Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
File:                     QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft (raw, json)
Hash identifier:          M3jg4KMdGbwoQrpd5n88DCwxasoUbWF3pKxSHp4qhZs=
Subject key identifier:   05:49:C6:C0:18:C2:DE:52:7C:B5:FC:EE:BC:4F:9C:0E:23:53:EF:19
Authority key identifier: 42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53
Certificate issuer:       /CN=42d395fdc17645ef5c34ad8e531d1224d3146453
Certificate serial:       018EC05F63E13F140504D62CDB9C860DE23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
Manifest number:          0234
Signing time:             Tue 09 Apr 2024 01:01:00 +0000
Manifest this update:     Tue 09 Apr 2024 01:01:00 +0000
Manifest next update:     Wed 10 Apr 2024 01:01:00 +0000
Files and hashes:         1: QtOV_cF2Re9cNK2OUx0SJNMUZFM.crl (hash: aFBNF3DvBK7Uw4HZNIjxOeMAk8ZMjGdLRl/j8JANVfg=)
                          2: lFHrL_YNvigyYAgmHmx4kwF4fjA.roa (hash: TdWLngCvYzOj7/aalnreTfxAUVNBAlAPeR2kOZr8gMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c0:5f:63:e1:3f:14:05:04:d6:2c:db:9c:86:0d:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42d395fdc17645ef5c34ad8e531d1224d3146453
        Validity
            Not Before: Apr  9 01:01:00 2024 GMT
            Not After : Apr 10 01:01:00 2024 GMT
        Subject: CN=0549c6c018c2de527cb5fceebc4f9c0e2353ef19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:b8:96:95:cd:62:f9:5f:f8:00:dc:4e:66:
                    0c:6e:3c:9d:e0:61:96:86:86:fa:f9:88:49:5d:f8:
                    49:39:ec:ff:ef:a3:76:90:50:a8:f8:af:eb:01:75:
                    85:9b:c8:6b:b8:65:8b:d0:95:31:ff:9e:d6:8e:6a:
                    4b:44:8d:a5:58:5b:04:8a:1b:cd:0a:5e:99:ad:b6:
                    62:a0:72:f9:45:ca:9b:e7:35:95:c6:19:8f:c1:c5:
                    1b:ff:31:e8:5f:72:1b:b4:01:2b:30:94:9b:c2:c1:
                    12:03:40:e2:3e:04:db:4b:d9:b5:1e:a3:90:b1:20:
                    16:d5:5d:81:2d:6f:c3:40:e2:8c:19:98:18:3b:fe:
                    2e:ad:0c:60:25:b3:4f:90:1b:f6:f5:48:ef:d3:d3:
                    37:c5:5e:41:e9:9a:2f:c4:cc:37:9d:f1:a6:dc:15:
                    9a:bf:9a:7f:83:a1:4d:40:0d:9f:aa:f0:f4:cb:df:
                    1a:34:c4:81:66:c2:75:1f:b5:35:55:86:cc:9f:a7:
                    81:fb:32:3d:ed:fa:37:e2:bc:5d:06:09:3f:1f:27:
                    c8:9b:87:65:59:24:26:c6:65:56:eb:6c:aa:27:f5:
                    e7:b4:37:78:58:c4:4a:50:2e:9d:c9:b9:75:06:e2:
                    57:3d:17:48:c7:86:c7:ad:c5:0c:5e:9f:84:f7:19:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:C6:C0:18:C2:DE:52:7C:B5:FC:EE:BC:4F:9C:0E:23:53:EF:19
            X509v3 Authority Key Identifier:
                keyid:42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:96:73:ac:b1:aa:aa:30:eb:3c:18:26:cd:94:d2:41:e4:
         ff:15:98:5b:19:1e:44:a9:98:51:53:0c:c7:fa:ef:7d:a5:35:
         0e:ec:da:6c:c2:96:db:4b:84:f0:57:2a:66:8a:a3:53:0c:13:
         f8:55:d7:d7:dc:6a:1a:4c:7f:73:07:1b:81:5b:09:44:66:59:
         62:06:09:16:43:6f:50:ba:cb:2b:8e:c1:bf:46:21:f3:86:b2:
         a3:76:e4:af:e6:ec:4f:af:7e:00:74:71:80:ea:51:d1:1d:4f:
         68:34:2a:e1:0e:1c:63:7f:41:ea:bb:df:ba:75:c6:e7:94:32:
         fe:d2:7e:57:fe:1b:05:86:f9:55:bd:ec:c7:07:5c:90:f6:53:
         c5:38:54:e9:57:df:21:06:a2:a7:31:bb:25:91:be:b6:0c:a3:
         a2:92:b9:cb:6c:20:76:2e:de:e5:08:bd:87:0b:f4:db:30:b3:
         a5:88:8e:43:e9:fb:66:ce:9f:58:f2:2b:ec:0c:82:91:37:9f:
         16:60:ad:eb:92:aa:02:06:64:95:5f:1d:5c:d5:0e:78:f3:b1:
         93:c3:a8:fc:94:31:a4:30:6a:43:91:24:27:35:c2:05:92:a4:
         d8:67:85:be:9a:a6:7d:26:25:e4:3f:75:e8:a9:c0:79:34:60:
         dc:ce:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----