Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
File:                     QhUNRjwyZnxqkpbI0luzg89BnGE.mft (raw, json)
Hash identifier:          3eAaP4lla2GJtEPMFbl1MyFD94WLHnAwpYGtCZGASl0=
Subject key identifier:   1F:E8:40:48:7C:E4:C3:78:36:26:B0:92:26:CE:77:28:5B:00:FB:F8
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Certificate issuer:       /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial:       01979AF1E81C0E561D455FA9455C3917A430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
Manifest number:          0677
Signing time:             Mon 23 Jun 2025 04:00:34 +0000
Manifest this update:     Mon 23 Jun 2025 04:00:34 +0000
Manifest next update:     Tue 24 Jun 2025 04:00:34 +0000
Files and hashes:         1: Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa (hash: 02V3u2HhlDHRSQCBXJk0WRbtuRTj5NgREYz36Htp320=)
                          2: J_D_McsIAYG4K4qwpFvyYN6VTDA.roa (hash: 33+T5SyX5kOoXI4lKmyjOT5etiOFVcur6gliVhon8Wc=)
                          3: QhUNRjwyZnxqkpbI0luzg89BnGE.crl (hash: x9GevbbcnyhF2/RC7Ghqw0wKQbXQLC6lIkiVk5gTPcY=)
                          4: VnpwcypF5ODc6lvqbRhNE3ybCw4.roa (hash: drIuURHVLM+Rrj256cdJyU4lGxE6mwl5FZTlOzb2kc0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9a:f1:e8:1c:0e:56:1d:45:5f:a9:45:5c:39:17:a4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
        Validity
            Not Before: Jun 23 04:00:34 2025 GMT
            Not After : Jun 24 04:00:34 2025 GMT
        Subject: CN=1fe840487ce4c3783626b09226ce77285b00fbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:10:41:d4:55:07:23:c0:af:c8:b1:17:ed:
                    7d:e6:08:1c:bc:64:e1:41:5b:44:a3:01:c0:fb:ef:
                    b8:af:db:d9:bc:29:d4:52:a1:e5:fc:3d:b3:64:a8:
                    74:27:b4:67:f0:5c:fc:5a:80:13:32:dd:9c:ce:dd:
                    ee:25:65:9e:4f:3e:cb:e4:4c:78:e7:9c:e5:bd:bf:
                    cd:9e:93:5b:68:d9:83:2a:32:1f:27:b2:3a:36:d4:
                    a7:eb:46:eb:3f:9c:87:51:91:96:50:81:82:c2:24:
                    7b:b5:01:27:91:5e:b9:b8:b3:fe:f6:1f:c9:f3:d1:
                    8c:9c:f0:79:f8:48:63:82:92:41:16:fe:3d:a5:cf:
                    bf:f3:84:c6:1a:4c:f8:9e:fb:2a:00:df:79:68:86:
                    f8:b2:86:94:69:ae:d8:8b:c6:e5:69:d6:27:a3:17:
                    58:65:ae:41:bc:91:31:a7:12:e4:4a:6b:12:e4:66:
                    57:97:24:ff:4e:c4:0d:4f:08:f6:8b:87:8f:bf:0f:
                    26:2e:64:eb:e6:32:9f:6e:8a:f0:ea:cf:5c:57:e4:
                    8d:b1:21:26:d0:2b:10:11:22:2e:4e:86:7c:14:0e:
                    74:9f:52:84:41:dc:42:80:bf:fb:f9:39:17:e4:f7:
                    e1:3b:b8:33:c6:1e:c6:f9:f6:a7:60:48:24:2b:a0:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E8:40:48:7C:E4:C3:78:36:26:B0:92:26:CE:77:28:5B:00:FB:F8
            X509v3 Authority Key Identifier:
                keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:fb:49:0c:a7:b0:ef:59:9c:4f:07:d8:14:35:18:ec:39:
         5b:a4:6c:fb:35:ed:be:fe:e7:55:1b:47:f8:0a:e5:42:96:89:
         44:52:a1:92:39:1b:4d:4f:58:2a:96:08:9c:70:33:25:91:5b:
         39:c6:d0:1a:3d:c4:88:81:b9:23:d3:3b:3d:d6:99:79:c2:52:
         ac:b1:2d:37:5e:ba:e3:6d:fb:fa:b8:6d:48:c5:7c:31:54:15:
         83:88:c8:52:61:f5:2c:e8:98:a2:f3:68:ab:c6:0e:0c:14:35:
         31:6c:de:62:89:b5:be:81:51:e9:42:6d:2a:ff:20:6d:fb:91:
         85:52:cf:99:51:42:13:a5:cc:bc:4b:23:31:f6:1d:0f:47:55:
         5a:27:80:1d:09:2a:71:64:d7:99:e1:67:24:68:bb:39:d0:a7:
         22:4a:55:ff:23:b4:d7:fe:71:9d:f9:79:e8:f2:83:f6:41:97:
         fa:eb:7c:1f:f3:66:89:4c:00:18:25:c1:2a:1d:95:f6:8c:f1:
         70:ee:16:b7:91:85:fa:6e:e9:90:c6:fb:0c:7e:c0:a7:10:53:
         40:1f:87:bc:30:db:b1:be:fd:2b:8f:21:1d:e1:8b:b8:65:f3:
         6c:ce:42:19:49:18:08:64:5f:8d:b4:06:34:54:62:99:5f:89:
         99:5b:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----