40:54:a2:7b:02:
         55:be:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----