Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          XY9lyQrkNAOSg6hvT20E8Z5tfo+2BQRQsZF8uzyzx9U=
Subject key identifier:   92:F8:B5:B8:7F:A5:F1:1E:94:16:BB:42:11:0E:45:17:49:47:AA:93
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       0195E0EB77FE05787D9B2770705B2568C335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 08:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:22 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:22 +0000
Files and hashes:         1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
                          2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
                          3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: MrA6Ia4YdCQ+uDyQgCdGkmypnGYD2unJ3ImzpnpsgW0=)
                          4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
                          5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
                          6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:77:fe:05:78:7d:9b:27:70:70:5b:25:68:c3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Mar 29 08:01:22 2025 GMT
            Not After : Mar 30 08:01:22 2025 GMT
        Subject: CN=92f8b5b87fa5f11e9416bb42110e45174947aa93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:49:ad:f9:c5:bc:31:17:2f:d0:7b:35:24:a5:
                    70:03:6b:76:8d:60:32:5b:82:31:38:89:f3:c0:63:
                    a7:46:03:29:4b:dc:e3:28:4e:7b:ab:da:ab:45:41:
                    78:06:10:5f:0b:04:d3:5a:13:c2:9c:8c:15:0d:6d:
                    24:eb:ed:4a:d9:4f:44:f2:d9:cb:82:41:a9:3e:19:
                    7b:23:c8:fc:13:09:92:57:b1:20:f4:3b:2d:96:78:
                    73:24:9c:3a:54:63:48:f4:cd:2c:54:33:dd:82:f5:
                    b3:37:d3:ef:f9:2c:ea:ea:a7:a6:4f:e4:10:59:64:
                    76:ff:ef:02:b0:59:41:e8:0c:7d:7b:8b:34:de:d7:
                    6c:6e:b0:83:b3:50:d1:12:fe:98:cf:fd:d8:02:86:
                    66:2a:9d:5b:a7:b7:59:58:e0:88:f4:c5:5f:09:12:
                    fe:f2:9d:fa:e1:93:fa:42:4d:e5:37:55:be:cc:e4:
                    85:c6:a4:1f:1c:2b:f3:51:d4:e8:de:d7:0e:e0:3a:
                    58:b4:51:88:19:b8:c4:1f:8d:e7:7d:3d:36:24:96:
                    c0:80:55:e5:9c:73:d3:49:66:09:e6:f6:85:51:98:
                    b2:bd:c3:33:c6:c6:c5:a2:fb:48:9d:ae:00:bf:b2:
                    5a:b6:9f:a4:b9:6a:6f:c5:6e:12:fd:c6:01:1f:ed:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:B5:B8:7F:A5:F1:1E:94:16:BB:42:11:0E:45:17:49:47:AA:93
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2e:68:9a:67:ce:22:25:97:c7:a5:e2:0d:14:a3:46:0d:e7:
         bf:f8:cb:79:d7:15:04:5f:2e:e7:a3:54:0a:be:90:a8:fe:0d:
         50:fa:e8:8d:fd:41:18:c7:72:e1:89:58:65:82:ca:72:60:a8:
         1a:31:74:13:a6:54:60:50:bf:33:7b:3e:b0:da:e9:c6:6a:09:
         5d:d0:11:29:c6:46:eb:68:3a:2b:44:54:c6:f2:aa:8e:e1:f8:
         8a:4c:5c:91:63:9f:bb:a7:a7:de:d7:21:bc:08:99:17:19:e0:
         1b:e1:08:84:10:da:89:56:68:32:bf:12:99:33:13:7c:6a:c2:
         0a:0d:c1:83:53:5b:4d:4c:ab:1e:fa:97:31:32:5f:d7:57:36:
         e5:ca:33:09:da:2c:4a:14:d7:8f:45:42:2f:3b:48:57:41:1c:
         63:c9:c5:92:4f:02:1a:21:8a:dc:6b:ff:cf:20:30:7d:2e:26:
         dd:48:d7:e9:f0:16:d4:c8:b2:fb:0e:4d:4d:83:24:b5:17:30:
         b5:85:89:ff:2a:00:9a:b1:b4:99:20:0f:b1:f2:29:88:51:e2:
         cd:a2:fd:65:50:66:5d:00:23:86:58:6e:74:a5:e8:dd:57:a0:
         c3:f0:37:fc:b3:76:86:b9:16:23:bb:d8:cc:28:fc:fc:e8:a7:
         b4:34:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----