Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
File:                     qvNQYhzAHooe03KB3zKwlxy95Vc.mft (raw, json)
Hash identifier:          AGFoNLQ6fi8D6xsdxze+ikayCCP2k3+fRVXTj6X7qCw=
Subject key identifier:   FF:EF:C1:AC:62:90:BA:F6:D0:D2:00:41:59:51:59:E0:9F:2A:AC:E2
Authority key identifier: AA:F3:50:62:1C:C0:1E:8A:1E:D3:72:81:DF:32:B0:97:1C:BD:E5:57
Certificate issuer:       /CN=aaf350621cc01e8a1ed37281df32b0971cbde557
Certificate serial:       01962F06BB6EC650890307CDABDA82CEAED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvNQYhzAHooe03KB3zKwlxy95Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: qvNQYhzAHooe03KB3zKwlxy95Vc.crl (hash: j3x+ix2NS6H2GY5YOVHE4Nq324YrxKwXRzSSfk/ICpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bb:6e:c6:50:89:03:07:cd:ab:da:82:ce:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf350621cc01e8a1ed37281df32b0971cbde557
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=ffefc1ac6290baf6d0d20041595159e09f2aace2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:6b:cd:70:e9:5d:e9:25:81:74:df:58:48:
                    a7:a5:96:e2:ca:d6:3d:7f:cf:e2:35:40:a1:37:82:
                    10:c0:f7:ca:0f:5a:72:65:a7:c0:32:e6:0f:21:3d:
                    a3:e9:88:a2:9f:b7:4c:d0:92:b2:dd:34:e6:2e:0e:
                    99:8a:de:aa:79:14:33:61:27:84:36:3b:fb:78:57:
                    b5:e3:b3:e2:f0:f7:b5:0a:75:b9:ae:57:1a:d6:83:
                    48:72:aa:ac:b7:32:7e:ff:04:4e:02:a6:54:9b:60:
                    f3:e7:38:a8:02:bc:63:de:5f:13:cb:b5:79:ad:34:
                    cb:7e:94:a1:fb:d9:5c:7c:96:1a:f4:32:2d:6f:fa:
                    77:d9:3a:36:30:0e:10:57:6e:eb:24:ac:ac:77:e8:
                    86:93:ea:0c:48:64:6d:8a:7f:fc:00:59:a7:a7:05:
                    68:f7:ac:f6:0e:33:30:d7:71:98:a7:f4:3f:60:06:
                    d6:cb:ed:80:8f:52:a9:a7:4a:58:3b:ce:44:43:43:
                    1e:2b:5c:c8:96:07:92:2c:b5:47:a9:1d:cc:63:62:
                    f0:b3:6a:a8:b7:93:61:50:26:07:1f:aa:b1:c4:b4:
                    93:4b:84:b7:6e:9e:b5:00:66:16:11:04:ef:ee:a6:
                    54:7b:e6:ea:f6:d6:d5:13:ca:a5:9e:a9:60:92:95:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EF:C1:AC:62:90:BA:F6:D0:D2:00:41:59:51:59:E0:9F:2A:AC:E2
            X509v3 Authority Key Identifier:
                keyid:AA:F3:50:62:1C:C0:1E:8A:1E:D3:72:81:DF:32:B0:97:1C:BD:E5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvNQYhzAHooe03KB3zKwlxy95Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:68:9e:39:65:4c:f7:b1:51:2e:0b:98:b9:9a:13:0f:65:
         b7:76:04:1c:61:19:bb:14:a6:b4:29:69:1c:14:63:d7:0f:f2:
         2d:8a:7a:73:99:cf:6b:ae:b3:ea:08:59:a2:0b:0c:2b:c0:98:
         b6:e0:b2:7f:6a:de:36:ff:40:bc:fe:5f:ee:f0:c9:38:f4:43:
         3a:c4:a4:69:cd:3d:26:7e:e0:29:34:8d:e1:93:c2:e7:53:2b:
         ff:49:da:43:bf:a2:f9:94:76:ea:cc:00:81:a1:4a:b8:13:bb:
         ee:e0:a1:1b:25:3b:fc:dc:93:cc:87:ef:44:88:64:a2:f1:01:
         16:fe:31:39:4b:f0:48:45:f1:47:5a:01:fc:64:60:1b:25:74:
         d3:d7:ae:30:36:41:67:74:fd:27:c0:6e:d5:3b:b5:70:08:5b:
         5c:97:80:e2:92:c2:24:da:4c:17:88:06:29:90:b6:25:f1:96:
         9c:63:92:1d:f0:7e:27:cb:f6:34:ea:a5:09:fe:e5:16:5e:0a:
         03:8c:75:08:e1:10:3f:93:70:2e:24:6c:ec:4f:13:37:7f:0d:
         7c:e3:94:da:9a:a7:ad:67:86:c8:be:e8:70:50:3c:a1:e0:9c:
         0c:5e:44:76:c0:02:93:09:1a:05:e8:6b:ba:97:c8:48:85:f1:
         63:c8:86:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrtuxlCJAwfNq9qCzq7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjM1MDYyMWNjMDFlOGExZWQzNzI4MWRmMzJiMDk3MWNi
ZGU1NTcwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
EyhmZmVmYzFhYzYyOTBiYWY2ZDBkMjAwNDE1OTUxNTllMDlmMmFhY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUJrzXDpXeklgXTfWEinpZbiytY9
f8/iNUChN4IQwPfKD1pyZafAMuYPIT2j6Yiin7dM0JKy3TTmLg6Zit6qeRQzYSeE
Njv7eFe147Pi8Pe1CnW5rlca1oNIcqqstzJ+/wROAqZUm2Dz5zioArxj3l8Ty7V5
rTTLfpSh+9lcfJYa9DItb/p32To2MA4QV27rJKysd+iGk+oMSGRtin/8AFmnpwVo
96z2DjMw13GYp/Q/YAbWy+2Aj1Kpp0pYO85EQ0MeK1zIlgeSLLVHqR3MY2Lws2qo
t5NhUCYHH6qxxLSTS4S3bp61AGYWEQTv7qZUe+bq9tbVE8qlnqlgkpVkXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/vwaxikLr20NIAQVlRWeCfKqziMB8GA1UdIwQY
MBaAFKrzUGIcwB6KHtNygd8ysJccveVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZOUVloekFIb29lMDNLQjN6S3dseHk5NVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mODEyYzctYTg1ZC00MDQwLThiOTkt
NzVhOGIwOTc0ZTIwLzEvcXZOUVloekFIb29lMDNLQjN6S3dseHk5NVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mODEyYzctYTg1ZC00MDQwLThiOTktNzVhOGIwOTc0ZTIw
LzEvcXZOUVloekFIb29lMDNLQjN6S3dseHk5NVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAautonjll
TPexUS4LmLmaEw9lt3YEHGEZuxSmtClpHBRj1w/yLYp6c5nPa66z6ghZogsMK8CY
tuCyf2reNv9AvP5f7vDJOPRDOsSkac09Jn7gKTSN4ZPC51Mr/0naQ7+i+ZR26swA
gaFKuBO77uChGyU7/NyTzIfvRIhkovEBFv4xOUvwSEXxR1oB/GRgGyV009euMDZB
Z3T9J8Bu1Tu1cAhbXJeA4pLCJNpMF4gGKZC2JfGWnGOSHfB+J8v2NOqlCf7lFl4K
A4x1COEQP5NwLiRs7E8TN38NfOOU2pqnrWeGyL7ocFA8oeCcDF5EdsACkwkaBehr
upfISIXxY8iGng==
-----END CERTIFICATE-----