Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
File:                     QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft (raw, json)
Hash identifier:          gWYc/LgYP15wgYA2rg+Sm4YakvWtkYqirigfz9TDe3M=
Subject key identifier:   43:66:62:1D:26:16:63:D8:B4:A1:0A:E5:65:0A:BA:8F:A4:DD:FB:B5
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Certificate issuer:       /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial:       01974446C501DE1435AECD6C87316BCCD925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
Manifest number:          159E
Signing time:             Fri 06 Jun 2025 08:06:17 +0000
Manifest this update:     Fri 06 Jun 2025 08:06:17 +0000
Manifest next update:     Sat 07 Jun 2025 08:06:17 +0000
Files and hashes:         1: 0lMFcdtNp26YfQNn5iPba6FXABM.roa (hash: qwNKo6mD7mKcqzNSQWlJycWA8l92Zl/i3CclTpihme0=)
                          2: 1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa (hash: GLjRp44S9t7k9/gNlz4F+5PxTttEffZtUX3wedwaMj4=)
                          3: AffVDnLnSLh0V7EinGng8G5nPjQ.roa (hash: hYx/BpJDcyTVNDkPP1YvXND6zbbHVisFIC82719FbiA=)
                          4: EXZdBvxkC6BWuQw7LF1L44zgJrQ.roa (hash: w9aCmXGe7EhAqGQ9c8EQN7jMSWaf9qgh1JTbamcH/ig=)
                          5: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl (hash: 9qgMRSkuSjC0fiMCsKcEhoaeJZhPcpWWr/u3LwbvFq8=)
                          6: ml8HfpgZooz4Fs5VNgkwYze5t_M.roa (hash: KgRvypNeE4qoLntupCEeIzNpWhk2E20WSo1RiDNCO2U=)
                          7: ngnhG7uE9YHHo9YXMg4zT5zGeQk.roa (hash: a+4S0fbb+Q4assLZ0oTVcSUfUQDBn8eYYqxTad0XqL0=)
                          8: o-iB_z6zZ8T4dnfYBhxo3ehv7GY.roa (hash: qDZQwBk+mOB1nlqVggQlXqd4I4QnKFo5J9jwMlLIjq4=)
                          9: oI0m6JBhMDS_eEyHOtg7vo158Js.roa (hash: l4BG5WDsCRX9NtPnj37JkO0LvM0tJm7+HRwBv6mDOds=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:44:46:c5:01:de:14:35:ae:cd:6c:87:31:6b:cc:d9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
        Validity
            Not Before: Jun  6 08:06:17 2025 GMT
            Not After : Jun  7 08:06:17 2025 GMT
        Subject: CN=4366621d261663d8b4a10ae5650aba8fa4ddfbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:a1:fc:a4:ea:ac:c8:f0:74:39:07:56:77:
                    12:3f:3f:38:71:23:5a:d6:4a:ff:5f:08:ed:89:76:
                    bf:a2:07:2c:84:cd:1b:43:54:27:b1:e2:21:ac:b2:
                    b6:8e:03:41:05:af:38:5b:eb:f7:8d:4c:7c:90:56:
                    18:3e:55:11:ca:3d:a8:70:e6:9a:db:29:ee:a0:ab:
                    d7:54:49:00:7d:99:5c:b3:2d:9f:74:cc:b2:8f:c3:
                    7b:41:1e:29:e7:a5:80:8f:fa:64:c5:e0:26:e1:62:
                    6f:cd:51:ae:8f:45:dc:2a:3c:69:10:e5:50:b5:ae:
                    ae:3f:c9:67:66:21:3f:53:5a:8f:6d:bb:c7:d8:4e:
                    d3:9f:71:23:64:91:68:a7:df:f0:e6:32:f5:80:8d:
                    e5:c5:b7:38:08:58:7a:1e:ce:53:ac:71:0e:eb:e8:
                    17:82:79:19:6e:0e:ce:83:09:9e:a7:99:3c:d5:59:
                    1a:38:ea:8f:6d:89:3d:6b:05:53:e4:f9:6e:bf:f1:
                    01:5c:47:3c:41:da:34:c6:3c:d8:40:7b:14:a6:9f:
                    ad:6e:bb:be:86:4b:4a:56:98:88:0f:53:e0:dd:29:
                    b3:6b:f9:dd:51:3a:cf:b9:03:fa:41:8d:d9:27:88:
                    f5:76:5c:ba:80:24:6a:f8:43:8c:81:83:35:27:e3:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:66:62:1D:26:16:63:D8:B4:A1:0A:E5:65:0A:BA:8F:A4:DD:FB:B5
            X509v3 Authority Key Identifier:
                keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:21:27:33:e2:b6:bd:98:f1:86:16:2a:ed:85:35:bf:29:76:
         ae:63:34:b3:2a:d7:31:ce:3f:34:15:70:d5:f2:36:1d:0d:09:
         3e:5d:37:4b:eb:1f:67:81:99:3e:0f:95:3b:b7:47:9d:cc:eb:
         8b:66:5e:b2:24:27:4c:65:d2:5c:ee:08:12:0a:a8:e5:d1:72:
         53:bb:4a:80:8c:fb:a5:b1:96:4e:41:3f:b4:0c:fa:4f:c0:4d:
         69:cd:bc:78:b0:fb:c4:da:35:9e:b0:3e:2c:fc:46:36:b8:b3:
         00:3b:c5:41:05:69:82:46:fa:79:d5:fe:09:52:d6:47:a0:81:
         70:be:43:2a:aa:f6:30:dc:a3:57:d9:96:12:83:ca:ad:f7:25:
         39:b2:88:f5:bc:f0:84:e2:84:3d:79:23:45:88:8d:72:ec:ef:
         25:ee:0b:e5:5a:d0:8f:45:69:68:80:51:c7:54:f5:88:bc:e9:
         a2:91:36:2f:49:c7:89:20:73:42:f5:28:2e:03:34:c4:68:2d:
         0f:37:34:53:0f:81:6b:85:34:b6:5a:28:b5:0a:d8:0e:b6:32:
         7b:33:34:2e:01:cb:f2:68:ed:87:d2:66:46:f4:70:ba:c2:d4:
         84:f4:47:cf:85:d7:28:7a:0e:0a:32:e0:d4:24:e0:f1:ae:97:
         9b:9b:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----