Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File:                     qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier:          FHf3B2IDOPtw2PWMedG/+BPOdSWfzIcOlU5kM7Fhi+o=
Subject key identifier:   29:08:ED:DF:14:CC:27:23:96:2E:4E:42:92:59:25:A7:A1:CA:D3:E4
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer:       /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial:       01962F06D41DF4398F4B4066C0D7E3E7EB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number:          10C5
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
                          2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: k8nvef5rdORGsfwIi0ayInSXZQz0UgrtwSBHYS6BKXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:1d:f4:39:8f:4b:40:66:c0:d7:e3:e7:eb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=2908eddf14cc2723962e4e42925925a7a1cad3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:60:81:7c:b7:f7:99:1a:8c:14:55:6c:4d:
                    0d:6d:84:9b:01:d1:32:24:f3:37:fa:f9:ba:79:97:
                    b4:04:c1:1f:ef:b4:e0:ea:ae:69:78:fb:05:b5:06:
                    e5:7d:cc:28:9d:28:0f:8b:73:4f:d5:64:9d:6d:c1:
                    47:8f:d5:dc:40:8d:68:8f:d2:8b:7b:f7:bd:a4:12:
                    14:66:c9:7d:f9:5c:65:cd:ba:dd:ca:12:2a:f6:72:
                    18:dc:98:66:24:b9:f6:32:b2:2a:60:19:af:f2:6d:
                    48:5a:97:e8:7e:8e:e0:34:dc:78:4c:f7:d0:5a:a5:
                    78:99:8f:2f:72:80:97:7e:c9:fb:1a:d7:cf:dc:e5:
                    4a:1d:76:3b:76:97:14:fc:83:f7:de:88:02:ee:fe:
                    2d:65:31:ee:f8:64:9c:eb:2d:f0:f7:e2:f7:c4:a6:
                    a3:58:c1:15:3e:f2:dd:23:0b:7e:94:47:5a:aa:ad:
                    a0:02:e7:25:84:bf:87:bb:aa:93:0e:f8:ba:f7:bd:
                    67:0f:6c:1b:b9:81:0d:31:39:1e:7a:57:38:ba:f2:
                    3e:cd:5f:f9:26:bf:56:2e:f9:2d:b0:a6:b7:56:f7:
                    2a:65:55:16:59:65:9c:3b:fc:41:9a:9a:79:a6:4d:
                    dc:0b:a9:ca:8b:a3:5c:7f:13:4c:d9:79:62:ff:29:
                    9e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:08:ED:DF:14:CC:27:23:96:2E:4E:42:92:59:25:A7:A1:CA:D3:E4
            X509v3 Authority Key Identifier:
                keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cd:b3:05:5b:85:f2:d7:f4:be:02:74:11:f5:57:7a:4d:df:
         f3:dd:05:a6:2d:4b:ea:e0:87:d9:86:3c:e8:95:00:19:92:39:
         ed:b0:84:0f:66:d6:d9:c6:93:11:bd:0d:06:e3:53:2f:c0:79:
         f6:ab:df:e8:64:a3:b1:5b:63:24:c9:1f:43:72:e9:00:1f:0d:
         fe:7b:5f:19:c0:79:36:44:dc:a1:54:dc:4e:eb:d8:61:9e:7a:
         3e:60:19:04:34:0c:49:cf:c9:98:45:b8:83:19:c0:d7:44:67:
         05:26:1f:a1:01:d0:79:f8:68:4b:a7:10:c7:53:b9:49:11:92:
         ce:70:0f:22:4e:84:f7:6f:7b:d5:9f:bc:a3:5b:25:8d:01:ed:
         09:22:33:3c:f4:48:31:fd:9e:02:be:3a:9c:9c:00:fb:87:0b:
         7e:a3:9e:9a:ab:60:da:52:c4:ab:68:b9:c2:05:99:46:e0:25:
         a1:55:5f:8a:7f:2a:80:dc:31:eb:ea:91:5a:d0:dc:c3:c0:e3:
         b7:9f:9f:d2:0f:07:e8:65:1f:0a:fc:e9:8d:11:8c:0c:59:98:
         dd:dd:05:bf:ed:83:ab:79:87:9f:2a:02:90:14:f0:a4:54:0a:
         c0:b3:3e:27:09:b6:b9:9b:26:83:94:ce:20:96:3c:a4:56:c1:
         78:2f:d8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtQd9DmPS0BmwNfj5+sdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZTBiNmQxM2NkMTFmMzYxMTRmYTk4NDAzMzgwNDk0MWM4
MmYxNDMwHhcNMjUwNDEzMTIwMTM4WhcNMjUwNDE0MTIwMTM4WjAzMTEwLwYDVQQD
EygyOTA4ZWRkZjE0Y2MyNzIzOTYyZTRlNDI5MjU5MjVhN2ExY2FkM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE9ggXy395kajBRVbE0NbYSbAdEy
JPM3+vm6eZe0BMEf77Tg6q5pePsFtQblfcwonSgPi3NP1WSdbcFHj9XcQI1oj9KL
e/e9pBIUZsl9+VxlzbrdyhIq9nIY3JhmJLn2MrIqYBmv8m1IWpfofo7gNNx4TPfQ
WqV4mY8vcoCXfsn7GtfP3OVKHXY7dpcU/IP33ogC7v4tZTHu+GSc6y3w9+L3xKaj
WMEVPvLdIwt+lEdaqq2gAuclhL+Hu6qTDvi6971nD2wbuYENMTkeelc4uvI+zV/5
Jr9WLvktsKa3VvcqZVUWWWWcO/xBmpp5pk3cC6nKi6NcfxNM2Xli/ymeMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkI7d8UzCcjli5OQpJZJaehytPkMB8GA1UdIwQY
MBaAFKngttE80R82EU+phAM4BJQcgvFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUt
ZDMyZjhkODc1Zjk4LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUtZDMyZjhkODc1Zjk4
LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAes2zBVuF
8tf0vgJ0EfVXek3f890Fpi1L6uCH2YY86JUAGZI57bCED2bW2caTEb0NBuNTL8B5
9qvf6GSjsVtjJMkfQ3LpAB8N/ntfGcB5NkTcoVTcTuvYYZ56PmAZBDQMSc/JmEW4
gxnA10RnBSYfoQHQefhoS6cQx1O5SRGSznAPIk6E92971Z+8o1sljQHtCSIzPPRI
Mf2eAr46nJwA+4cLfqOemqtg2lLEq2i5wgWZRuAloVVfin8qgNwx6+qRWtDcw8Dj
t5+f0g8H6GUfCvzpjRGMDFmY3d0Fv+2Dq3mHnyoCkBTwpFQKwLM+Jwm2uZsmg5TO
IJY8pFbBeC/Yww==
-----END CERTIFICATE-----