Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File:                     QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier:          mqGX2GEbPz0lj+/IC5SOE0k5FptR8OFYw55R++8WTJ8=
Subject key identifier:   EF:27:FD:8C:74:3E:8B:B4:DC:06:CA:97:75:F8:AF:2F:69:0E:47:08
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer:       /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial:       01962E2ABFB7DB6C773DDB9DBF01050D6AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number:          0B07
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: W+UHLdscG3jm3/J6J0MyxlTF4Oh9QIy7sB24HhlKmAY=)
                          2: vfjUIsx7CDVuZMrXZKkgTFoznUI.roa (hash: kc2fyWr6FJL7rTi0mPaMQj4eZbP6Y0dyJoouX+alOvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bf:b7:db:6c:77:3d:db:9d:bf:01:05:0d:6a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=ef27fd8c743e8bb4dc06ca9775f8af2f690e4708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:de:32:e5:e1:b2:8c:b0:11:9c:09:d1:c5:
                    f9:39:eb:0e:29:0c:a3:a4:99:4f:44:34:54:79:a1:
                    be:84:76:8a:b1:a1:38:cf:c3:78:40:bd:92:7e:14:
                    ab:0c:1a:59:37:d9:8b:91:6c:62:0b:dd:b9:10:e4:
                    20:33:f1:6e:cb:c1:87:f5:ff:50:22:eb:3d:48:ff:
                    b8:52:22:8b:74:80:08:89:dc:b0:bf:d2:0f:8d:ec:
                    57:60:5a:48:8c:cb:65:f4:49:c4:e4:44:94:70:93:
                    6c:ed:f0:9d:41:85:69:0a:f1:3f:4e:3d:50:26:8f:
                    7e:83:60:2d:38:ec:e8:35:61:21:b9:c3:c6:6e:16:
                    56:b6:de:8b:35:89:ed:94:1f:cb:52:5f:ff:cd:9d:
                    aa:36:0d:9e:e5:21:c0:f7:c4:74:89:4d:89:42:d3:
                    af:58:99:06:82:c6:6a:1c:08:cb:df:19:5f:25:fb:
                    8e:43:b9:a6:6c:77:a3:f7:9e:73:61:aa:e1:b6:18:
                    53:0d:2b:4f:61:46:57:e9:17:4d:98:43:92:ed:1b:
                    fe:e3:cd:90:f5:ad:84:8b:9a:fb:52:c6:ec:04:2a:
                    3f:42:04:bd:bd:93:d5:23:fc:ed:d7:dd:d9:21:2f:
                    75:92:74:c0:5e:a3:b1:2b:7d:ce:4f:8c:bb:2e:64:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:FD:8C:74:3E:8B:B4:DC:06:CA:97:75:F8:AF:2F:69:0E:47:08
            X509v3 Authority Key Identifier:
                keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:bb:42:18:26:ec:c1:e0:2c:fa:57:53:af:29:9d:ba:9d:
         62:a3:8f:30:a2:df:9a:46:a2:c1:d2:5e:da:60:55:f8:ef:5a:
         fc:38:2d:6e:83:59:39:f0:71:92:2a:04:e7:3c:99:13:9e:29:
         da:fd:8f:fa:0b:ce:34:be:f5:16:37:61:12:58:a7:71:a7:6d:
         88:8f:b9:a7:25:3a:b0:96:0c:c8:f9:57:e3:c4:09:3d:c5:23:
         42:4e:a7:c8:13:f6:28:cb:f8:22:39:2f:e3:24:a0:03:e0:80:
         81:08:53:68:88:62:55:75:e2:0a:45:a0:5d:eb:7c:1e:35:ba:
         89:b1:da:91:30:a4:31:e3:60:35:50:9a:40:84:90:ec:c9:47:
         11:e1:a3:41:80:fa:76:c9:4e:96:42:cc:fd:1d:6f:70:a4:43:
         6c:81:44:e5:6d:e8:3c:89:17:dc:39:e1:5a:4b:d9:e9:de:66:
         1d:66:e9:0a:f3:96:f7:5e:30:9c:8e:f7:a5:30:f2:49:8e:9e:
         ce:1a:80:82:5e:8c:63:d8:82:d0:92:74:b4:87:0e:ed:c0:45:
         82:88:ef:7d:44:01:e7:66:fd:8f:98:c9:62:41:11:79:0a:8d:
         91:97:53:e8:22:a9:46:7c:ed:d6:43:48:ce:4f:9c:6e:25:d7:
         a2:d9:3a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKr+322x3PdudvwEFDWrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Y2OWNjYTJjODZlMTk0NzU0Nzg4ZWRjZDg4ZTM1MmVk
NGUxMWMwHhcNMjUwNDEzMDgwMTE1WhcNMjUwNDE0MDgwMTE1WjAzMTEwLwYDVQQD
EyhlZjI3ZmQ4Yzc0M2U4YmI0ZGMwNmNhOTc3NWY4YWYyZjY5MGU0NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzPeMuXhsoywEZwJ0cX5OesOKQyj
pJlPRDRUeaG+hHaKsaE4z8N4QL2SfhSrDBpZN9mLkWxiC925EOQgM/Fuy8GH9f9Q
Ius9SP+4UiKLdIAIidywv9IPjexXYFpIjMtl9EnE5ESUcJNs7fCdQYVpCvE/Tj1Q
Jo9+g2AtOOzoNWEhucPGbhZWtt6LNYntlB/LUl//zZ2qNg2e5SHA98R0iU2JQtOv
WJkGgsZqHAjL3xlfJfuOQ7mmbHej955zYarhthhTDStPYUZX6RdNmEOS7Rv+482Q
9a2Ei5r7UsbsBCo/QgS9vZPVI/zt193ZIS91knTAXqOxK33OT4y7LmQULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8n/Yx0Pou03AbKl3X4ry9pDkcIMB8GA1UdIwQY
MBaAFEDPacyiyG4ZR1R4jtzYjjUu1OEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQt
Y2YxYTVkOGU1ZjZkLzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQtY2YxYTVkOGU1ZjZk
LzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6C7Qhgm
7MHgLPpXU68pnbqdYqOPMKLfmkaiwdJe2mBV+O9a/DgtboNZOfBxkioE5zyZE54p
2v2P+gvONL71FjdhElincadtiI+5pyU6sJYMyPlX48QJPcUjQk6nyBP2KMv4Ijkv
4ySgA+CAgQhTaIhiVXXiCkWgXet8HjW6ibHakTCkMeNgNVCaQISQ7MlHEeGjQYD6
dslOlkLM/R1vcKRDbIFE5W3oPIkX3DnhWkvZ6d5mHWbpCvOW914wnI73pTDySY6e
zhqAgl6MY9iC0JJ0tIcO7cBFgojvfUQB52b9j5jJYkEReQqNkZdT6CKpRnzt1kNI
zk+cbiXXotk6Tw==
-----END CERTIFICATE-----