Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File:                     qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier:          AtxatRHhJeFEn7Hn82YsRXRiGJBMy1E8FPhPhvn2b4s=
Subject key identifier:   DC:E0:69:84:AA:C2:D1:93:BA:3B:BE:2E:D9:B8:60:7E:AF:16:C7:2B
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer:       /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial:       01962E2AF7DB4FD44D5377730352D677E8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number:          0AC6
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
                          2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: 1TQqaq9l+wmyvIpnSAy8S4QAkkL+AnkVfNC0cX3ejy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f7:db:4f:d4:4d:53:77:73:03:52:d6:77:e8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=dce06984aac2d193ba3bbe2ed9b8607eaf16c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:73:b8:6d:95:d5:1b:71:16:af:44:11:af:
                    0a:32:53:8c:2c:1e:1a:88:dd:ff:ea:71:d9:ce:16:
                    a4:28:4a:22:c6:87:00:5f:0b:00:c8:b5:35:dd:7a:
                    cb:c2:68:cb:4b:98:39:54:f6:b7:cb:32:31:12:40:
                    a2:bf:34:a6:91:e6:a5:c2:94:54:1c:40:b9:5f:42:
                    63:3e:34:49:97:b8:79:1e:b5:35:73:9d:a5:c9:95:
                    14:a3:2a:f3:25:ed:ec:8e:1d:48:6a:ba:d9:87:e4:
                    45:7d:6a:5c:f0:c7:e9:f6:01:5b:22:5e:06:a5:56:
                    d9:5d:19:2c:df:f3:17:0e:95:85:8d:46:35:6f:51:
                    5d:3c:cc:55:d8:8e:20:da:6a:f3:2d:1b:c6:37:79:
                    aa:13:f9:9d:00:da:52:2d:2a:6d:d9:d1:7d:6a:86:
                    00:7a:0f:b8:ef:43:aa:b4:27:7c:93:98:6a:55:41:
                    17:1c:7d:63:36:d5:af:1f:c8:49:6a:d2:4b:9c:90:
                    22:50:c2:9e:57:d3:98:b6:a4:e4:b0:e3:96:07:99:
                    80:17:2a:7f:98:a3:2e:00:c9:47:82:90:f3:6d:6a:
                    bc:7d:df:5c:ab:39:ff:73:c1:11:6d:be:ba:ee:bb:
                    4a:e6:a2:1d:c8:91:09:a3:bb:9a:01:3b:2d:4f:f6:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E0:69:84:AA:C2:D1:93:BA:3B:BE:2E:D9:B8:60:7E:AF:16:C7:2B
            X509v3 Authority Key Identifier:
                keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:4c:44:67:f8:c4:6d:b2:31:8c:fe:12:94:19:90:a0:16:
         6d:e3:29:24:08:58:90:ca:02:aa:a9:49:66:ac:20:46:ed:32:
         2c:8c:14:c5:c8:f7:62:d5:85:b4:6c:45:4f:ce:9d:7d:83:c6:
         65:e5:dc:75:d1:d5:88:11:7f:28:47:0f:b0:69:10:ff:db:7e:
         97:6a:97:11:c4:a5:7a:f8:3f:e6:d4:29:02:1e:58:50:ef:aa:
         5d:a8:89:b7:56:e5:7b:39:95:ea:da:8d:9a:bd:dd:8f:b2:1c:
         f5:e6:02:d9:c8:5f:ef:44:22:0a:27:78:24:11:73:8c:30:c9:
         86:08:df:51:72:c0:64:c8:73:96:7b:85:21:72:97:3e:e8:cc:
         78:18:79:ae:d3:a8:05:91:9d:ee:ca:20:af:ba:d2:5e:ec:3a:
         6f:32:93:38:a4:89:3c:f9:ea:85:ea:b0:7e:1f:fd:c0:46:e0:
         5b:93:f1:19:72:91:70:4a:e0:aa:0d:52:89:57:72:1d:27:53:
         4a:a1:9d:a7:36:51:43:f4:31:60:86:36:0c:75:65:2d:d3:14:
         10:3d:47:4c:23:f2:fc:5c:1b:16:3e:bd:c4:5e:b7:cc:bc:6c:
         1f:9a:90:22:ee:39:56:fe:35:08:ac:18:3d:88:fd:05:31:7b:
         cc:fa:47:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvfbT9RNU3dzA1LWd+j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0
Y2RhODAwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
EyhkY2UwNjk4NGFhYzJkMTkzYmEzYmJlMmVkOWI4NjA3ZWFmMTZjNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvtzuG2V1RtxFq9EEa8KMlOMLB4a
iN3/6nHZzhakKEoixocAXwsAyLU13XrLwmjLS5g5VPa3yzIxEkCivzSmkealwpRU
HEC5X0JjPjRJl7h5HrU1c52lyZUUoyrzJe3sjh1IarrZh+RFfWpc8Mfp9gFbIl4G
pVbZXRks3/MXDpWFjUY1b1FdPMxV2I4g2mrzLRvGN3mqE/mdANpSLSpt2dF9aoYA
eg+470OqtCd8k5hqVUEXHH1jNtWvH8hJatJLnJAiUMKeV9OYtqTksOOWB5mAFyp/
mKMuAMlHgpDzbWq8fd9cqzn/c8ERbb667rtK5qIdyJEJo7uaATstT/Y0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzgaYSqwtGTuju+Ltm4YH6vFscrMB8GA1UdIwQY
MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et
MzMwYjhhZDQyNGJkLzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk
LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmpMRGf4
xG2yMYz+EpQZkKAWbeMpJAhYkMoCqqlJZqwgRu0yLIwUxcj3YtWFtGxFT86dfYPG
ZeXcddHViBF/KEcPsGkQ/9t+l2qXEcSlevg/5tQpAh5YUO+qXaiJt1blezmV6tqN
mr3dj7Ic9eYC2chf70QiCid4JBFzjDDJhgjfUXLAZMhzlnuFIXKXPujMeBh5rtOo
BZGd7sogr7rSXuw6bzKTOKSJPPnqheqwfh/9wEbgW5PxGXKRcErgqg1SiVdyHSdT
SqGdpzZRQ/QxYIY2DHVlLdMUED1HTCPy/FwbFj69xF63zLxsH5qQIu45Vv41CKwY
PYj9BTF7zPpHXw==
-----END CERTIFICATE-----