Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File:                     mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier:          BReqnNZ1uhVfIkwoNQMBgZ/33NGcaue+p/6dQCnwNwI=
Subject key identifier:   4F:93:F8:12:AF:89:4A:66:D3:6E:8A:AE:C1:34:0B:5A:17:80:7C:D2
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer:       /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial:       01962F0705C623409B44B2CD161588DDC100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
                          2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
                          3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: MRmk8bEqtOkA1ojyHoqPpkEqFgF1ZQfdoFuk+C200qE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:c6:23:40:9b:44:b2:cd:16:15:88:dd:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=4f93f812af894a66d36e8aaec1340b5a17807cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:ed:91:90:52:c4:38:12:1c:02:99:88:e4:
                    af:d2:35:df:4f:20:82:c9:2a:87:2b:2b:52:ff:d4:
                    ca:1f:38:98:6d:cf:e6:57:b4:a5:ec:fa:d9:94:38:
                    38:af:40:a2:86:5e:5c:6b:c5:a3:2e:26:64:d2:20:
                    68:25:2d:86:91:03:e8:21:5a:43:27:03:11:e6:51:
                    af:e7:b5:fe:b5:5d:10:1b:60:53:cd:9e:ed:15:65:
                    ee:17:26:7e:69:c9:38:76:8c:19:d3:4a:b5:2a:cc:
                    c3:84:45:fa:b6:89:bc:ed:ae:ea:32:0a:d7:26:99:
                    6c:1d:e5:08:73:1a:5e:a2:ce:37:14:2f:29:c4:2e:
                    00:80:b0:b4:a8:d8:8b:1d:b8:f0:9b:3b:ca:4e:d7:
                    9d:d3:bb:a1:4f:f1:74:85:36:8c:d2:e8:91:5f:84:
                    d3:66:79:32:30:a1:1c:0b:8c:f2:76:6f:ff:e1:37:
                    6b:b0:a1:c0:99:71:cd:de:17:8c:4f:69:e3:24:29:
                    4c:30:48:c6:1e:ce:e5:da:da:b8:48:65:54:6a:89:
                    1c:41:1e:08:f4:f4:6c:fe:2a:27:09:c8:e1:b1:69:
                    c8:d6:51:8a:74:ff:0c:ce:d4:7c:ee:90:3a:24:a0:
                    67:2a:72:7d:fb:02:28:56:44:28:dc:cf:70:aa:6f:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:93:F8:12:AF:89:4A:66:D3:6E:8A:AE:C1:34:0B:5A:17:80:7C:D2
            X509v3 Authority Key Identifier:
                keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:66:6a:84:39:fe:80:d5:c4:b4:8a:b2:ba:5c:ec:bb:fa:86:
         ef:9f:fc:6b:49:c2:35:85:22:d3:70:db:8d:6e:b5:48:2f:d9:
         cf:73:2b:5c:86:0b:6f:67:5c:26:a6:31:f6:4d:bb:43:92:00:
         6e:7a:d5:9c:0a:b5:45:5f:5f:02:84:04:c0:5d:43:e2:bc:0d:
         42:58:bd:ab:eb:70:b2:5a:50:4a:0d:25:98:f9:f1:8d:10:24:
         82:e2:c2:d9:8a:8c:58:74:8f:3d:72:2a:29:03:81:fd:b1:09:
         02:2e:b6:04:67:8c:a6:f4:2e:6c:46:8d:96:43:9d:55:63:09:
         b5:ad:f1:d7:01:43:9f:73:a7:07:34:cb:bc:15:33:ce:81:65:
         4e:b8:a7:38:d0:e9:3b:68:c7:31:3f:69:56:0d:4b:bb:7f:cd:
         cb:de:be:8f:dd:52:f2:19:9d:45:ee:2a:39:a2:04:1e:9d:86:
         72:3c:cd:8a:a5:e5:89:78:27:99:95:00:81:84:9f:d1:1d:5d:
         6d:fc:c8:13:2a:2a:ee:03:0a:3a:f1:c1:69:85:6c:23:8b:ef:
         88:76:26:a7:fd:88:24:71:cf:47:0a:ae:ab:20:de:73:90:42:
         02:32:17:d3:95:ca:2e:64:de:ed:be:d2:4f:4e:12:c8:a2:ce:
         17:be:fe:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwXGI0CbRLLNFhWI3cEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4
ZjNkYmYwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
Eyg0ZjkzZjgxMmFmODk0YTY2ZDM2ZThhYWVjMTM0MGI1YTE3ODA3Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPftkZBSxDgSHAKZiOSv0jXfTyCC
ySqHKytS/9TKHziYbc/mV7Sl7PrZlDg4r0Cihl5ca8WjLiZk0iBoJS2GkQPoIVpD
JwMR5lGv57X+tV0QG2BTzZ7tFWXuFyZ+ack4dowZ00q1KszDhEX6tom87a7qMgrX
JplsHeUIcxpeos43FC8pxC4AgLC0qNiLHbjwmzvKTted07uhT/F0hTaM0uiRX4TT
ZnkyMKEcC4zydm//4TdrsKHAmXHN3heMT2njJClMMEjGHs7l2tq4SGVUaokcQR4I
9PRs/ionCcjhsWnI1lGKdP8MztR87pA6JKBnKnJ9+wIoVkQo3M9wqm8b1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+T+BKviUpm026KrsE0C1oXgHzSMB8GA1UdIwQY
MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt
OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw
LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWZqhDn+
gNXEtIqyulzsu/qG75/8a0nCNYUi03DbjW61SC/Zz3MrXIYLb2dcJqYx9k27Q5IA
bnrVnAq1RV9fAoQEwF1D4rwNQli9q+twslpQSg0lmPnxjRAkguLC2YqMWHSPPXIq
KQOB/bEJAi62BGeMpvQubEaNlkOdVWMJta3x1wFDn3OnBzTLvBUzzoFlTrinONDp
O2jHMT9pVg1Lu3/Ny96+j91S8hmdRe4qOaIEHp2GcjzNiqXliXgnmZUAgYSf0R1d
bfzIEyoq7gMKOvHBaYVsI4vviHYmp/2IJHHPRwquqyDec5BCAjIX05XKLmTe7b7S
T04SyKLOF77+yQ==
-----END CERTIFICATE-----