Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File:                     qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier:          WTMsMiLsq92L7LUiWNXA7AdyPrm7FK4/6JvbuwyfYcY=
Subject key identifier:   C5:2B:3D:6A:BD:F7:3E:F5:AA:A3:17:5A:9D:80:AC:8F:9B:31:4A:FD
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer:       /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial:       01962F07007714D5BA2D73249E2F2B333858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number:          073B
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
                          2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: DJrWEtVOwyq1A5eTLJdvZamK8NDGYLdeudyGfHxuOCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:00:77:14:d5:ba:2d:73:24:9e:2f:2b:33:38:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=c52b3d6abdf73ef5aaa3175a9d80ac8f9b314afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:c1:12:9d:a5:56:72:6a:27:7c:36:a6:8c:
                    f0:e3:69:17:8c:dd:81:84:c0:a0:02:6b:a8:06:df:
                    3e:0f:1a:bf:a3:6e:55:9e:08:7f:ff:c9:b7:92:ed:
                    6b:43:46:01:21:c6:9f:53:3c:de:ba:e4:8a:79:13:
                    5e:42:f7:cd:e9:e7:34:9e:37:8a:9d:ce:41:b2:4e:
                    42:91:09:86:8c:29:92:61:df:71:cc:70:a6:95:ff:
                    4c:c2:6c:e5:a9:4b:48:05:ee:84:d4:71:63:fa:15:
                    3a:ea:68:60:7a:b2:05:c6:e6:04:f2:2e:a4:68:5c:
                    3a:28:72:91:a4:86:eb:90:f2:aa:9b:92:84:e6:94:
                    d2:83:73:9f:78:66:a2:1d:91:5c:b9:4e:a0:32:04:
                    01:d1:a1:f3:57:90:fc:d1:bc:56:b1:8c:37:dc:35:
                    43:4b:8c:d9:fa:8f:cd:02:f5:88:52:52:a6:d6:a4:
                    a4:e5:8e:ad:7a:d0:d0:6b:d8:14:f6:da:47:95:d6:
                    b7:06:19:bd:0e:50:f1:e9:f1:cd:9a:0a:38:89:96:
                    a8:99:a8:cd:94:ca:a4:96:6e:3e:d1:80:67:81:b7:
                    e0:1c:fa:e0:0e:6e:d7:58:6f:83:12:ad:48:a3:14:
                    b2:81:cb:da:2c:2c:50:93:f5:83:4c:47:c4:03:4e:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:3D:6A:BD:F7:3E:F5:AA:A3:17:5A:9D:80:AC:8F:9B:31:4A:FD
            X509v3 Authority Key Identifier:
                keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e3:b5:d6:88:a7:89:ab:7c:ea:94:da:95:6f:d1:1e:f0:ef:
         6e:ec:e8:c9:a8:c6:4f:d5:18:81:29:36:f4:04:c8:fe:2a:ff:
         ce:34:e0:50:f9:af:41:4f:37:06:cb:e2:c3:34:e8:4b:cb:05:
         42:3e:44:96:43:ee:57:4f:d4:f6:27:1b:82:6f:e2:01:09:ec:
         0b:bb:f2:65:9b:95:cc:f7:ad:f2:cc:57:cc:76:2f:0c:b1:c5:
         73:61:18:8f:4d:a0:80:38:4f:bd:f1:0f:30:70:37:8d:d3:26:
         db:fd:e7:81:3b:1f:a8:8b:22:56:9d:52:8c:88:82:80:56:d1:
         8c:6d:2e:09:74:e8:f6:bb:48:29:7c:07:26:41:7d:a1:a1:f4:
         87:27:45:2c:60:84:9c:5f:65:03:6c:98:48:d2:14:9c:5e:b8:
         44:25:ec:0a:8b:60:e1:5d:e2:34:fe:41:25:79:93:d5:26:13:
         4d:bc:18:af:30:f5:a3:6e:1f:f8:56:0f:df:b4:ee:a7:bb:8e:
         df:ac:57:9a:06:b6:32:ff:fe:18:9f:6e:6e:e9:9a:3a:c0:17:
         16:f5:88:6c:0f:bf:af:9c:be:80:14:fd:41:b9:68:67:86:19:
         fa:f3:ef:a3:b0:0d:cc:76:1d:0b:57:99:af:47:1d:13:aa:64:
         ba:0a:b1:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwB3FNW6LXMkni8rMzhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzIyM2ZiMTk0MjExNWU0OGE5NzU0MjA3MjkyZDAwYTA4
MmVjZGYwHhcNMjUwNDEzMTIwMTUwWhcNMjUwNDE0MTIwMTUwWjAzMTEwLwYDVQQD
EyhjNTJiM2Q2YWJkZjczZWY1YWFhMzE3NWE5ZDgwYWM4ZjliMzE0YWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt27BEp2lVnJqJ3w2pozw42kXjN2B
hMCgAmuoBt8+Dxq/o25Vngh//8m3ku1rQ0YBIcafUzzeuuSKeRNeQvfN6ec0njeK
nc5Bsk5CkQmGjCmSYd9xzHCmlf9MwmzlqUtIBe6E1HFj+hU66mhgerIFxuYE8i6k
aFw6KHKRpIbrkPKqm5KE5pTSg3OfeGaiHZFcuU6gMgQB0aHzV5D80bxWsYw33DVD
S4zZ+o/NAvWIUlKm1qSk5Y6tetDQa9gU9tpHlda3Bhm9DlDx6fHNmgo4iZaomajN
lMqklm4+0YBngbfgHPrgDm7XWG+DEq1IoxSygcvaLCxQk/WDTEfEA07OuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUrPWq99z71qqMXWp2ArI+bMUr9MB8GA1UdIwQY
MBaAFKrCI/sZQhFeSKl1QgcpLQCgguzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82MGViNDgtMjc5ZC00YWZlLThkOGEt
MWRhYTk1MWM3MWI3LzEvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82MGViNDgtMjc5ZC00YWZlLThkOGEtMWRhYTk1MWM3MWI3
LzEvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeO11oin
iat86pTalW/RHvDvbuzoyajGT9UYgSk29ATI/ir/zjTgUPmvQU83BsviwzToS8sF
Qj5ElkPuV0/U9icbgm/iAQnsC7vyZZuVzPet8sxXzHYvDLHFc2EYj02ggDhPvfEP
MHA3jdMm2/3ngTsfqIsiVp1SjIiCgFbRjG0uCXTo9rtIKXwHJkF9oaH0hydFLGCE
nF9lA2yYSNIUnF64RCXsCotg4V3iNP5BJXmT1SYTTbwYrzD1o24f+FYP37Tup7uO
36xXmga2Mv/+GJ9ubumaOsAXFvWIbA+/r5y+gBT9QbloZ4YZ+vPvo7ANzHYdC1eZ
r0cdE6pkugqxHQ==
-----END CERTIFICATE-----