Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          XteFN4jtcJnHS8ApbruMXceUW3yJ/4flFzBduq5i30c=
Subject key identifier:   73:BA:C6:34:65:EE:AC:40:58:0D:DC:BB:87:7A:9C:1D:BA:65:3A:FF
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       01962ECFDBA80C1E067CF648C4D47C426490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          097C
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: MBEC4lXdbDP9fILCLKbQmzpJkqi67hhDd4UtzVpGLh8=)
                          2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:db:a8:0c:1e:06:7c:f6:48:c4:d4:7c:42:64:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=73bac63465eeac40580ddcbb877a9c1dba653aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:a9:56:f5:89:1d:91:27:dd:1a:74:b5:ce:
                    f3:e3:be:f8:ab:25:b8:2e:d4:c6:18:7a:d2:dc:e9:
                    5e:7c:a3:a5:7d:73:8e:c6:8a:bf:9c:8a:7f:d1:76:
                    4f:5d:b2:b5:38:97:35:24:4c:2f:a5:37:68:a2:92:
                    4d:36:bc:26:fc:01:3e:e6:12:b3:f2:cf:1c:fe:bd:
                    2b:47:ed:bc:b4:67:40:3f:68:95:4b:f1:d2:af:60:
                    27:76:b5:57:8a:06:0d:4a:9a:ca:1e:b7:e2:09:75:
                    75:1f:94:b5:2b:76:43:39:df:2a:aa:a1:da:ce:f4:
                    e3:c3:13:99:36:88:23:c0:f4:2e:ca:1b:8c:78:28:
                    94:ae:f9:7e:5e:d9:1f:5d:5f:ce:48:1a:92:78:8a:
                    90:99:b7:ff:d7:e4:89:9c:5c:2f:62:b0:5f:ff:63:
                    13:95:b1:04:54:d1:d9:74:88:89:b5:52:b2:3c:1b:
                    be:03:11:71:4b:5d:ec:f7:af:9d:58:7f:6d:47:b9:
                    bc:e3:0f:3e:f4:cd:10:80:52:ae:68:da:1d:d8:e9:
                    75:93:b6:b7:f7:e1:97:0b:50:25:69:3c:e0:7c:ac:
                    71:06:03:8e:33:6e:61:39:3c:4c:de:4f:21:48:8f:
                    6d:5e:c0:49:aa:0e:6a:e7:b7:1f:22:6a:ba:9f:cd:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:C6:34:65:EE:AC:40:58:0D:DC:BB:87:7A:9C:1D:BA:65:3A:FF
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:19:da:34:df:6e:a1:e4:c9:d8:ac:9e:81:ad:b7:55:7a:fc:
         75:63:38:c1:b8:d4:ab:04:55:b1:ba:96:2c:87:b6:34:56:af:
         f2:a3:08:9f:d7:f5:ff:05:b5:6e:3f:bf:06:7a:1f:0a:b4:d4:
         ac:f7:20:e7:e6:a2:b2:1d:0e:5f:69:bb:89:78:a2:dc:2b:55:
         e3:40:74:4c:2c:3c:2b:48:5f:0a:54:67:08:25:49:a9:b3:ee:
         9c:69:80:41:64:ac:0a:c8:83:fb:19:40:2a:08:26:a9:d6:d8:
         36:69:49:ee:60:e9:f2:c1:23:5b:81:19:3f:0f:76:b4:83:0b:
         99:dd:e8:ca:61:13:b7:df:86:ea:d0:3d:b8:ea:36:66:72:4a:
         eb:93:15:ac:1e:54:83:bd:38:bc:ad:a5:8a:d8:b1:54:6a:6b:
         6a:3e:fa:8e:f0:6e:d5:72:06:15:31:0d:c0:e0:58:0e:e5:e7:
         3e:fe:71:d8:62:22:65:09:77:dc:56:44:2d:ea:45:bd:60:10:
         84:45:aa:70:bb:69:54:b6:00:d1:53:f0:5a:02:33:23:95:53:
         53:83:77:d9:5c:4f:a1:62:38:99:16:aa:4a:92:c2:8a:92:bb:
         64:0c:4a:62:08:8c:2e:61:20:57:d2:c9:6b:a4:e9:d7:c9:01:
         07:b8:cc:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9uoDB4GfPZIxNR8QmSQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjUwNDEzMTEwMTM2WhcNMjUwNDE0MTEwMTM2WjAzMTEwLwYDVQQD
Eyg3M2JhYzYzNDY1ZWVhYzQwNTgwZGRjYmI4NzdhOWMxZGJhNjUzYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOypVvWJHZEn3Rp0tc7z4774qyW4
LtTGGHrS3OlefKOlfXOOxoq/nIp/0XZPXbK1OJc1JEwvpTdoopJNNrwm/AE+5hKz
8s8c/r0rR+28tGdAP2iVS/HSr2AndrVXigYNSprKHrfiCXV1H5S1K3ZDOd8qqqHa
zvTjwxOZNogjwPQuyhuMeCiUrvl+XtkfXV/OSBqSeIqQmbf/1+SJnFwvYrBf/2MT
lbEEVNHZdIiJtVKyPBu+AxFxS13s96+dWH9tR7m84w8+9M0QgFKuaNod2Ol1k7a3
9+GXC1AlaTzgfKxxBgOOM25hOTxM3k8hSI9tXsBJqg5q57cfImq6n801KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO6xjRl7qxAWA3cu4d6nB26ZTr/MB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRnaNN9u
oeTJ2Kyega23VXr8dWM4wbjUqwRVsbqWLIe2NFav8qMIn9f1/wW1bj+/BnofCrTU
rPcg5+aish0OX2m7iXii3CtV40B0TCw8K0hfClRnCCVJqbPunGmAQWSsCsiD+xlA
KggmqdbYNmlJ7mDp8sEjW4EZPw92tIMLmd3oymETt9+G6tA9uOo2ZnJK65MVrB5U
g704vK2litixVGpraj76jvBu1XIGFTENwOBYDuXnPv5x2GIiZQl33FZELepFvWAQ
hEWqcLtpVLYA0VPwWgIzI5VTU4N32VxPoWI4mRaqSpLCipK7ZAxKYgiMLmEgV9LJ
a6Tp18kBB7jMlg==
-----END CERTIFICATE-----