Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File:                     MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier:          zvk8pwjFxEErmw/DPUc9wFmDwCHCYEoQ0tCTW2543xE=
Subject key identifier:   1E:93:5A:6F:86:FD:D7:8F:03:F7:99:24:88:3B:1E:78:42:F9:29:78
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer:       /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial:       01962DF3BE7102E170F5329D21C179ED4B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: WR5HWhtIaEzWKvfkuiM8JYcuZlf5ySuCA3UuHiv0Qc0=)
                          2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=)
                          3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:be:71:02:e1:70:f5:32:9d:21:c1:79:ed:4b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=1e935a6f86fdd78f03f79924883b1e7842f92978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:39:59:2e:5d:96:34:1a:85:e7:c5:05:2b:
                    c9:01:c5:41:b9:ed:78:bf:8e:31:0f:1c:5a:29:5d:
                    3e:68:7a:21:d9:78:bb:0f:6a:46:e5:ef:ae:c4:33:
                    23:1a:ec:a4:6c:bf:49:07:63:8f:47:ff:b9:a9:91:
                    8f:c2:35:68:eb:1b:1e:ac:d1:73:74:1c:f9:6a:ab:
                    b3:f0:e6:38:65:85:ef:36:06:4d:f5:e3:e2:4d:47:
                    b6:2d:46:52:0d:dd:97:8b:68:41:08:26:47:6a:df:
                    46:9e:77:3b:91:f0:18:97:ee:13:cc:0d:8c:1f:9f:
                    d7:24:00:aa:cd:2e:43:52:de:e0:7c:e5:53:11:d9:
                    87:4c:95:40:24:7c:61:ee:3d:65:a9:7f:45:c9:df:
                    95:18:02:df:36:43:23:ac:d2:d4:59:52:0e:40:70:
                    60:ea:3b:4d:db:92:9b:0a:db:1e:a0:f8:99:b0:17:
                    a0:9d:62:4a:14:fc:20:e8:c6:ef:a6:4a:d1:c4:6d:
                    fa:a3:65:0b:64:ef:bf:51:cc:1e:52:d0:79:33:fb:
                    f0:74:9a:04:46:89:98:76:10:fa:7b:5d:78:1e:0e:
                    79:61:27:53:3d:71:36:10:4e:e1:2f:f2:f0:d3:c0:
                    40:c7:34:a2:ed:ac:6e:e8:a9:3f:d1:b1:32:2c:e1:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:93:5A:6F:86:FD:D7:8F:03:F7:99:24:88:3B:1E:78:42:F9:29:78
            X509v3 Authority Key Identifier:
                keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:67:f9:fa:be:f0:e9:43:13:0b:3e:84:8d:29:7c:ac:44:
         10:77:3f:c4:3d:a5:64:a4:9f:c5:88:4b:dd:6d:b3:b4:24:6a:
         49:4c:8f:dd:29:49:18:e7:27:99:52:70:fd:6f:af:ca:b4:93:
         8d:f7:99:ce:4e:bf:17:67:6c:03:3a:08:e0:df:0d:f9:17:37:
         b3:e3:fb:55:f4:69:ef:58:ec:41:3e:88:60:ea:53:d7:8b:7a:
         25:bc:e0:ca:fb:c3:97:86:3f:a4:b6:d5:50:3a:e2:3b:f1:68:
         27:23:bd:d4:d2:77:5a:e4:f2:6e:68:78:84:33:df:a9:a9:c0:
         2b:45:39:9a:a3:88:e8:2f:83:d2:78:56:cf:ba:0a:bb:25:11:
         51:a3:b7:d0:3b:6d:a7:69:59:5d:ec:54:47:59:82:70:0a:88:
         44:33:36:7b:c7:d3:78:9d:9c:de:08:3c:22:2c:48:8c:ed:33:
         55:3b:9d:51:f0:3f:e3:21:0b:ed:4c:c2:74:ae:e1:d0:ce:63:
         69:24:67:61:26:ec:1c:be:36:93:19:07:b9:af:af:9b:a9:09:
         2b:a8:56:25:ab:a8:3e:ea:e7:f1:75:b2:77:84:13:48:f7:39:
         4b:ab:f9:c6:1d:e2:a9:be:50:9c:a6:ca:3c:37:ab:0c:fa:75:
         94:ba:bc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt875xAuFw9TKdIcF57UsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjUwNDEzMDcwMTEwWhcNMjUwNDE0MDcwMTEwWjAzMTEwLwYDVQQD
EygxZTkzNWE2Zjg2ZmRkNzhmMDNmNzk5MjQ4ODNiMWU3ODQyZjkyOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApss5WS5dljQahefFBSvJAcVBue14
v44xDxxaKV0+aHoh2Xi7D2pG5e+uxDMjGuykbL9JB2OPR/+5qZGPwjVo6xserNFz
dBz5aquz8OY4ZYXvNgZN9ePiTUe2LUZSDd2Xi2hBCCZHat9Gnnc7kfAYl+4TzA2M
H5/XJACqzS5DUt7gfOVTEdmHTJVAJHxh7j1lqX9Fyd+VGALfNkMjrNLUWVIOQHBg
6jtN25KbCtseoPiZsBegnWJKFPwg6MbvpkrRxG36o2ULZO+/UcweUtB5M/vwdJoE
RomYdhD6e114Hg55YSdTPXE2EE7hL/Lw08BAxzSi7axu6Kk/0bEyLOHdIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6TWm+G/dePA/eZJIg7HnhC+Sl4MB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLtn+fq+
8OlDEws+hI0pfKxEEHc/xD2lZKSfxYhL3W2ztCRqSUyP3SlJGOcnmVJw/W+vyrST
jfeZzk6/F2dsAzoI4N8N+Rc3s+P7VfRp71jsQT6IYOpT14t6JbzgyvvDl4Y/pLbV
UDriO/FoJyO91NJ3WuTybmh4hDPfqanAK0U5mqOI6C+D0nhWz7oKuyURUaO30Dtt
p2lZXexUR1mCcAqIRDM2e8fTeJ2c3gg8IixIjO0zVTudUfA/4yEL7UzCdK7h0M5j
aSRnYSbsHL42kxkHua+vm6kJK6hWJauoPurn8XWyd4QTSPc5S6v5xh3iqb5QnKbK
PDerDPp1lLq8Nw==
-----END CERTIFICATE-----