Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File:                     3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier:          QRPSJcHMONOAULutICCO6a2rqm0MKACMXuK1F3g/NUw=
Subject key identifier:   86:6B:EE:C4:46:C0:5E:9A:4A:E4:9F:3F:C3:AE:5E:A7:40:2A:6B:52
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer:       /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial:       01962DF44EC9B32A528A918B491EE873F769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: QafiaAO+A9kqd/K0MD/foX4VNtGBy6PePsl0JalVnMg=)
                          2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
                          3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4e:c9:b3:2a:52:8a:91:8b:49:1e:e8:73:f7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=866beec446c05e9a4ae49f3fc3ae5ea7402a6b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:25:c1:3d:77:85:74:6a:ac:54:34:34:d5:
                    ce:be:14:80:cf:6e:c7:fa:a3:25:d6:86:e4:ee:e6:
                    ce:e6:f3:df:27:fb:18:2f:d6:bf:c2:fc:bd:d5:14:
                    1c:b4:c0:35:66:6a:a0:9e:56:13:9f:78:a3:68:1f:
                    15:6a:eb:bb:b1:d9:22:ba:09:1f:c3:df:fe:b8:f9:
                    3f:35:eb:6a:1b:f8:b4:bc:c6:70:46:f4:22:61:26:
                    38:1c:3e:8f:89:92:61:a1:8e:70:c5:9e:09:78:8f:
                    86:ee:89:1a:99:f9:22:19:42:95:68:bf:a3:5c:12:
                    e1:c7:cb:7f:39:a6:0b:a2:c0:46:d5:ed:59:44:17:
                    5c:5a:ac:89:a2:a3:b3:7d:8f:f4:8d:f5:81:ce:2a:
                    1b:f5:b8:79:6f:e9:05:3f:7f:55:59:5b:0c:ac:5b:
                    21:98:67:d7:68:3f:96:ff:49:83:a1:96:f6:f1:f0:
                    69:ee:a5:12:39:ec:e2:9c:b5:5e:f5:b5:c0:91:30:
                    41:b3:d7:70:93:d5:17:22:fe:e0:41:f2:69:20:55:
                    45:9f:02:0b:45:2c:6f:0d:b7:a8:55:1d:74:60:94:
                    55:66:64:94:27:96:82:14:ca:c3:ee:15:44:2c:5f:
                    f0:75:2d:73:90:6b:a6:c2:9d:e5:e1:73:ef:e1:4d:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6B:EE:C4:46:C0:5E:9A:4A:E4:9F:3F:C3:AE:5E:A7:40:2A:6B:52
            X509v3 Authority Key Identifier:
                keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:07:88:37:f0:42:97:3a:61:8d:fb:cc:87:24:1a:1a:ed:80:
         50:12:e7:22:75:af:88:44:73:91:35:c7:fa:6b:7d:2d:63:90:
         fe:88:d3:cb:cf:46:25:b1:91:ea:88:11:ca:5b:5e:25:63:b5:
         2a:2f:cf:30:ca:dd:28:57:7c:bb:6d:de:c7:d3:94:12:fd:f9:
         33:98:d9:e7:cc:65:25:dc:66:fd:9e:4e:68:da:7f:49:ef:e8:
         8a:10:bf:09:bd:d4:d0:99:df:ad:5f:9d:4e:de:0a:d4:aa:77:
         9c:14:5a:40:d8:9f:55:4c:9b:1e:4b:9a:b4:65:b9:5b:84:51:
         2a:e4:6e:48:d9:4a:14:37:03:f3:39:25:41:b1:40:fa:52:7f:
         4f:4e:83:cd:40:76:12:a3:aa:77:f6:0a:a9:41:ea:7e:e1:2d:
         4c:05:a5:d4:15:72:ca:28:21:55:02:76:b0:6a:b3:3a:79:70:
         84:74:ac:1d:40:fc:dd:a6:d4:6a:fb:2d:86:80:5c:30:2a:d2:
         4a:a0:e3:ab:24:cf:8f:a6:85:1a:eb:97:70:8c:15:3a:fa:45:
         69:3d:f1:91:19:3e:2d:e7:c5:cf:2d:72:a8:2e:c6:3b:d6:49:
         a4:bd:ab:1f:3a:33:d3:8e:a9:90:51:73:b3:f1:5c:4c:70:6c:
         7a:67:79:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9E7JsypSipGLSR7oc/dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjUwNDEzMDcwMTQ3WhcNMjUwNDE0MDcwMTQ3WjAzMTEwLwYDVQQD
Eyg4NjZiZWVjNDQ2YzA1ZTlhNGFlNDlmM2ZjM2FlNWVhNzQwMmE2YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIQlwT13hXRqrFQ0NNXOvhSAz27H
+qMl1obk7ubO5vPfJ/sYL9a/wvy91RQctMA1ZmqgnlYTn3ijaB8Vauu7sdkiugkf
w9/+uPk/NetqG/i0vMZwRvQiYSY4HD6PiZJhoY5wxZ4JeI+G7okamfkiGUKVaL+j
XBLhx8t/OaYLosBG1e1ZRBdcWqyJoqOzfY/0jfWBziob9bh5b+kFP39VWVsMrFsh
mGfXaD+W/0mDoZb28fBp7qUSOezinLVe9bXAkTBBs9dwk9UXIv7gQfJpIFVFnwIL
RSxvDbeoVR10YJRVZmSUJ5aCFMrD7hVELF/wdS1zkGumwp3l4XPv4U3hTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZr7sRGwF6aSuSfP8OuXqdAKmtSMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQeIN/BC
lzphjfvMhyQaGu2AUBLnInWviERzkTXH+mt9LWOQ/ojTy89GJbGR6ogRylteJWO1
Ki/PMMrdKFd8u23ex9OUEv35M5jZ58xlJdxm/Z5OaNp/Se/oihC/Cb3U0JnfrV+d
Tt4K1Kp3nBRaQNifVUybHkuatGW5W4RRKuRuSNlKFDcD8zklQbFA+lJ/T06DzUB2
EqOqd/YKqUHqfuEtTAWl1BVyyighVQJ2sGqzOnlwhHSsHUD83abUavsthoBcMCrS
SqDjqyTPj6aFGuuXcIwVOvpFaT3xkRk+LefFzy1yqC7GO9ZJpL2rHzoz046pkFFz
s/FcTHBsemd5kA==
-----END CERTIFICATE-----