Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File:                     qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier:          58wy54uZRUn7ZEFtiv1IUpNWT3yXZSJPlEq5K611v0M=
Subject key identifier:   83:1A:59:FA:89:B2:6E:EB:2E:2F:C0:46:32:68:23:F2:5A:9F:D6:7F
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer:       /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial:       01962E61BDE326A2AE592736B3FEFE945631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
                          2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: gqa2dxWYug5LeHuI/cH1fcz/msTYpW1gM4a9ysEIKwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bd:e3:26:a2:ae:59:27:36:b3:fe:fe:94:56:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=831a59fa89b26eeb2e2fc046326823f25a9fd67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:8c:40:8a:88:f8:27:41:d5:82:bc:59:93:
                    ad:dd:bc:18:6e:bb:98:de:2a:b7:b6:8c:f7:8d:b9:
                    14:32:6a:73:b4:86:3d:ce:6b:b0:2a:b3:b2:08:aa:
                    de:8d:6d:eb:fe:1c:6b:4b:50:3a:d2:d3:f2:50:bc:
                    b2:d0:06:94:fc:74:82:23:0f:87:22:2c:47:8a:d5:
                    8c:db:b8:de:25:f5:01:1b:ab:c0:3c:0c:c4:72:e9:
                    e5:ed:9f:80:0d:be:fb:cb:c1:dd:b2:c8:23:84:91:
                    c9:c5:05:4a:5c:61:1d:8e:53:f3:4a:75:bd:26:23:
                    56:ec:24:75:db:a8:69:42:1b:8d:de:15:2a:fe:d7:
                    5f:82:13:2d:0c:21:20:48:64:3c:f2:c2:fe:f0:fa:
                    9b:35:06:c1:ca:cd:92:b6:30:ac:b1:d8:4c:c9:60:
                    01:3d:de:d9:65:d6:fc:44:d5:fc:4b:d8:3a:91:0f:
                    19:fe:63:52:b0:7e:44:d8:6b:46:f0:5f:7e:bc:1e:
                    d3:9a:d5:fd:50:ea:85:a6:b8:ce:f2:05:86:d3:d7:
                    51:a8:c3:c9:d3:a5:ce:f6:e4:9c:df:06:7e:c0:47:
                    2c:e6:07:5b:e6:07:b8:6d:42:64:f1:b3:77:6a:c6:
                    89:12:cf:76:8a:cf:cb:ce:c0:22:6b:2f:cd:a1:7f:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1A:59:FA:89:B2:6E:EB:2E:2F:C0:46:32:68:23:F2:5A:9F:D6:7F
            X509v3 Authority Key Identifier:
                keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:55:8e:ff:fb:ca:77:f6:0c:06:5c:7d:9a:b6:f4:50:e9:4f:
         0a:92:77:4d:4a:0a:1b:d9:60:1d:38:7c:ec:c5:f8:a0:2a:32:
         7a:41:44:8c:15:43:b0:42:3f:d5:77:f4:93:b1:f6:a7:33:a1:
         4a:1f:e8:38:2c:90:51:a9:ef:0b:48:ce:5d:6d:88:a9:12:66:
         46:17:99:d4:8f:ff:8e:0b:b8:f2:a4:51:10:47:ef:a5:fe:ad:
         37:f0:4c:a4:98:bb:8d:ed:05:f2:90:de:10:b1:d9:2d:46:6c:
         a2:32:c1:02:fe:e3:51:22:e7:a9:40:57:4b:6a:d3:3c:29:96:
         48:03:f6:31:30:74:71:15:9d:21:7f:ab:60:42:f5:78:47:9a:
         c5:98:9e:50:02:c7:2d:49:3a:69:62:5f:1c:9a:5a:14:c7:60:
         f3:23:2a:f9:ff:8c:16:ec:b9:74:63:83:f8:77:99:87:2e:ce:
         32:8f:d6:6d:78:16:a0:de:d7:8d:4b:c5:08:75:97:6d:3c:91:
         42:d4:e1:fb:86:79:e1:f8:6b:7d:21:24:8e:87:cb:1e:e7:c8:
         6a:fd:b1:bd:c2:04:8b:47:ad:fe:34:3f:6f:2f:19:98:1a:a7:
         77:fc:91:f6:93:b0:46:65:14:03:5b:a5:e7:10:e1:73:05:8d:
         b4:71:87:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYb3jJqKuWSc2s/7+lFYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw
NDc3OWYwHhcNMjUwNDEzMDkwMTE5WhcNMjUwNDE0MDkwMTE5WjAzMTEwLwYDVQQD
Eyg4MzFhNTlmYTg5YjI2ZWViMmUyZmMwNDYzMjY4MjNmMjVhOWZkNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpmMQIqI+CdB1YK8WZOt3bwYbruY
3iq3toz3jbkUMmpztIY9zmuwKrOyCKrejW3r/hxrS1A60tPyULyy0AaU/HSCIw+H
IixHitWM27jeJfUBG6vAPAzEcunl7Z+ADb77y8HdssgjhJHJxQVKXGEdjlPzSnW9
JiNW7CR126hpQhuN3hUq/tdfghMtDCEgSGQ88sL+8PqbNQbBys2StjCssdhMyWAB
Pd7ZZdb8RNX8S9g6kQ8Z/mNSsH5E2GtG8F9+vB7TmtX9UOqFprjO8gWG09dRqMPJ
06XO9uSc3wZ+wEcs5gdb5ge4bUJk8bN3asaJEs92is/LzsAiay/NoX/PUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMaWfqJsm7rLi/ARjJoI/Jan9Z/MB8GA1UdIwQY
MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt
ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx
LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFWO//vK
d/YMBlx9mrb0UOlPCpJ3TUoKG9lgHTh87MX4oCoyekFEjBVDsEI/1Xf0k7H2pzOh
Sh/oOCyQUanvC0jOXW2IqRJmRheZ1I//jgu48qRREEfvpf6tN/BMpJi7je0F8pDe
ELHZLUZsojLBAv7jUSLnqUBXS2rTPCmWSAP2MTB0cRWdIX+rYEL1eEeaxZieUALH
LUk6aWJfHJpaFMdg8yMq+f+MFuy5dGOD+HeZhy7OMo/WbXgWoN7XjUvFCHWXbTyR
QtTh+4Z54fhrfSEkjofLHufIav2xvcIEi0et/jQ/by8ZmBqnd/yR9pOwRmUUA1ul
5xDhcwWNtHGHPA==
-----END CERTIFICATE-----