Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File:                     QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier:          OEJXDKjmRhkB8AuO+ejj1L4mGGmtDG4uOIlfgzZMprM=
Subject key identifier:   94:DB:0E:04:EB:B8:8A:CF:88:BE:ED:E8:BE:18:8E:0F:D8:9E:52:99
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer:       /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial:       01962E2B336262E0C65CC2A9E10778CC9999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number:          02CE
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: AmKzD7rzzgrcpkIyULbo4/a2DB9FigoPHLJlmy4wGPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:33:62:62:e0:c6:5c:c2:a9:e1:07:78:cc:99:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=94db0e04ebb88acf88beede8be188e0fd89e5299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:77:20:71:db:a3:f4:7d:e1:2e:58:e4:e6:
                    39:3d:62:65:c9:c1:32:49:d0:56:eb:80:b1:d6:68:
                    d5:1d:4d:ec:03:b4:cd:79:37:8e:02:cd:19:0b:9f:
                    af:1a:7e:3d:6c:5d:d3:78:93:c7:00:b2:09:d4:28:
                    c1:2d:77:09:f1:8c:ae:f7:f5:ee:45:8a:aa:c1:8e:
                    73:98:2a:91:4c:8b:48:36:73:08:60:ae:e5:78:b6:
                    68:d8:88:0c:ba:1f:54:25:e2:fd:e8:7f:52:ed:c6:
                    21:f2:82:9a:16:21:a4:a2:0e:87:19:dd:0b:cf:ad:
                    36:cf:8d:4b:28:e5:20:da:63:74:47:99:77:c7:5c:
                    44:28:42:da:16:3c:4a:be:f8:02:be:1c:6d:4b:fe:
                    f0:74:9b:ca:80:5a:9d:ae:f2:1a:1d:79:cf:05:35:
                    ed:f2:d9:1f:79:61:5a:9d:1b:79:56:c4:77:cc:1d:
                    13:c8:07:59:ec:03:4b:51:47:8d:ab:f8:d7:f5:6c:
                    d1:bf:24:8f:33:24:1a:04:be:89:b1:f7:79:0b:66:
                    a9:16:20:ee:cc:4f:b1:fc:10:2f:35:83:71:e0:e7:
                    ac:25:63:94:f3:2b:c1:27:59:eb:8f:ea:58:58:8e:
                    98:11:43:00:84:dc:8b:79:df:87:d1:8a:35:c1:50:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:0E:04:EB:B8:8A:CF:88:BE:ED:E8:BE:18:8E:0F:D8:9E:52:99
            X509v3 Authority Key Identifier:
                keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:34:e3:d6:cf:59:89:5a:57:8b:d4:b7:a2:27:a8:f9:8a:8b:
         95:50:b5:1a:9f:29:74:a5:4c:8b:0e:df:a8:92:7b:b8:16:72:
         dd:4b:50:fe:4f:f3:f0:68:ea:2b:00:23:6f:a5:e8:8a:15:54:
         88:0d:e1:85:90:81:63:b1:75:b4:16:3d:3a:f7:e8:72:79:5e:
         02:0f:80:52:0f:39:46:d4:f4:4c:29:c3:8d:db:ee:58:15:c5:
         97:bc:ae:eb:98:60:ce:50:78:63:0b:e7:32:51:df:0e:2c:6f:
         d8:e7:1a:08:ba:f5:5e:cc:13:a3:78:3a:ec:a2:28:9f:83:70:
         36:8e:39:be:b2:58:0c:d3:77:9e:f4:4f:57:c8:9b:4f:3f:09:
         29:a6:d8:21:96:7a:94:e2:00:6b:6c:4a:bc:42:b7:ac:ac:5f:
         55:30:49:40:a7:42:8c:93:e2:45:79:8d:fb:74:14:a7:0c:c1:
         fa:bc:31:ad:5e:77:e1:77:6d:99:2e:fd:0b:34:61:76:8e:83:
         b8:3b:0c:9f:84:ac:f6:c7:31:6b:de:1e:16:98:aa:74:c5:b9:
         2c:ce:6f:7c:e2:70:a4:04:ff:34:5a:39:c7:c4:0e:1c:ef:99:
         ad:18:c7:a0:50:36:e3:12:01:98:fe:d9:d6:c3:1f:b5:5d:f8:
         0f:4c:a3:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzNiYuDGXMKp4Qd4zJmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxN2VjODI4NWE1NjVkZjUyOTRhM2IzYjYwM2ZkZjkxOTRl
NmVmYWQwHhcNMjUwNDEzMDgwMTQ1WhcNMjUwNDE0MDgwMTQ1WjAzMTEwLwYDVQQD
Eyg5NGRiMGUwNGViYjg4YWNmODhiZWVkZThiZTE4OGUwZmQ4OWU1Mjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOh3IHHbo/R94S5Y5OY5PWJlycEy
SdBW64Cx1mjVHU3sA7TNeTeOAs0ZC5+vGn49bF3TeJPHALIJ1CjBLXcJ8Yyu9/Xu
RYqqwY5zmCqRTItINnMIYK7leLZo2IgMuh9UJeL96H9S7cYh8oKaFiGkog6HGd0L
z602z41LKOUg2mN0R5l3x1xEKELaFjxKvvgCvhxtS/7wdJvKgFqdrvIaHXnPBTXt
8tkfeWFanRt5VsR3zB0TyAdZ7ANLUUeNq/jX9WzRvySPMyQaBL6Jsfd5C2apFiDu
zE+x/BAvNYNx4OesJWOU8yvBJ1nrj+pYWI6YEUMAhNyLed+H0Yo1wVAzkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTbDgTruIrPiL7t6L4Yjg/YnlKZMB8GA1UdIwQY
MBaAFEF+yChaVl31KUo7O2A/35GU5u+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NWM0ZTUtOTk1OC00MjE3LWI1NTMt
Nzc1ZjAyMmZkMDY0LzEvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NWM0ZTUtOTk1OC00MjE3LWI1NTMtNzc1ZjAyMmZkMDY0
LzEvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDTj1s9Z
iVpXi9S3oieo+YqLlVC1Gp8pdKVMiw7fqJJ7uBZy3UtQ/k/z8GjqKwAjb6XoihVU
iA3hhZCBY7F1tBY9OvfocnleAg+AUg85RtT0TCnDjdvuWBXFl7yu65hgzlB4Ywvn
MlHfDixv2OcaCLr1XswTo3g67KIon4NwNo45vrJYDNN3nvRPV8ibTz8JKabYIZZ6
lOIAa2xKvEK3rKxfVTBJQKdCjJPiRXmN+3QUpwzB+rwxrV534XdtmS79CzRhdo6D
uDsMn4Ss9scxa94eFpiqdMW5LM5vfOJwpAT/NFo5x8QOHO+ZrRjHoFA24xIBmP7Z
1sMftV34D0yj5A==
-----END CERTIFICATE-----