Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File:                     q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier:          fuKDU2c5xxweZslxG8NQAVT/QNZiK7dZPJmaxNOZosQ=
Subject key identifier:   92:58:95:29:C3:B8:13:C5:FB:97:27:83:11:AD:18:B9:AE:C7:0E:1A
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer:       /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial:       01962ECF79C3EE24AE13770436FB7456949C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: UI5NClozL7N-roh3gFDdU89Og_s.roa (hash: 16lVaEuPmCyL0CMlUsRZ43ZBzj6hUjHan0Mt9THux/o=)
                          2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: nuu66gSSO/8FAWl7oyRcXfJKCr80iLmJ0GRlqD5+hPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:79:c3:ee:24:ae:13:77:04:36:fb:74:56:94:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=92589529c3b813c5fb97278311ad18b9aec70e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:21:81:2f:c4:88:db:9b:81:b6:84:60:45:
                    98:9b:0a:c4:7e:72:73:7a:bc:25:62:36:c0:0a:9d:
                    cc:66:64:c1:1a:c0:f3:03:5a:1f:42:47:33:77:22:
                    e2:f1:64:5a:c5:55:84:1a:ca:72:1a:57:95:89:3f:
                    41:cd:ee:be:ee:4b:ab:d2:91:e9:ac:ab:61:f8:22:
                    f4:2f:b5:07:f2:5b:82:ce:10:4f:1c:71:60:0a:aa:
                    14:78:e7:9a:ba:74:95:8e:0b:68:04:19:d3:41:b7:
                    ee:b7:78:14:a9:52:10:c8:18:b0:05:9a:5f:80:85:
                    37:76:3f:98:25:a0:94:25:7f:6d:b5:dc:7c:25:c7:
                    15:19:b5:9c:c0:f9:ac:54:95:3e:d8:69:92:ea:1c:
                    90:71:29:4e:17:66:b3:93:9c:32:ed:5f:a6:32:63:
                    08:61:e1:e9:57:66:70:a8:31:35:49:ad:15:2f:37:
                    d0:1a:3f:a5:0a:04:f7:96:ad:1c:c9:b0:69:ec:19:
                    96:bc:94:66:44:77:10:f8:c6:c4:1a:a9:29:f5:a6:
                    26:3a:0d:21:3c:b6:75:40:3f:f9:2a:9f:61:ae:b5:
                    14:19:c0:3d:1a:5a:0e:52:0f:c0:de:da:bd:f0:0d:
                    65:3d:ad:d9:34:7f:33:6c:b7:2c:91:5a:ff:98:ac:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:58:95:29:C3:B8:13:C5:FB:97:27:83:11:AD:18:B9:AE:C7:0E:1A
            X509v3 Authority Key Identifier:
                keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:9d:ce:99:0e:69:43:f8:82:bb:a4:80:9c:c3:40:7c:ff:
         bb:be:14:7b:30:9a:b6:be:23:9c:a0:58:5f:3e:12:e3:d3:9f:
         1c:a8:64:71:28:31:05:74:34:72:f2:43:90:4d:5b:ab:63:15:
         cc:f1:ff:8c:7e:80:d3:91:a6:ee:49:9a:63:8c:cc:6f:5b:9f:
         fa:20:7b:90:f8:28:63:9c:cd:e3:60:51:27:84:08:92:fe:c6:
         66:04:0d:d5:67:e0:63:c8:18:01:ff:a9:58:05:b0:e6:7d:f3:
         1e:58:1e:c5:93:dd:e2:22:be:7b:d1:82:bc:45:13:eb:24:f8:
         18:fe:6a:14:89:68:63:6e:6a:28:a3:b6:d8:b1:af:ef:68:3a:
         84:0d:6f:b4:3c:ec:d1:ca:53:4d:48:7b:0d:e2:50:d6:64:7f:
         ac:10:ac:8c:78:ff:6b:f3:47:15:35:db:9f:e9:57:ed:d5:ed:
         45:65:c1:09:85:92:24:83:e1:d2:43:3a:44:80:4e:cf:8b:55:
         9c:22:87:c3:29:b3:09:c1:47:a6:ba:42:91:0e:1c:33:50:c4:
         8b:89:d6:57:61:21:4f:50:39:c9:1e:7f:5e:20:ef:5e:48:8a:
         97:d2:aa:37:ee:1c:57:f4:fb:31:c2:81:d2:7b:d7:0d:df:7f:
         73:6b:d2:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3nD7iSuE3cENvt0VpScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODNlNjRmNzJkZDU4ODlmYjEzZGMyMThjNjgzZjZlMmZh
Y2Y1YjIwHhcNMjUwNDEzMTEwMTExWhcNMjUwNDE0MTEwMTExWjAzMTEwLwYDVQQD
Eyg5MjU4OTUyOWMzYjgxM2M1ZmI5NzI3ODMxMWFkMThiOWFlYzcwZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZkhgS/EiNubgbaEYEWYmwrEfnJz
erwlYjbACp3MZmTBGsDzA1ofQkczdyLi8WRaxVWEGspyGleViT9Bze6+7kur0pHp
rKth+CL0L7UH8luCzhBPHHFgCqoUeOeaunSVjgtoBBnTQbfut3gUqVIQyBiwBZpf
gIU3dj+YJaCUJX9ttdx8JccVGbWcwPmsVJU+2GmS6hyQcSlOF2azk5wy7V+mMmMI
YeHpV2ZwqDE1Sa0VLzfQGj+lCgT3lq0cybBp7BmWvJRmRHcQ+MbEGqkp9aYmOg0h
PLZ1QD/5Kp9hrrUUGcA9GloOUg/A3tq98A1lPa3ZNH8zbLcskVr/mKyQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJYlSnDuBPF+5cngxGtGLmuxw4aMB8GA1UdIwQY
MBaAFKuD5k9y3ViJ+xPcIYxoP24vrPWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUt
NTQxZjQ4OTI0OTUyLzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUtNTQxZjQ4OTI0OTUy
LzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB6dzpkO
aUP4grukgJzDQHz/u74UezCatr4jnKBYXz4S49OfHKhkcSgxBXQ0cvJDkE1bq2MV
zPH/jH6A05Gm7kmaY4zMb1uf+iB7kPgoY5zN42BRJ4QIkv7GZgQN1WfgY8gYAf+p
WAWw5n3zHlgexZPd4iK+e9GCvEUT6yT4GP5qFIloY25qKKO22LGv72g6hA1vtDzs
0cpTTUh7DeJQ1mR/rBCsjHj/a/NHFTXbn+lX7dXtRWXBCYWSJIPh0kM6RIBOz4tV
nCKHwymzCcFHprpCkQ4cM1DEi4nWV2EhT1A5yR5/XiDvXkiKl9KqN+4cV/T7McKB
0nvXDd9/c2vSGA==
-----END CERTIFICATE-----