Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.mft
File:                     QL_eNYm0RMN59zNggxsd2OovhwM.mft (raw, json)
Hash identifier:          aUkj4Y74CWFBb7y8Y8vdDutA38TGmaCZrB/btszHUfU=
Subject key identifier:   01:FC:D9:FE:23:68:76:B9:80:5A:81:00:15:0A:F2:36:F4:A0:59:49
Authority key identifier: 40:BF:DE:35:89:B4:44:C3:79:F7:33:60:83:1B:1D:D8:EA:2F:87:03
Certificate issuer:       /CN=40bfde3589b444c379f73360831b1dd8ea2f8703
Certificate serial:       01962DF3F6767D541CCA2D0F19BE40C400D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QL_eNYm0RMN59zNggxsd2OovhwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.mft
Manifest number:          06F9
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: QL_eNYm0RMN59zNggxsd2OovhwM.crl (hash: jkkM6xS2W+owZLyGaZVG88IDlfvq7f+deDReMXk1RGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f6:76:7d:54:1c:ca:2d:0f:19:be:40:c4:00:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bfde3589b444c379f73360831b1dd8ea2f8703
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=01fcd9fe236876b9805a8100150af236f4a05949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:06:65:21:95:b7:9e:00:57:c2:bd:3c:36:
                    ed:af:08:64:5b:bd:c7:69:eb:e2:59:a7:d3:43:fe:
                    bf:4c:12:53:15:6b:d3:b1:4d:5c:d5:4e:43:88:df:
                    e6:1f:67:5a:54:5f:40:36:d1:18:8a:20:96:9b:8e:
                    0c:4e:01:3a:c2:43:d0:af:7f:0f:22:33:38:c8:74:
                    ac:13:d4:69:7f:73:55:f7:4f:97:b4:0f:eb:e1:95:
                    80:81:44:01:87:11:f0:2e:2d:19:8b:da:53:a7:64:
                    2b:23:c2:27:91:4f:27:ea:54:45:67:75:a1:e6:d9:
                    50:4c:56:84:11:47:5d:31:c4:c6:29:7e:f2:bb:fa:
                    a7:dc:c1:4e:23:35:01:43:31:46:60:f6:41:52:e9:
                    74:d7:ef:ba:1f:c2:d0:bb:8d:a1:2f:c5:71:3a:ae:
                    7a:eb:8c:e6:53:f4:87:87:ea:ac:6d:0a:ff:c7:1b:
                    0e:0b:72:5a:6b:b0:15:77:e2:73:cd:9f:46:fc:80:
                    e5:f5:d1:0c:da:2a:66:b6:08:f9:bc:a0:d6:cb:13:
                    bc:89:a0:45:9e:02:bd:40:21:bc:be:ae:ea:57:2e:
                    95:ce:87:83:61:51:15:2a:de:21:c5:d1:ff:ac:88:
                    82:04:e6:5c:b9:6d:d5:92:1a:63:19:e4:08:19:fa:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FC:D9:FE:23:68:76:B9:80:5A:81:00:15:0A:F2:36:F4:A0:59:49
            X509v3 Authority Key Identifier:
                keyid:40:BF:DE:35:89:B4:44:C3:79:F7:33:60:83:1B:1D:D8:EA:2F:87:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_eNYm0RMN59zNggxsd2OovhwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:05:6d:ed:3a:1f:d1:5e:7e:9e:ac:ff:b6:04:8c:e5:93:a9:
