Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File:                     QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier:          yQ5mHtjnF5O7aKyMbjDAMFCPJm+Ikhg2KkhG8mwV7do=
Subject key identifier:   35:17:22:75:1E:30:F2:3B:44:B2:F6:DD:44:86:B7:0F:1F:98:CD:1E
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer:       /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial:       01962E2AFF942359117E13E4C6C5D20622C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number:          0AC0
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
                          2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: AICqL39J8KJJ6GI2VaEcXl2JMSeIwp8LjxmZr1eXNts=)
                          3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
                          4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ff:94:23:59:11:7e:13:e4:c6:c5:d2:06:22:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=351722751e30f23b44b2f6dd4486b70f1f98cd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:7b:88:ca:18:af:51:b1:53:84:70:99:80:
                    4b:78:4d:46:1a:23:74:01:04:55:32:bb:eb:3f:24:
                    05:4d:a6:53:12:42:5a:16:92:3d:d7:07:4f:8c:91:
                    ce:64:c3:45:a8:e4:52:d7:a3:48:cd:4c:31:6a:7a:
                    62:d3:45:80:d6:b3:8f:08:89:a8:e4:b0:60:3d:b0:
                    d3:ba:fe:68:a4:5a:c7:26:e7:23:28:b4:b9:7b:8f:
                    cd:ce:52:2b:e0:bc:62:cb:5f:54:6b:b3:b8:55:56:
                    4c:ed:98:b4:33:bb:30:3b:95:d8:79:68:61:29:39:
                    96:31:ec:45:e0:5a:0a:60:17:28:a4:25:bf:7f:a4:
                    59:08:93:b9:10:65:2a:6f:db:3f:d3:49:d5:68:4a:
                    42:2b:b8:fd:6d:1c:97:ff:2d:20:a7:d0:00:13:db:
                    68:72:f0:6b:7c:d2:60:04:e5:30:1b:6b:00:6d:52:
                    76:fe:9b:45:8c:d8:ee:a8:dd:36:22:1f:3f:64:73:
                    41:72:d7:51:3b:d5:17:8f:be:bb:c9:14:b0:39:c4:
                    42:f0:f6:e4:23:41:a3:9b:53:ce:e9:5b:0c:ec:08:
                    a3:69:dd:87:a7:47:dd:82:e8:3d:1b:47:21:d0:29:
                    3e:f8:8c:70:51:e2:31:94:ca:2c:1b:c1:63:73:da:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:22:75:1E:30:F2:3B:44:B2:F6:DD:44:86:B7:0F:1F:98:CD:1E
            X509v3 Authority Key Identifier:
                keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:41:e4:ec:10:57:35:f2:c6:63:54:45:08:58:b1:11:ea:
         a2:ec:aa:da:00:44:20:76:09:3d:e2:c5:0d:1a:90:cb:18:1f:
         b2:0c:df:d5:f2:49:50:49:1d:7a:0b:ed:8c:56:0a:ba:3e:65:
         56:8a:4f:fa:17:09:59:8a:5a:cb:5a:5a:f7:2c:45:a9:5e:e6:
         43:13:4a:bf:04:62:3f:0e:8f:cb:59:19:de:7d:9d:e3:2d:d5:
         d8:71:ed:09:4c:22:35:50:4f:c0:b5:93:ac:80:1f:36:68:d2:
         b6:81:36:86:9f:73:29:c1:26:f4:c0:58:5a:98:60:4b:76:db:
         7c:c8:27:7b:37:0d:f6:a0:05:26:ad:f1:6b:5d:79:cc:46:9e:
         44:73:74:de:8b:72:1a:09:5b:29:1a:7d:06:2b:ce:85:e2:99:
         99:c0:db:b6:38:8b:e3:55:f2:f0:a6:c0:95:34:fd:93:d7:3f:
         9d:13:ff:b4:a6:8e:ee:ea:be:78:a3:f8:1b:dd:06:8d:ba:20:
         a0:6f:d1:11:7b:d9:94:1d:1a:96:af:39:f1:23:c6:21:02:83:
         c4:4a:26:d1:83:91:26:ca:8e:de:26:ef:c5:a6:5a:8e:10:77:
         cd:3f:64:bb:59:f3:81:d3:b8:76:1e:67:04:0c:a9:e2:e3:f5:
         5f:1a:5f:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKv+UI1kRfhPkxsXSBiLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDEwYjg4ZWIyNGY2MjYyZDkzMTUzNjhhNWQwMWUxZTA4
NjBjNGUwHhcNMjUwNDEzMDgwMTMxWhcNMjUwNDE0MDgwMTMxWjAzMTEwLwYDVQQD
EygzNTE3MjI3NTFlMzBmMjNiNDRiMmY2ZGQ0NDg2YjcwZjFmOThjZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVl7iMoYr1GxU4RwmYBLeE1GGiN0
AQRVMrvrPyQFTaZTEkJaFpI91wdPjJHOZMNFqORS16NIzUwxanpi00WA1rOPCImo
5LBgPbDTuv5opFrHJucjKLS5e4/NzlIr4Lxiy19Ua7O4VVZM7Zi0M7swO5XYeWhh
KTmWMexF4FoKYBcopCW/f6RZCJO5EGUqb9s/00nVaEpCK7j9bRyX/y0gp9AAE9to
cvBrfNJgBOUwG2sAbVJ2/ptFjNjuqN02Ih8/ZHNBctdRO9UXj767yRSwOcRC8Pbk
I0Gjm1PO6VsM7Aijad2Hp0fdgug9G0ch0Ck++IxwUeIxlMosG8Fjc9oMTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUXInUeMPI7RLL23USGtw8fmM0eMB8GA1UdIwQY
MBaAFEHRC4jrJPYmLZMVNopdAeHghgxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAt
ZWY5NzAwNmM0NTBiLzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAtZWY5NzAwNmM0NTBi
LzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKRB5OwQ
VzXyxmNURQhYsRHqouyq2gBEIHYJPeLFDRqQyxgfsgzf1fJJUEkdegvtjFYKuj5l
VopP+hcJWYpay1pa9yxFqV7mQxNKvwRiPw6Py1kZ3n2d4y3V2HHtCUwiNVBPwLWT
rIAfNmjStoE2hp9zKcEm9MBYWphgS3bbfMgnezcN9qAFJq3xa115zEaeRHN03oty
GglbKRp9BivOheKZmcDbtjiL41Xy8KbAlTT9k9c/nRP/tKaO7uq+eKP4G90Gjbog
oG/REXvZlB0alq858SPGIQKDxEom0YORJsqO3ibvxaZajhB3zT9ku1nzgdO4dh5n
BAyp4uP1XxpfIg==
-----END CERTIFICATE-----