Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
File:                     qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json)
Hash identifier:          xrzyz5s/R1spwm3BQkMudz8DqeQpiXgGckklv7nPCRc=
Subject key identifier:   49:43:CC:97:FC:AB:33:73:65:4F:11:45:70:E1:6C:33:5D:30:87:51
Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
Certificate issuer:       /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Certificate serial:       01962ECF8EAB267314C7EE1D61F8B42E2AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
Manifest number:          028C
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: B6LFZjYHU7pboOiG3XcQTh+EQsaQymIDiBgZA9R6mrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:ab:26:73:14:c7:ee:1d:61:f8:b4:2e:2a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=4943cc97fcab3373654f114570e16c335d308751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:30:af:01:05:e3:17:a2:2d:64:d1:8f:9a:
                    30:d5:68:74:35:d8:20:8a:c9:11:9a:2f:f1:18:55:
                    7e:50:a5:4c:d2:0e:9d:cf:62:cb:da:ef:7a:b8:ce:
                    18:70:79:67:a1:c3:d5:77:67:77:ec:87:e9:f7:26:
                    74:ac:91:ec:36:5e:ee:3b:9c:c3:2a:9e:e9:6d:c4:
                    a9:59:33:f0:d8:fc:5a:fb:f9:c8:ef:d7:42:ca:97:
                    74:ef:a2:86:a1:c2:fc:cb:aa:55:08:5a:22:29:5e:
                    43:bf:c9:dc:be:00:23:b1:35:70:7f:c0:a5:8e:1b:
                    e0:f3:91:35:db:79:fe:8a:a9:48:0c:01:6e:34:dd:
                    f7:33:90:81:8b:78:48:3f:40:33:c0:be:e2:d2:09:
                    fc:b5:e0:70:df:10:e3:cd:df:3e:c8:4e:ad:19:d4:
                    da:cd:7c:d1:5e:59:f2:7c:77:d2:ea:15:f7:61:25:
                    08:e3:f0:b5:a8:c7:33:7e:37:21:96:2c:18:f3:49:
                    51:ab:1b:ab:2c:55:b1:62:3b:4b:a7:55:9d:1d:e1:
                    e9:84:bf:dc:9d:2e:9e:9e:4f:19:3c:fb:04:fb:7a:
                    1a:5a:30:93:64:42:28:7f:31:69:af:66:9f:78:cb:
                    89:e6:69:16:fd:f7:ca:5e:95:51:42:b4:cc:29:f3:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:43:CC:97:FC:AB:33:73:65:4F:11:45:70:E1:6C:33:5D:30:87:51
            X509v3 Authority Key Identifier:
                keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:1f:06:34:9f:d4:ff:40:ec:5f:74:fc:fb:3b:12:d3:68:
         bf:1b:d5:9b:cc:1e:77:fc:6c:bc:08:82:6b:d6:8b:f8:6b:f5:
         ed:92:0c:90:c8:1e:be:74:8f:fc:49:c3:8b:d7:a7:e5:b9:0e:
         cf:93:58:54:06:c7:da:75:ca:14:65:2b:24:e3:1e:3c:5a:2c:
         44:43:c1:6a:ae:bb:82:41:eb:93:05:6a:e0:d5:cd:ec:0c:6c:
         08:02:cd:e8:8f:a4:0e:58:68:6a:fd:64:2f:93:74:4b:61:11:
         6b:11:4b:6f:02:66:da:9d:38:80:a8:42:1d:ba:cc:a0:8e:79:
         a5:21:72:2d:64:08:7f:61:8e:3d:14:8f:65:32:fa:77:8c:0c:
         c4:14:84:ff:a4:44:e2:cd:5c:80:64:87:ae:1d:f1:05:11:e0:
         8a:31:94:c2:00:cd:13:c5:d9:05:5c:cc:15:cc:cc:d1:4a:2d:
         3f:af:3c:0d:da:29:f1:24:61:2d:1e:6c:75:6d:05:3a:e3:a5:
         5b:09:86:43:d0:28:f2:9e:86:ca:1f:be:38:10:c7:88:a1:dc:
         5c:e2:93:54:97:96:e1:61:5c:7e:7e:3b:8b:4f:89:0e:73:df:
         5d:ae:38:b0:fb:13:54:b3:40:1a:9d:dc:ef:b8:40:47:f2:7f:
         81:1b:f1:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz46rJnMUx+4dYfi0Liq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTZlNjc5MjU4MjFlNGI4NzljODAzZWMwYTUyMjQ1Zjk2
NzNhZDAwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
Eyg0OTQzY2M5N2ZjYWIzMzczNjU0ZjExNDU3MGUxNmMzMzVkMzA4NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsywwrwEF4xeiLWTRj5ow1Wh0Ndgg
iskRmi/xGFV+UKVM0g6dz2LL2u96uM4YcHlnocPVd2d37Ifp9yZ0rJHsNl7uO5zD
Kp7pbcSpWTPw2Pxa+/nI79dCypd076KGocL8y6pVCFoiKV5Dv8ncvgAjsTVwf8Cl
jhvg85E123n+iqlIDAFuNN33M5CBi3hIP0AzwL7i0gn8teBw3xDjzd8+yE6tGdTa
zXzRXlnyfHfS6hX3YSUI4/C1qMczfjchliwY80lRqxurLFWxYjtLp1WdHeHphL/c
nS6enk8ZPPsE+3oaWjCTZEIofzFpr2afeMuJ5mkW/ffKXpVRQrTMKfN8NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElDzJf8qzNzZU8RRXDhbDNdMIdRMB8GA1UdIwQY
MBaAFKqm5nklgh5Lh5yAPsClIkX5ZzrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82NGFlNWEtODYyMi00NWUyLTkzMjct
NTEyZjU2NWFjMDExLzEvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82NGFlNWEtODYyMi00NWUyLTkzMjctNTEyZjU2NWFjMDEx
LzEvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXl0fBjSf
1P9A7F90/Ps7EtNovxvVm8wed/xsvAiCa9aL+Gv17ZIMkMgevnSP/EnDi9en5bkO
z5NYVAbH2nXKFGUrJOMePFosREPBaq67gkHrkwVq4NXN7AxsCALN6I+kDlhoav1k
L5N0S2ERaxFLbwJm2p04gKhCHbrMoI55pSFyLWQIf2GOPRSPZTL6d4wMxBSE/6RE
4s1cgGSHrh3xBRHgijGUwgDNE8XZBVzMFczM0UotP688Ddop8SRhLR5sdW0FOuOl
WwmGQ9Ao8p6Gyh++OBDHiKHcXOKTVJeW4WFcfn47i0+JDnPfXa44sPsTVLNAGp3c
77hAR/J/gRvxrg==
-----END CERTIFICATE-----