Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File:                     1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier:          +l3SA9sJUBI3TtAYqFQqWn8aD65GCpZNettQrZJ+XKQ=
Subject key identifier:   07:9B:36:19:FB:25:35:8D:F5:2F:6E:ED:77:CD:96:21:A2:99:AF:5E
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer:       /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial:       01962E61AFAA787038EA2C1F4D7CA94DFF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: BnfzD4NGvWw3+AcoiPG6p5OupTufqcstp+9Kfm1QN3A=)
                          2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:aa:78:70:38:ea:2c:1f:4d:7c:a9:4d:ff:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=079b3619fb25358df52f6eed77cd9621a299af5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:b8:22:79:da:03:79:87:34:46:10:ef:a0:
                    a6:36:6c:93:d2:87:a6:41:35:7e:d5:0d:87:ca:ad:
                    be:f9:b0:7f:25:16:c0:ca:39:ee:bf:04:8a:7d:4d:
                    87:59:be:45:e9:ee:e0:a7:0b:8e:66:00:98:fb:e1:
                    78:fe:3b:24:34:5c:f4:75:8e:00:dd:e0:ac:9e:29:
                    72:24:7a:15:57:26:8a:a6:fa:4d:7f:f0:94:50:16:
                    94:a2:4c:b7:ca:f6:20:0f:a3:29:c1:4d:aa:4e:03:
                    6c:29:be:7a:4b:fb:66:27:0f:7f:2e:f5:25:43:b7:
                    4b:d9:85:1c:5a:16:5b:c7:a3:f8:2b:b9:b3:b5:00:
                    2c:c6:c6:f4:dd:d2:76:c9:b6:9d:3e:dc:60:eb:3a:
                    06:5c:3e:5f:b6:cd:ff:e8:da:ad:9c:6b:a4:92:99:
                    43:89:8e:6b:cd:c9:e5:68:e6:42:a1:80:b1:d6:75:
                    83:79:fe:15:ef:80:c9:e7:d8:9e:c1:5a:c7:49:8f:
                    94:ed:5b:79:a7:98:d1:9d:75:ad:f8:dc:cb:c7:c1:
                    b5:4f:ab:6e:92:ba:fd:29:04:af:c3:e1:aa:4f:a1:
                    a0:f7:13:27:ff:2f:99:93:b2:f8:01:e2:e9:7b:5e:
                    5b:36:a6:be:dc:01:dd:ad:74:29:14:2f:55:fd:48:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9B:36:19:FB:25:35:8D:F5:2F:6E:ED:77:CD:96:21:A2:99:AF:5E
            X509v3 Authority Key Identifier:
                keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:eb:40:d7:a7:6e:ba:1b:00:bf:5d:3c:aa:15:f8:da:81:84:
         50:36:fc:ab:90:2e:4c:3a:f0:50:ae:8d:e0:c7:2f:c1:86:41:
         76:97:bb:81:64:f2:c4:cb:d0:ab:7d:d3:f4:be:ac:78:5d:a2:
         a3:ac:f6:a8:c3:d1:25:69:fd:39:f9:e3:d5:71:e8:2d:35:6a:
         0d:09:e3:0b:7a:d1:fc:e9:ec:ec:fe:28:39:3c:29:12:56:8e:
         cc:35:38:37:29:1c:f7:ca:d6:53:08:b5:1b:d6:52:f7:ca:cc:
         88:4b:17:e7:c9:b8:f7:4e:39:43:11:e8:f5:a3:9e:14:75:d5:
         bc:c9:20:4c:51:c8:aa:69:a8:24:39:71:9c:b1:16:ec:ed:4b:
         3c:e0:95:00:c7:f1:bd:d5:eb:fa:04:18:f3:0b:75:50:80:13:
         0d:65:d3:5e:0a:18:c1:61:22:40:a4:e0:43:2f:3c:e2:7f:7d:
         22:44:af:58:45:1b:6d:c1:ac:81:64:68:5e:78:b8:28:2b:f4:
         07:64:da:5e:7e:46:28:7b:ed:7d:cb:4e:24:77:dc:c4:ef:50:
         cd:6f:ab:68:6d:ce:73:ab:54:f2:2c:ca:79:8c:4c:bd:8b:db:
         8c:8c:78:c9:c2:f9:98:5d:ca:fa:06:6b:3b:0b:47:dc:42:6f:
         05:27:d2:f3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuYa+qeHA46iwfTXypTf9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1
ZTg3MTAwHhcNMjUwNDEzMDkwMTE1WhcNMjUwNDE0MDkwMTE1WjAzMTEwLwYDVQQD
EygwNzliMzYxOWZiMjUzNThkZjUyZjZlZWQ3N2NkOTYyMWEyOTlhZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MG4InnaA3mHNEYQ76CmNmyT0oem
QTV+1Q2Hyq2++bB/JRbAyjnuvwSKfU2HWb5F6e7gpwuOZgCY++F4/jskNFz0dY4A
3eCsnilyJHoVVyaKpvpNf/CUUBaUoky3yvYgD6MpwU2qTgNsKb56S/tmJw9/LvUl
Q7dL2YUcWhZbx6P4K7mztQAsxsb03dJ2ybadPtxg6zoGXD5fts3/6NqtnGukkplD
iY5rzcnlaOZCoYCx1nWDef4V74DJ59iewVrHSY+U7Vt5p5jRnXWt+NzLx8G1T6tu
krr9KQSvw+GqT6Gg9xMn/y+Zk7L4AeLpe15bNqa+3AHdrXQpFC9V/UjY+QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAebNhn7JTWN9S9u7XfNliGima9eMB8GA1UdIwQY
MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1
LTk2ZTk5Zjc5NDI3OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2MyYzI4OC02ZjU2LTRjNGQtOWRiNS05NmU5OWY3OTQy
NzgvMS8xLXFUdXFHLWZQbTU0Z2JTNDJobWgwbkplaHhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOtA
16duuhsAv108qhX42oGEUDb8q5AuTDrwUK6N4McvwYZBdpe7gWTyxMvQq33T9L6s
eF2io6z2qMPRJWn9Ofnj1XHoLTVqDQnjC3rR/Ons7P4oOTwpElaOzDU4Nykc98rW
Uwi1G9ZS98rMiEsX58m49045QxHo9aOeFHXVvMkgTFHIqmmoJDlxnLEW7O1LPOCV
AMfxvdXr+gQY8wt1UIATDWXTXgoYwWEiQKTgQy884n99IkSvWEUbbcGsgWRoXni4
KCv0B2TaXn5GKHvtfctOJHfcxO9QzW+raG3Oc6tU8izKeYxMvYvbjIx4ycL5mF3K
+gZrOwtH3EJvBSfS8w==
-----END CERTIFICATE-----