Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File:                     QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier:          WLiua+0XujQ6bBQYNv1R1qILER/rImd8+NWgeqR4nNg=
Subject key identifier:   28:67:DB:6B:86:F9:13:E3:89:40:29:D4:52:D8:7A:12:D4:6D:80:0F
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       0195E121EBE7926CF5113C404F5C5ECEB863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number:          14C9
Signing time:             Sat 29 Mar 2025 09:00:51 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:51 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:51 +0000
Files and hashes:         1: 0UiMAD3K1Vd_o1ukey_EamOgfsg.roa (hash: /lgJM2bqi/sUpmdCb7crrQqVayvXqEJ8evDSByU3DJU=)
                          2: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: Wl4rv/AQPInPwJmcPX37A7WMSPufMPzbRq2IMxRS0Ds=)
                          3: aVnXSxl3A9imF58Ni6PA9o97Lt0.roa (hash: 1b03aGZyiDI4vZq8xAQwMk9wWsMeLl0pjrQrWqhenxw=)
                          4: misEsljA75nAA5oIsh_k4GVCg4w.roa (hash: p4BzWp3j9j27Wjuz+V0a+txHqIiOhQ+ybn3eqzzf6rU=)
                          5: ujK7196Gk_c3ddVaz2vNjb1yuKM.roa (hash: oPbTKsm4Ke6sVA27ztN+8OGkGTX5DqK9hqJSWTYFs3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:21:eb:e7:92:6c:f5:11:3c:40:4f:5c:5e:ce:b8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: Mar 29 09:00:51 2025 GMT
            Not After : Mar 30 09:00:51 2025 GMT
        Subject: CN=2867db6b86f913e3894029d452d87a12d46d800f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:b1:22:c2:94:92:ce:54:81:57:3a:93:da:
                    f2:23:b1:e8:59:d8:6c:01:07:53:ca:89:69:3f:d6:
                    c3:70:4f:ac:68:05:a4:fc:05:02:0b:ad:70:7b:9d:
                    1a:fd:81:1d:d0:35:d0:19:97:fb:ca:84:34:6b:66:
                    46:56:6a:84:dc:cd:6a:e4:d5:d9:91:09:bd:9e:f0:
                    fe:d9:96:d1:09:45:2c:b1:1b:93:0c:2c:44:2a:49:
                    57:c7:f4:f1:2f:56:b2:62:a3:3f:ca:57:18:cb:ac:
                    61:ce:14:22:e8:9f:e1:af:bb:84:e9:86:d9:1d:27:
                    40:db:92:11:0e:c8:6d:56:93:fc:00:ad:06:ca:cf:
                    80:2a:fb:6c:88:1b:68:c4:46:15:1c:dc:9d:80:69:
                    79:cc:33:fe:9e:50:54:47:2a:19:8b:52:f9:f1:e2:
                    5f:f7:10:37:d8:00:9a:3c:b1:8a:99:f8:c0:84:56:
                    39:bd:39:1a:ce:d2:ac:85:41:a5:4b:a5:f3:56:08:
                    dd:30:ae:b6:6d:b8:1b:5a:c8:48:6b:7f:4c:58:ec:
                    74:25:05:ee:7e:e6:7b:e9:8b:25:e0:12:0f:48:db:
                    d4:78:67:2d:51:7d:c3:af:a1:f5:1d:a8:8b:88:a5:
                    a2:54:1d:60:26:15:bf:38:05:42:be:b9:5f:47:99:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:67:DB:6B:86:F9:13:E3:89:40:29:D4:52:D8:7A:12:D4:6D:80:0F
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:53:4d:c2:4e:c5:3d:b3:e4:b3:d6:55:3c:b2:59:08:01:8c:
         fc:77:7a:3c:98:5c:88:52:8b:b9:d0:87:43:ea:a4:51:a8:0d:
         22:f9:c0:2d:8e:13:9d:90:c3:a7:4a:9c:8e:af:0a:8e:2d:28:
         d1:00:6f:74:98:81:14:3d:5b:a6:0b:ee:b3:b7:3a:15:3a:3c:
         2e:8f:c8:52:1e:60:f0:25:79:15:6c:7f:02:5b:86:80:f0:33:
         95:82:5a:04:ab:fa:72:73:13:b6:36:9a:c3:4b:f2:87:b6:f0:
         8f:96:1f:f8:f5:49:94:b8:c8:98:aa:96:37:7d:ab:8a:4b:a8:
         5c:03:3f:fa:11:46:49:f4:4a:a0:1c:a0:b2:ee:95:06:f6:67:
         f0:c8:be:4a:51:bf:45:e0:3f:20:b5:ef:c1:ba:2d:44:68:97:
         5d:b8:f5:e8:7a:e1:50:67:39:34:fc:68:7e:b1:47:3d:f6:0e:
         b0:67:2d:e4:32:36:94:ec:ea:68:35:5f:d1:f0:f2:9f:c5:b8:
         46:e0:66:77:cd:30:48:c0:f2:58:3a:73:e2:a1:61:10:bb:91:
         98:07:bf:5b:bc:b5:b8:82:42:88:18:33:14:73:f8:f6:26:ca:
         49:67:b5:62:a6:06:cc:53:fd:df:31:e4:43:32:b3:9a:75:99:
         9d:75:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----