Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File:                     qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier:          5r52GasZSLRBxEnazGgegywxX86G9Cx9OIzqEDmyFtU=
Subject key identifier:   63:D6:6C:A9:04:AE:FA:A1:AE:10:23:55:24:01:AA:7C:CD:07:1D:FF
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer:       /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial:       01962DF3E9BADCD508E2D75B94AF53403A5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number:          0DED
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
                          2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
                          3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: vcb5m0x2rxycyR/1do7dkJkY3EeC0I7cT2SKWZRxsgo=)
                          4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:ba:dc:d5:08:e2:d7:5b:94:af:53:40:3a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=63d66ca904aefaa1ae1023552401aa7ccd071dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:f2:45:e3:ed:80:39:f1:bb:4a:5a:17:2b:
                    c2:a7:9d:df:f0:61:dd:b2:58:c0:70:3d:fa:e3:fa:
                    7f:b2:b3:f6:c0:fd:de:20:ac:71:5a:a3:4e:22:ce:
                    77:40:47:9f:ac:ea:25:6c:a5:27:a5:38:c4:c7:c9:
                    aa:78:9c:70:b1:70:d1:71:55:08:5e:f2:4b:39:1b:
                    9f:b8:d1:4f:36:e4:69:99:92:c0:05:93:b9:3b:a9:
                    0c:8d:4c:48:3e:a3:d0:08:16:31:90:09:9d:9f:04:
                    ae:12:93:3e:13:28:0b:ef:06:bf:a0:08:92:aa:33:
                    4b:c9:9b:2f:69:47:2e:48:50:4a:d8:9d:5e:fa:2e:
                    59:08:57:e3:96:f1:fc:2c:bf:9d:db:7d:25:3f:b3:
                    1c:b9:0f:27:89:c9:b2:d6:e7:a2:c4:a3:08:4d:be:
                    4a:cb:51:74:ec:35:d8:99:3d:02:61:7a:41:22:d0:
                    c6:72:dc:72:05:19:17:a0:06:cd:16:8a:0f:6e:c8:
                    05:69:39:17:34:86:eb:0d:04:c3:a7:df:e4:1d:b4:
                    89:05:8f:3d:ff:ea:13:a2:69:f1:eb:05:9e:93:eb:
                    d5:78:c1:38:fc:78:b0:b3:d0:13:e1:48:d0:d4:38:
                    ba:93:ed:8d:24:54:2a:b4:57:a3:1a:2e:06:3c:95:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D6:6C:A9:04:AE:FA:A1:AE:10:23:55:24:01:AA:7C:CD:07:1D:FF
            X509v3 Authority Key Identifier:
                keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:64:dc:70:7f:27:86:ed:c1:9f:7c:f7:be:2e:5d:55:68:1f:
         ad:50:6a:26:f8:2f:53:44:d4:5d:57:dd:9b:bd:c5:53:10:b1:
         08:b5:d2:df:5a:5c:ad:67:76:b4:77:8d:0a:0c:fe:22:f6:5f:
         63:a3:dd:8e:69:e9:b9:23:c0:44:77:3e:90:96:f1:6a:11:48:
         9c:c1:3b:91:b6:05:ba:82:4c:3e:ae:4e:06:0a:f2:e2:dc:7a:
         ff:7b:cf:c3:b7:7d:86:b9:a5:aa:64:a7:89:00:0a:41:5d:2d:
         ab:1b:d1:fc:ca:fd:62:6c:d2:cc:56:25:ae:dd:1a:0c:b1:69:
         96:0e:87:ee:e9:9d:10:a8:69:5e:3b:72:59:45:09:b8:df:b7:
         42:15:9f:19:4c:bc:c1:92:70:d1:a9:a4:10:91:ac:5f:45:71:
         30:07:33:e6:68:0a:f7:ef:0c:30:e6:2c:17:ad:f4:bd:a8:66:
         de:b7:7c:b0:4f:fb:c0:96:bd:e2:d6:0b:02:d4:bc:bc:a3:bf:
         c1:e6:1b:b0:b4:cb:41:1c:5d:f4:16:00:8e:7a:a8:28:b1:05:
         8d:74:3a:4b:fc:7f:3c:32:fa:00:0d:b1:24:2c:db:fe:33:75:
         43:88:04:30:88:23:cf:58:8a:b3:99:08:d4:8d:ad:76:2b:3b:
         04:20:7c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+m63NUI4tdblK9TQDpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3
NmM1YTgwHhcNMjUwNDEzMDcwMTIxWhcNMjUwNDE0MDcwMTIxWjAzMTEwLwYDVQQD
Eyg2M2Q2NmNhOTA0YWVmYWExYWUxMDIzNTUyNDAxYWE3Y2NkMDcxZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl37yRePtgDnxu0paFyvCp53f8GHd
sljAcD364/p/srP2wP3eIKxxWqNOIs53QEefrOolbKUnpTjEx8mqeJxwsXDRcVUI
XvJLORufuNFPNuRpmZLABZO5O6kMjUxIPqPQCBYxkAmdnwSuEpM+EygL7wa/oAiS
qjNLyZsvaUcuSFBK2J1e+i5ZCFfjlvH8LL+d230lP7McuQ8nicmy1ueixKMITb5K
y1F07DXYmT0CYXpBItDGctxyBRkXoAbNFooPbsgFaTkXNIbrDQTDp9/kHbSJBY89
/+oTomnx6wWek+vVeME4/Hiws9AT4UjQ1Di6k+2NJFQqtFejGi4GPJXlDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPWbKkErvqhrhAjVSQBqnzNBx3/MB8GA1UdIwQY
MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt
NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4
LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmTccH8n
hu3Bn3z3vi5dVWgfrVBqJvgvU0TUXVfdm73FUxCxCLXS31pcrWd2tHeNCgz+IvZf
Y6PdjmnpuSPARHc+kJbxahFInME7kbYFuoJMPq5OBgry4tx6/3vPw7d9hrmlqmSn
iQAKQV0tqxvR/Mr9YmzSzFYlrt0aDLFplg6H7umdEKhpXjtyWUUJuN+3QhWfGUy8
wZJw0amkEJGsX0VxMAcz5mgK9+8MMOYsF630vahm3rd8sE/7wJa94tYLAtS8vKO/
weYbsLTLQRxd9BYAjnqoKLEFjXQ6S/x/PDL6AA2xJCzb/jN1Q4gEMIgjz1iKs5kI
1I2tdis7BCB8rQ==
-----END CERTIFICATE-----