Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File:                     QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier:          9KA/qJafwrV92Y5rHGZzzNAuqAXHPCaGcv4mE6/u+LI=
Subject key identifier:   C8:54:D9:EB:8C:85:20:AB:DF:E4:12:61:62:7E:5A:4B:C0:08:B9:BA
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer:       /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial:       01962F749513AD30BF88273A0BB6D5741C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number:          1006
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
                          2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: hzHVm9YIhL8TtHxaues7xkHmMk8D3ThnPILCVePwBcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:13:ad:30:bf:88:27:3a:0b:b6:d5:74:1c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=c854d9eb8c8520abdfe41261627e5a4bc008b9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:c7:f0:f5:a8:b9:50:a1:45:ab:46:c2:61:
                    54:5a:1a:fa:e6:85:33:83:af:8a:66:4b:37:f8:19:
                    66:34:72:1f:82:a5:ad:d1:a9:36:3c:6c:7b:35:7a:
                    26:b3:e0:69:4f:95:e9:3c:7a:3e:0d:1d:47:b2:44:
                    65:f2:9f:de:0b:90:84:19:93:ad:e0:80:51:e7:db:
                    82:a3:a1:2c:e6:b7:d7:8a:1a:31:85:05:73:53:aa:
                    f8:a5:94:75:7a:8c:8e:68:6d:69:cd:62:02:c5:34:
                    6f:09:0e:63:21:43:b3:4e:0c:b5:66:b0:02:7a:da:
                    00:d2:c7:1a:01:89:97:a6:ee:a9:b2:cb:2e:62:6d:
                    84:43:12:f4:14:83:d1:bb:92:6f:5b:47:75:32:83:
                    0e:ff:be:41:10:4f:2b:36:50:34:e7:92:11:9f:07:
                    b5:90:a3:27:5d:48:8c:55:67:95:f1:f8:65:b1:5c:
                    ff:06:20:f3:46:35:07:d9:07:c1:ad:35:84:d5:11:
                    22:db:79:d8:e5:33:ba:4b:2f:e0:34:cf:57:9a:9b:
                    f6:7b:57:84:97:40:fe:6c:01:39:62:86:68:d9:c7:
                    2a:e6:ac:f1:11:6b:ce:ba:b4:dc:7a:29:3d:3e:ec:
                    41:79:cc:cc:d2:4f:f6:28:11:25:1b:ef:5e:39:28:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:54:D9:EB:8C:85:20:AB:DF:E4:12:61:62:7E:5A:4B:C0:08:B9:BA
            X509v3 Authority Key Identifier:
                keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:68:81:a6:fb:a7:33:46:1f:9f:1b:62:cd:66:75:12:c5:06:
         6c:5f:2b:59:bc:54:5f:5b:2e:47:4c:84:da:f3:bf:7e:8f:75:
         e4:fc:9a:fc:db:1e:d5:eb:8b:4b:72:20:00:54:bb:ce:41:f7:
         fb:32:50:73:ea:0d:e4:64:86:20:1f:e0:cd:30:6d:07:2f:10:
         85:49:8e:d2:3f:c0:56:67:cf:bb:20:17:e8:24:64:31:08:4e:
         e2:79:d0:4e:2f:9f:63:98:ad:1a:d0:3d:83:d6:74:22:9f:e2:
         a0:fd:c7:d9:67:10:c9:0f:7a:01:7d:13:eb:8f:1b:7f:a8:73:
         27:f5:ac:2b:31:0a:88:62:1c:a0:3e:63:41:f5:f4:4a:6b:83:
         7a:3d:8b:79:f9:aa:c1:92:30:af:50:27:8a:0e:b5:8b:ab:46:
         04:eb:e5:2e:fb:2d:fc:a5:d3:80:a7:9c:a9:fd:d6:5e:37:ca:
         f2:9f:35:70:2b:4f:63:dd:78:18:6d:7d:c4:52:b0:89:ec:eb:
         7b:74:00:c4:da:a6:a9:f0:c3:1c:85:6c:67:3b:c4:e1:17:26:
         dd:15:f4:81:1e:05:4f:a1:31:04:f0:2e:11:f6:ce:6d:56:ae:
         d0:52:9c:d3:a9:53:b7:59:b3:fa:5c:fa:f2:e2:08:00:5d:4b:
         95:33:4f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJUTrTC/iCc6C7bVdBwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTFlNTgyNjI3MGY0OWVhZTk5OWQ0ODllODVkZWNjYzg0
NzczOGIwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
EyhjODU0ZDllYjhjODUyMGFiZGZlNDEyNjE2MjdlNWE0YmMwMDhiOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsXH8PWouVChRatGwmFUWhr65oUz
g6+KZks3+BlmNHIfgqWt0ak2PGx7NXoms+BpT5XpPHo+DR1HskRl8p/eC5CEGZOt
4IBR59uCo6Es5rfXihoxhQVzU6r4pZR1eoyOaG1pzWICxTRvCQ5jIUOzTgy1ZrAC
etoA0scaAYmXpu6psssuYm2EQxL0FIPRu5JvW0d1MoMO/75BEE8rNlA055IRnwe1
kKMnXUiMVWeV8fhlsVz/BiDzRjUH2QfBrTWE1REi23nY5TO6Sy/gNM9Xmpv2e1eE
l0D+bAE5YoZo2ccq5qzxEWvOurTceik9PuxBeczM0k/2KBElG+9eOSh2yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhU2euMhSCr3+QSYWJ+WkvACLm6MB8GA1UdIwQY
MBaAFEGR5YJicPSerpmdSJ6F3szIR3OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYt
N2RmZGFjZmE2NTExLzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYtN2RmZGFjZmE2NTEx
LzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2iBpvun
M0YfnxtizWZ1EsUGbF8rWbxUX1suR0yE2vO/fo915Pya/Nse1euLS3IgAFS7zkH3
+zJQc+oN5GSGIB/gzTBtBy8QhUmO0j/AVmfPuyAX6CRkMQhO4nnQTi+fY5itGtA9
g9Z0Ip/ioP3H2WcQyQ96AX0T648bf6hzJ/WsKzEKiGIcoD5jQfX0SmuDej2Lefmq
wZIwr1Anig61i6tGBOvlLvst/KXTgKecqf3WXjfK8p81cCtPY914GG19xFKwiezr
e3QAxNqmqfDDHIVsZzvE4Rcm3RX0gR4FT6ExBPAuEfbObVau0FKc06lTt1mz+lz6
8uIIAF1LlTNPVA==
-----END CERTIFICATE-----