Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          Avo3Jt66DDPd4gVNziOWbVoBdqpZbtOCnm+ZSmOXQLY=
Subject key identifier:   06:49:1F:10:8B:EF:69:E4:C4:FD:E3:C2:35:24:EB:37:21:28:B8:05
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       01962F0714FE7B23CD9821B3FA5D5E623BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          01D1
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: Lv8I8qJdZZ+y4hg1Cyx9DJQKg5O2vWqWMI8Clf55NZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:fe:7b:23:cd:98:21:b3:fa:5d:5e:62:3b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=06491f108bef69e4c4fde3c23524eb372128b805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:a4:5f:6a:d2:2b:34:38:af:87:7d:56:9e:
                    56:e6:b5:cc:b2:95:e3:10:dc:17:56:bc:a9:1a:27:
                    70:70:e9:a4:04:3c:29:bc:50:94:81:b6:3d:53:61:
                    84:86:2c:0b:ec:2b:ba:9a:8c:7b:03:8c:14:ea:2e:
                    2d:61:c6:6c:43:15:2c:a4:be:c2:53:41:fe:c2:66:
                    e4:eb:34:c6:8a:ec:79:27:36:96:90:50:1a:9b:95:
                    b3:cb:c3:40:5e:35:e2:d7:d1:6a:6b:57:47:62:27:
                    77:6a:81:63:e3:41:c0:aa:74:12:f1:6d:a0:17:ce:
                    8b:24:9b:bc:8c:19:78:ea:33:a0:41:92:f0:0a:eb:
                    d4:7c:66:e3:06:3d:ba:69:ee:78:26:31:d8:24:8c:
                    08:af:f5:07:2d:10:6b:9d:36:e8:18:9d:ae:e4:1c:
                    34:ca:81:40:f7:c7:86:88:cb:63:12:76:9d:f1:47:
                    be:e6:30:df:70:70:d3:04:27:5e:ab:35:01:f4:c4:
                    cd:17:25:8f:79:a6:c5:3d:c4:49:65:14:25:b6:0b:
                    cc:e8:17:15:29:d7:67:4b:6c:c0:d4:4a:ca:9b:1b:
                    6c:80:29:41:62:5e:22:d6:9d:41:26:1f:72:33:76:
                    8c:6b:be:5c:ee:1e:2e:ce:8b:78:e0:68:ca:bd:29:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:49:1F:10:8B:EF:69:E4:C4:FD:E3:C2:35:24:EB:37:21:28:B8:05
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:47:80:0d:a3:d1:c4:f5:b7:a2:4d:a3:5a:6f:21:6d:84:
         6f:fc:10:ea:da:9d:7a:92:7e:11:75:f0:fb:60:25:d7:e6:c0:
         11:d1:ab:85:60:3e:ff:56:fa:d4:83:e0:1e:bf:78:d1:51:90:
         ae:9a:14:fd:06:34:48:c1:b0:e3:c0:21:1b:e5:2a:4f:c3:52:
         1d:69:f4:8e:4e:a8:fa:c1:11:fb:d1:58:7a:6d:61:50:27:c7:
         17:41:1d:56:df:f3:57:62:09:22:34:6c:e8:ca:9c:15:55:41:
         f1:d4:40:59:37:27:03:b1:39:36:43:71:f4:2b:d1:00:9b:98:
         f7:29:06:05:4a:b9:92:eb:fc:59:5a:65:40:04:ed:4c:ca:ae:
         20:95:c1:18:68:0b:5b:c2:83:06:c0:d0:9f:81:dd:ae:b2:91:
         dc:2e:1b:18:5b:87:f8:e3:f9:ff:1c:5b:f1:87:bc:ff:75:af:
         a4:18:15:93:57:9c:8b:8b:f2:b9:9b:18:ab:37:a4:b0:52:9b:
         49:13:01:dd:a7:43:6b:35:cb:b8:c7:d0:03:ab:6a:15:d2:1b:
         d7:1d:42:ec:3a:3d:16:18:e1:48:b4:ae:56:0c:f6:f6:a3:81:
         5a:68:24:ce:d7:cf:2a:e1:57:4b:c7:8e:a3:e2:30:87:c0:5f:
         81:13:3d:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxT+eyPNmCGz+l1eYjvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYWM2NmZjMjIzMWNiMjY1NmU3NTMzNWExZmQ2Njc3MWY1
N2E5Y2MwHhcNMjUwNDEzMTIwMTU1WhcNMjUwNDE0MTIwMTU1WjAzMTEwLwYDVQQD
EygwNjQ5MWYxMDhiZWY2OWU0YzRmZGUzYzIzNTI0ZWIzNzIxMjhiODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXWkX2rSKzQ4r4d9Vp5W5rXMspXj
ENwXVrypGidwcOmkBDwpvFCUgbY9U2GEhiwL7Cu6mox7A4wU6i4tYcZsQxUspL7C
U0H+wmbk6zTGiux5JzaWkFAam5Wzy8NAXjXi19Fqa1dHYid3aoFj40HAqnQS8W2g
F86LJJu8jBl46jOgQZLwCuvUfGbjBj26ae54JjHYJIwIr/UHLRBrnTboGJ2u5Bw0
yoFA98eGiMtjEnad8Ue+5jDfcHDTBCdeqzUB9MTNFyWPeabFPcRJZRQltgvM6BcV
KddnS2zA1ErKmxtsgClBYl4i1p1BJh9yM3aMa75c7h4uzot44GjKvSk0NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZJHxCL72nkxP3jwjUk6zchKLgFMB8GA1UdIwQY
MBaAFH6sZvwiMcsmVudTNaH9ZncfV6nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUt
NDZjZTVjODI0MWRiLzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUtNDZjZTVjODI0MWRi
LzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuNHgA2j
0cT1t6JNo1pvIW2Eb/wQ6tqdepJ+EXXw+2Al1+bAEdGrhWA+/1b61IPgHr940VGQ
rpoU/QY0SMGw48AhG+UqT8NSHWn0jk6o+sER+9FYem1hUCfHF0EdVt/zV2IJIjRs
6MqcFVVB8dRAWTcnA7E5NkNx9CvRAJuY9ykGBUq5kuv8WVplQATtTMquIJXBGGgL
W8KDBsDQn4HdrrKR3C4bGFuH+OP5/xxb8Ye8/3WvpBgVk1eci4vyuZsYqzeksFKb
SRMB3adDazXLuMfQA6tqFdIb1x1C7Do9FhjhSLSuVgz29qOBWmgkztfPKuFXS8eO
o+Iwh8BfgRM9Dw==
-----END CERTIFICATE-----