Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File:                     QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier:          012fnpzsuU1HNEuQGu8VmGe8akjLkCKAOhFX+lRkiXk=
Subject key identifier:   9A:F9:75:0A:6F:33:D6:40:D0:63:D6:97:39:5E:5E:48:80:CA:AD:A6
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer:       /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial:       01962ECFCD23D9A3567E150035D1E965ED7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number:          0A58
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: 1Va85vqWT5I/FFKsDNxfwEJ0XDT4H/axGCZOBBgLPRw=)
                          2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cd:23:d9:a3:56:7e:15:00:35:d1:e9:65:ed:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=9af9750a6f33d640d063d697395e5e4880caada6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:a1:46:06:54:5e:f8:f9:ad:3d:ca:93:4f:
                    be:7b:f4:b8:5a:1e:21:e0:5b:9b:9f:ae:a3:64:a2:
                    b3:3c:fe:ce:82:00:40:88:2d:2a:d5:ee:5a:6e:31:
                    16:62:53:f0:4b:53:1a:72:43:f9:34:91:c0:01:a7:
                    f2:c8:9b:ba:70:67:16:a9:6a:e6:8a:7c:98:24:66:
                    9c:de:6d:bf:a3:1b:69:00:a7:83:0f:ec:6b:cc:25:
                    d8:f6:f8:e4:05:c9:58:d5:82:28:31:4b:2e:a8:82:
                    16:d7:e5:36:04:e6:af:d9:b5:35:93:a0:81:49:c6:
                    58:4f:06:43:93:1e:e3:07:d1:ad:a7:1b:d1:8a:66:
                    a6:56:c2:f2:c7:12:fe:83:2d:b8:b9:47:4a:af:9f:
                    41:19:b6:0d:59:67:ad:77:44:c0:b7:21:24:fa:ca:
                    e1:b6:11:a7:13:3a:e5:7a:a4:05:9f:9a:81:1d:47:
                    91:63:83:8a:bd:ee:04:1d:76:2a:92:37:ec:7b:61:
                    66:5e:f1:d5:86:4d:d9:11:70:b3:be:c9:12:46:49:
                    94:26:b5:ef:ad:8d:f1:eb:9a:c0:88:4c:18:39:ca:
                    86:7c:6c:90:c2:6c:12:a7:d1:59:e1:bc:d8:d0:e2:
                    9f:3e:7d:eb:67:95:be:c1:06:f7:b0:a1:b6:67:a3:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:75:0A:6F:33:D6:40:D0:63:D6:97:39:5E:5E:48:80:CA:AD:A6
            X509v3 Authority Key Identifier:
                keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4a:42:f1:44:48:23:bc:47:23:c2:62:de:c6:12:7e:20:10:
         08:49:68:80:3e:b2:5c:05:41:12:59:b4:ca:47:0a:d3:c3:29:
         3d:da:72:ea:83:6d:db:d7:b2:e7:dc:c5:8d:16:85:fa:e0:03:
         04:c4:a8:37:2f:45:b7:96:4e:c5:e6:6d:3b:e4:05:df:74:f2:
         a6:49:6a:7e:f1:bd:c5:ed:9c:47:31:5e:d2:e2:f6:2b:f2:d6:
         95:79:a2:c6:17:82:f6:50:33:35:a1:a9:86:30:3c:93:88:ef:
         04:28:1b:d8:93:46:27:2f:95:20:8a:68:9d:1a:47:82:52:f7:
         3d:c9:79:5c:a5:fc:b7:7a:ee:63:6d:60:48:be:3d:75:9c:9e:
         2a:75:b8:5b:49:02:c1:5b:68:1e:40:0f:a7:b1:4c:7c:4d:c6:
         b4:2e:f8:52:fb:18:2b:03:b9:24:fc:cc:c6:f8:90:e7:8c:a7:
         4c:32:ac:1e:59:c1:5b:11:74:3d:70:94:35:c8:c0:d7:10:b1:
         d9:c3:5f:ef:bb:00:17:10:c8:21:41:d7:67:49:75:8e:65:3b:
         cd:ee:d7:5e:58:97:31:7f:14:85:7f:d5:4b:ff:5b:83:e4:43:
         1b:1e:9f:1e:f3:cb:92:cc:4a:09:8a:31:a7:a8:96:9b:be:ea:
         c2:fb:23:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz80j2aNWfhUANdHpZe17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNjQ0NmE0YTFjYjU2YjNmNzZmZTZiNGRlZmFiYWQzYmQ5
YjUyMDcwHhcNMjUwNDEzMTEwMTMyWhcNMjUwNDE0MTEwMTMyWjAzMTEwLwYDVQQD
Eyg5YWY5NzUwYTZmMzNkNjQwZDA2M2Q2OTczOTVlNWU0ODgwY2FhZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3yhRgZUXvj5rT3Kk0++e/S4Wh4h
4Fubn66jZKKzPP7OggBAiC0q1e5abjEWYlPwS1MackP5NJHAAafyyJu6cGcWqWrm
inyYJGac3m2/oxtpAKeDD+xrzCXY9vjkBclY1YIoMUsuqIIW1+U2BOav2bU1k6CB
ScZYTwZDkx7jB9GtpxvRimamVsLyxxL+gy24uUdKr59BGbYNWWetd0TAtyEk+srh
thGnEzrleqQFn5qBHUeRY4OKve4EHXYqkjfse2FmXvHVhk3ZEXCzvskSRkmUJrXv
rY3x65rAiEwYOcqGfGyQwmwSp9FZ4bzY0OKfPn3rZ5W+wQb3sKG2Z6Mr6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr5dQpvM9ZA0GPWlzleXkiAyq2mMB8GA1UdIwQY
MBaAFEJkRqShy1az92/mtN76utO9m1IHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEt
ZWRlMDI4MmY5YmI5LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEtZWRlMDI4MmY5YmI5
LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEpC8URI
I7xHI8Ji3sYSfiAQCElogD6yXAVBElm0ykcK08MpPdpy6oNt29ey59zFjRaF+uAD
BMSoNy9Ft5ZOxeZtO+QF33TypklqfvG9xe2cRzFe0uL2K/LWlXmixheC9lAzNaGp
hjA8k4jvBCgb2JNGJy+VIIponRpHglL3Pcl5XKX8t3ruY21gSL49dZyeKnW4W0kC
wVtoHkAPp7FMfE3GtC74UvsYKwO5JPzMxviQ54ynTDKsHlnBWxF0PXCUNcjA1xCx
2cNf77sAFxDIIUHXZ0l1jmU7ze7XXliXMX8UhX/VS/9bg+RDGx6fHvPLksxKCYox
p6iWm77qwvsjAw==
-----END CERTIFICATE-----