Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File:                     q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier:          w5reRd+6ySLl+qrG2gSCBDK0jc9Kg0hchOzoseodE0g=
Subject key identifier:   FF:20:AF:AA:F8:77:10:54:B8:8B:CB:9D:2D:8D:60:5E:04:92:83:0C
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer:       /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial:       01962E986E9A6440351AE8E86846CAC03B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
                          2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: yxP4xnJYSzDTwsPyB8x6xqcgGpiZrAGo9GDS9aEqRiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6e:9a:64:40:35:1a:e8:e8:68:46:ca:c0:3b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=ff20afaaf8771054b88bcb9d2d8d605e0492830c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:61:c9:48:8b:19:b9:2c:c1:f9:14:fe:3b:
                    01:3e:0a:52:0f:b2:f5:5b:53:a1:db:30:8e:e7:87:
                    92:ea:99:d3:e3:1f:79:d0:1a:d0:35:58:3b:bb:b7:
                    92:35:e0:26:01:45:ef:8a:e2:33:27:b4:d4:80:cb:
                    db:65:14:33:90:df:23:33:58:04:8d:e9:ae:14:56:
                    78:49:5e:cf:e8:8d:88:1b:94:ea:fb:7f:60:96:7d:
                    29:d0:98:27:0b:45:c2:7a:82:fc:58:bb:f9:57:01:
                    02:91:b1:c2:8a:3d:43:70:1f:22:af:6f:8b:b0:aa:
                    b4:1a:25:64:e3:c5:1f:75:ce:12:1b:b9:e7:24:9c:
                    43:7f:9d:c4:b7:71:d2:d0:cd:70:a3:2a:78:0a:92:
                    5d:aa:ea:d5:60:ab:2b:d1:51:c6:2a:8b:64:8b:0a:
                    40:37:9c:e2:69:01:44:ef:be:cc:76:45:8c:15:7e:
                    6f:2d:82:b0:03:c3:9a:41:39:0e:21:ec:b3:6c:56:
                    dc:94:83:eb:a6:18:50:75:1a:dc:ad:aa:cb:10:db:
                    d4:10:3f:ae:36:1e:ea:e5:68:f5:0d:8e:db:37:37:
                    62:5b:7f:e8:bd:1e:08:76:2d:de:5a:0d:e1:82:80:
                    da:cb:da:45:ab:13:53:db:70:e7:7c:34:24:81:b3:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:20:AF:AA:F8:77:10:54:B8:8B:CB:9D:2D:8D:60:5E:04:92:83:0C
            X509v3 Authority Key Identifier:
                keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:6d:ee:32:83:a4:c6:ac:b9:85:0c:90:06:68:f6:b7:78:
         cc:fb:5e:53:41:bf:fd:ff:f3:33:40:48:1a:46:c0:e2:7a:9b:
         ad:82:15:ac:3a:20:7f:85:48:3a:5a:fe:9f:47:64:19:b0:03:
         32:a7:40:1d:f6:aa:a0:4e:19:20:5f:ce:b7:07:37:b9:9f:2d:
         99:49:2d:9b:34:7f:b1:b5:c8:33:3e:de:e5:71:f8:1e:13:bd:
         1a:eb:5a:c9:e4:85:f4:f7:2b:28:68:14:b6:42:f0:b5:cf:ff:
         59:5b:07:8c:2d:89:43:3b:64:55:e5:05:b6:93:11:df:11:e0:
         5e:b7:8f:06:94:79:bc:07:e3:a3:49:01:94:ab:e4:5a:80:9d:
         f4:0b:7a:f4:67:4e:d0:91:c2:96:0d:da:93:d2:e3:a2:ea:36:
         93:c0:90:bd:f6:0c:b6:83:8f:c1:0b:30:7f:e5:43:50:fb:df:
         9f:3b:2f:3c:4f:c6:1a:ea:74:15:d3:53:dd:4e:b9:c9:53:a1:
         3f:1b:73:b2:82:8b:d7:eb:9c:66:b4:16:a3:75:b9:93:19:b6:
         b0:a4:52:ec:44:9f:9c:05:c6:89:8b:92:6a:f5:63:a0:51:be:
         f7:35:2a:d5:87:6d:92:81:f4:05:7b:02:a3:12:5f:83:6c:0f:
         15:04:2d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumG6aZEA1GujoaEbKwDuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYjA2MDE2NmQ2NGNlYWQwZTI5NTc5N2U4ZDI3YzU1ZDg4
OThiYzIwHhcNMjUwNDEzMTAwMTAzWhcNMjUwNDE0MTAwMTAzWjAzMTEwLwYDVQQD
EyhmZjIwYWZhYWY4NzcxMDU0Yjg4YmNiOWQyZDhkNjA1ZTA0OTI4MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVhyUiLGbkswfkU/jsBPgpSD7L1
W1Oh2zCO54eS6pnT4x950BrQNVg7u7eSNeAmAUXviuIzJ7TUgMvbZRQzkN8jM1gE
jemuFFZ4SV7P6I2IG5Tq+39gln0p0JgnC0XCeoL8WLv5VwECkbHCij1DcB8ir2+L
sKq0GiVk48Ufdc4SG7nnJJxDf53Et3HS0M1woyp4CpJdqurVYKsr0VHGKotkiwpA
N5ziaQFE777MdkWMFX5vLYKwA8OaQTkOIeyzbFbclIPrphhQdRrcrarLENvUED+u
Nh7q5Wj1DY7bNzdiW3/ovR4Idi3eWg3hgoDay9pFqxNT23DnfDQkgbOXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8gr6r4dxBUuIvLnS2NYF4EkoMMMB8GA1UdIwQY
MBaAFKuwYBZtZM6tDilXl+jSfFXYiYvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQt
NmIxMzY0OTRlM2RjLzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQtNmIxMzY0OTRlM2Rj
LzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJpt7jKD
pMasuYUMkAZo9rd4zPteU0G//f/zM0BIGkbA4nqbrYIVrDogf4VIOlr+n0dkGbAD
MqdAHfaqoE4ZIF/Otwc3uZ8tmUktmzR/sbXIMz7e5XH4HhO9GutayeSF9PcrKGgU
tkLwtc//WVsHjC2JQztkVeUFtpMR3xHgXrePBpR5vAfjo0kBlKvkWoCd9At69GdO
0JHClg3ak9Ljouo2k8CQvfYMtoOPwQswf+VDUPvfnzsvPE/GGup0FdNT3U65yVOh
PxtzsoKL1+ucZrQWo3W5kxm2sKRS7ESfnAXGiYuSavVjoFG+9zUq1YdtkoH0BXsC
oxJfg2wPFQQtFg==
-----END CERTIFICATE-----