Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File:                     QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier:          rEHBOPhxB4t+740dVYNK1C1zLcjGd/DNg4fpdf3Mxfs=
Subject key identifier:   C0:D4:E2:2A:D4:98:73:EF:13:43:3A:54:11:9A:34:1D:ED:B8:9E:78
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer:       /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial:       01962E2AF6B1BBB101753F01DC7E214CC75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number:          06B6
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: yydmmxgFVQWjYdeeHASPGg3zJwSka5DIFljenPIEkCE=)
                          2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f6:b1:bb:b1:01:75:3f:01:dc:7e:21:4c:c7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=c0d4e22ad49873ef13433a54119a341dedb89e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:4a:ca:fe:c7:6a:97:8e:d5:f8:98:28:8f:
                    3e:a7:84:a5:2a:50:71:44:d0:a5:e9:21:cb:ea:3b:
                    69:63:5b:c3:bf:25:c0:34:a1:d7:bc:1c:b4:25:64:
                    b5:f7:19:7e:6f:7c:6f:6e:a2:ec:24:ca:7b:cb:66:
                    65:26:b4:eb:a1:9f:79:ce:31:9b:20:6d:06:9a:49:
                    e2:b7:c7:10:0f:f5:d8:0b:7a:66:33:72:b4:cd:ac:
                    e5:99:67:4d:98:4c:88:bf:72:41:ae:84:6b:20:6a:
                    88:73:23:a8:3a:52:68:f6:62:f3:54:3a:cd:fe:35:
                    98:c3:f6:61:31:da:5f:f6:07:b9:18:55:76:8f:15:
                    23:3f:1f:4b:47:8b:4e:ae:06:17:ac:5c:92:63:dc:
                    a5:46:75:0d:d1:5c:60:64:cb:63:27:c3:06:36:0a:
                    c7:31:e2:39:e8:7e:c3:42:e1:f4:a4:e4:7b:ba:0b:
                    89:d1:cc:62:35:64:26:6e:c5:ce:d3:b6:a9:81:53:
                    42:32:de:c0:4f:75:01:8d:f0:94:f6:21:71:b7:d5:
                    10:f1:d5:52:bf:e5:5b:8c:59:f0:c9:13:82:4f:a2:
                    ca:25:f1:04:16:3b:6a:4f:bd:af:ba:c5:a2:b3:be:
                    3a:b6:e6:c5:59:75:5b:6e:d6:11:ca:4f:99:ca:06:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D4:E2:2A:D4:98:73:EF:13:43:3A:54:11:9A:34:1D:ED:B8:9E:78
            X509v3 Authority Key Identifier:
                keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:d4:d8:f4:ca:c1:e5:eb:e1:7d:b1:dd:14:64:bc:16:ce:
         4c:3e:5b:d1:f6:5c:49:7c:cc:50:f7:ef:50:a0:74:13:eb:b6:
         fc:41:8c:8e:a4:58:92:0c:89:03:63:f9:84:e5:17:2e:2e:3b:
         f0:29:73:85:35:39:4c:92:4e:fe:82:6f:bc:69:90:3f:9a:f4:
         68:2f:e3:bb:5b:8c:72:e6:93:03:12:44:fd:f0:b0:dc:b5:cb:
         27:ec:e2:2b:c6:e3:20:35:f2:67:69:f9:5f:32:53:5c:49:a5:
         86:7e:83:f3:fa:86:4c:20:75:21:6e:b2:39:3b:5b:db:ed:44:
         12:c5:3a:3d:52:03:ed:0f:71:df:34:2d:30:58:63:96:3a:61:
         83:f9:bf:59:ea:0a:a0:d5:cf:61:87:7b:c2:1a:6c:fa:5e:38:
         19:9e:ff:77:2c:c7:7e:c4:13:30:dd:5a:9b:77:64:f4:3c:c3:
         2f:82:4d:3c:f2:55:e2:b1:7e:3a:55:62:5a:bb:85:b5:fe:3f:
         0f:e1:6c:7d:98:10:88:2d:5f:d3:3e:c6:da:dd:b8:6a:31:48:
         07:fe:01:8a:40:6d:6e:e2:a9:6c:83:af:dd:ff:bd:54:49:7b:
         33:a6:23:6d:ac:ac:c9:17:7d:99:7e:8b:9b:5e:c7:83:0d:87:
         f9:59:e8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvaxu7EBdT8B3H4hTMdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGZhMDE3NTMyZmY2ZDlmYjM4YjQwMDM3ODk2YWZhZjBh
YWNmOGIwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
EyhjMGQ0ZTIyYWQ0OTg3M2VmMTM0MzNhNTQxMTlhMzQxZGVkYjg5ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/9Kyv7HapeO1fiYKI8+p4SlKlBx
RNCl6SHL6jtpY1vDvyXANKHXvBy0JWS19xl+b3xvbqLsJMp7y2ZlJrTroZ95zjGb
IG0Gmknit8cQD/XYC3pmM3K0zazlmWdNmEyIv3JBroRrIGqIcyOoOlJo9mLzVDrN
/jWYw/ZhMdpf9ge5GFV2jxUjPx9LR4tOrgYXrFySY9ylRnUN0VxgZMtjJ8MGNgrH
MeI56H7DQuH0pOR7uguJ0cxiNWQmbsXO07apgVNCMt7AT3UBjfCU9iFxt9UQ8dVS
v+VbjFnwyROCT6LKJfEEFjtqT72vusWis746tubFWXVbbtYRyk+ZygaJTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDU4irUmHPvE0M6VBGaNB3tuJ54MB8GA1UdIwQY
MBaAFECPoBdTL/bZ+zi0ADeJavrwqs+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAt
ZjE5ODJhNjkxZDQ1LzEvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAtZjE5ODJhNjkxZDQ1
LzEvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8PU2PTK
weXr4X2x3RRkvBbOTD5b0fZcSXzMUPfvUKB0E+u2/EGMjqRYkgyJA2P5hOUXLi47
8ClzhTU5TJJO/oJvvGmQP5r0aC/ju1uMcuaTAxJE/fCw3LXLJ+ziK8bjIDXyZ2n5
XzJTXEmlhn6D8/qGTCB1IW6yOTtb2+1EEsU6PVID7Q9x3zQtMFhjljphg/m/WeoK
oNXPYYd7whps+l44GZ7/dyzHfsQTMN1am3dk9DzDL4JNPPJV4rF+OlViWruFtf4/
D+FsfZgQiC1f0z7G2t24ajFIB/4BikBtbuKpbIOv3f+9VEl7M6YjbaysyRd9mX6L
m17Hgw2H+VnoYA==
-----END CERTIFICATE-----