Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File:                     QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier:          jbyTBLy7pW04hIKKjSWcFRg6220vEzH9WuDlAHU7x3M=
Subject key identifier:   D2:4D:25:45:3F:66:DD:93:64:03:6C:BA:71:4B:D3:0A:F7:9C:E9:B9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       01962FAB4AF9F4374EA277EA4893A535A4D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
                          2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: EKSq6MSLwAQclGZ3qUGWgfoKy+eKle0MZ95xnBPtRdw=)
                          3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:f9:f4:37:4e:a2:77:ea:48:93:a5:35:a4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=d24d25453f66dd9364036cba714bd30af79ce9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:9b:74:9f:31:9e:97:87:9c:97:d2:52:8d:
                    8d:95:68:d6:57:a0:37:e9:81:3b:4b:e2:d0:59:d4:
                    a6:75:93:9d:79:71:8c:e8:cc:23:b1:81:48:72:19:
                    c5:9a:e9:92:d4:56:0c:15:47:ed:15:c7:6f:9b:05:
                    c6:80:6b:9d:9c:fd:02:eb:be:36:4d:e2:f3:6e:05:
                    72:ef:6a:f1:ad:97:c5:c0:49:5e:54:db:1e:62:be:
                    0c:69:9b:f1:72:35:78:3e:78:d9:7c:b1:c0:c3:65:
                    d6:da:f5:70:93:c1:c4:99:11:dc:8b:7a:25:b8:9b:
                    bd:21:ed:35:bb:50:59:1b:90:a7:37:60:2e:87:b9:
                    47:22:45:f8:a0:57:6a:18:c0:58:57:bf:5f:dd:93:
                    22:24:b3:78:6e:96:93:09:43:05:32:e6:59:d5:40:
                    ae:49:2a:51:98:12:42:50:55:25:76:d6:44:fb:f5:
                    9b:7b:62:1c:88:c5:6f:78:ae:5e:ec:bf:be:2b:19:
                    45:a3:64:4c:5b:83:e6:e7:82:34:43:c7:12:33:67:
                    bd:a2:c2:2d:9c:82:d7:9c:0a:29:d9:05:60:45:0a:
                    06:23:91:9f:23:51:40:e6:26:fe:d7:d5:a1:62:4a:
                    33:48:6f:7b:bc:f0:27:2f:75:58:09:64:32:b9:67:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4D:25:45:3F:66:DD:93:64:03:6C:BA:71:4B:D3:0A:F7:9C:E9:B9
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:e1:ad:21:75:6e:6c:3b:df:e9:c9:f5:09:6f:fe:a1:d9:
         78:16:47:e0:00:de:f2:48:7b:f8:e2:40:d1:1c:a9:44:66:15:
         c1:cf:13:61:46:0f:84:10:74:50:64:99:9b:63:34:e5:04:66:
         e4:53:58:39:d4:65:95:7e:66:54:b3:77:7b:e9:3a:91:de:9e:
         e9:57:70:03:fa:93:60:1e:f8:2f:8a:98:49:5b:c5:3e:74:fe:
         04:e9:e4:ba:c0:ee:5e:24:a9:57:17:ce:ce:fa:22:59:62:1b:
         e6:63:90:53:2f:d4:84:1d:74:c7:70:ca:3f:35:2d:81:bb:ff:
         fe:df:c7:ad:04:7f:b5:6f:66:37:f1:a8:b0:b6:17:76:a4:16:
         bb:97:61:a3:84:a1:c9:7e:fe:f2:d4:9f:f9:b8:5c:ce:c4:6f:
         fe:90:b3:91:ef:ac:0e:c0:e6:69:54:16:7b:89:dd:a4:df:ee:
         d0:2d:a6:95:17:1e:ce:eb:a6:99:c9:d3:b1:ae:99:7b:fd:cb:
         bb:b8:35:52:dd:12:a4:e4:b6:78:88:c9:6f:c6:69:88:f4:cc:
         e1:95:e2:3f:f9:e0:f0:12:ec:ce:58:5b:f9:ad:04:b4:37:08:
         1b:1b:dd:91:fb:92:3a:21:c3:ff:7f:f5:96:ed:90:f6:29:58:
         ec:40:0b:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0r59DdOonfqSJOlNaTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjUwNDEzMTUwMTE3WhcNMjUwNDE0MTUwMTE3WjAzMTEwLwYDVQQD
EyhkMjRkMjU0NTNmNjZkZDkzNjQwMzZjYmE3MTRiZDMwYWY3OWNlOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8KbdJ8xnpeHnJfSUo2NlWjWV6A3
6YE7S+LQWdSmdZOdeXGM6MwjsYFIchnFmumS1FYMFUftFcdvmwXGgGudnP0C6742
TeLzbgVy72rxrZfFwEleVNseYr4MaZvxcjV4PnjZfLHAw2XW2vVwk8HEmRHci3ol
uJu9Ie01u1BZG5CnN2Auh7lHIkX4oFdqGMBYV79f3ZMiJLN4bpaTCUMFMuZZ1UCu
SSpRmBJCUFUldtZE+/Wbe2IciMVveK5e7L++KxlFo2RMW4Pm54I0Q8cSM2e9osIt
nILXnAop2QVgRQoGI5GfI1FA5ib+19WhYkozSG97vPAnL3VYCWQyuWfgPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJNJUU/Zt2TZANsunFL0wr3nOm5MB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMR/hrSF1
bmw73+nJ9Qlv/qHZeBZH4ADe8kh7+OJA0RypRGYVwc8TYUYPhBB0UGSZm2M05QRm
5FNYOdRllX5mVLN3e+k6kd6e6VdwA/qTYB74L4qYSVvFPnT+BOnkusDuXiSpVxfO
zvoiWWIb5mOQUy/UhB10x3DKPzUtgbv//t/HrQR/tW9mN/GosLYXdqQWu5dho4Sh
yX7+8tSf+bhczsRv/pCzke+sDsDmaVQWe4ndpN/u0C2mlRcezuummcnTsa6Ze/3L
u7g1Ut0SpOS2eIjJb8ZpiPTM4ZXiP/ng8BLszlhb+a0EtDcIGxvdkfuSOiHD/3/1
lu2Q9ilY7EALJQ==
-----END CERTIFICATE-----