         83:e1:2d:17:cd:c3:c6:ba:74:ce:e4:78:73:0f:1f:34:2e:04:
         09:b3:14:af:7a:d9:8e:84:24:c8:5a:e4:d0:62:53:31:d2:f4:
         96:6f:5b:d8:66:a6:9b:da:45:d6:9d:bd:f8:1b:38:ff:30:14:
         ef:ae:ff:ee:3a:9a:ec:e5:38:ca:72:f0:a6:71:3e:3e:d2:fa:
         34:df:69:5a:5e:f6:f6:6a:8b:13:d6:66:9b:22:b6:0d:e4:bc:
         56:82:8c:b8:0b:65:25:62:72:f2:7c:50:da:66:a3:d3:a0:75:
         ab:f2:27:4d:90:b3:9d:f7:6c:53:2f:ae:84:0c:c8:be:22:89:
         18:7c:80:1d:9a:64:74:75:2f:bf:70:5c:6d:8a:f2:7f:cd:63:
         ff:36:8e:92:01:c5:8b:63:8a:bb:75:00:7a:5c:2c:dc:f8:0e:
         0a:a5:99:98:e6:35:26:0a:4f:95:5e:90:ca:d5:0b:02:a9:57:
         27:48:02:f9:bb:9a:a2:2b:a6:2c:eb:45:83:95:6d:4f:c3:7a:
         9a:1c:e5:10:ec:92:b2:77:55:e0:54:4d:33:14:c4:8c:51:96:
         a0:df:68:1a:a4:9d:d6:48:ff:fd:c2:09:9a:52:6f:39:21:d8:
         c6:c4:46:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/Z2fVQcyi0PGb5AxADVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYmZkZTM1ODliNDQ0YzM3OWY3MzM2MDgzMWIxZGQ4ZWEy
Zjg3MDMwHhcNMjUwNDEzMDcwMTI0WhcNMjUwNDE0MDcwMTI0WjAzMTEwLwYDVQQD
EygwMWZjZDlmZTIzNjg3NmI5ODA1YTgxMDAxNTBhZjIzNmY0YTA1OTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrAGZSGVt54AV8K9PDbtrwhkW73H
aeviWafTQ/6/TBJTFWvTsU1c1U5DiN/mH2daVF9ANtEYiiCWm44MTgE6wkPQr38P
IjM4yHSsE9Rpf3NV90+XtA/r4ZWAgUQBhxHwLi0Zi9pTp2QrI8InkU8n6lRFZ3Wh
5tlQTFaEEUddMcTGKX7yu/qn3MFOIzUBQzFGYPZBUul01++6H8LQu42hL8VxOq56
64zmU/SHh+qsbQr/xxsOC3Jaa7AVd+JzzZ9G/IDl9dEM2ipmtgj5vKDWyxO8iaBF
ngK9QCG8vq7qVy6VzoeDYVEVKt4hxdH/rIiCBOZcuW3VkhpjGeQIGfoeWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH82f4jaHa5gFqBABUK8jb0oFlJMB8GA1UdIwQY
MBaAFEC/3jWJtETDefczYIMbHdjqL4cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxfZU5ZbTBSTU41OXpOZ2d4c2QyT292aHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zYmEwMTEtZGJlZi00NTc3LTllMDAt
NTg4MDE5YTZiNWNiLzEvUUxfZU5ZbTBSTU41OXpOZ2d4c2QyT292aHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zYmEwMTEtZGJlZi00NTc3LTllMDAtNTg4MDE5YTZiNWNi
LzEvUUxfZU5ZbTBSTU41OXpOZ2d4c2QyT292aHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAVt7Tof
0V5+nqz/tgSM5ZOpg+EtF83Dxrp0zuR4cw8fNC4ECbMUr3rZjoQkyFrk0GJTMdL0
lm9b2Gamm9pF1p29+Bs4/zAU767/7jqa7OU4ynLwpnE+PtL6NN9pWl729mqLE9Zm
myK2DeS8VoKMuAtlJWJy8nxQ2maj06B1q/InTZCznfdsUy+uhAzIviKJGHyAHZpk
dHUvv3BcbYryf81j/zaOkgHFi2OKu3UAelws3PgOCqWZmOY1JgpPlV6QytULAqlX
J0gC+buaoiumLOtFg5VtT8N6mhzlEOySsndV4FRNMxTEjFGWoN9oGqSd1kj//cIJ
mlJvOSHYxsRG7g==
-----END CERTIFICATE-----