Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File:                     QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier:          2Z1i6WSisCpOCuQXmahjW02x0VslKD5LShle7RNEBhw=
Subject key identifier:   23:68:BC:16:7F:5E:98:1F:8B:FA:5A:B6:5E:22:2C:B5:13:D6:17:23
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer:       /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial:       01962E2AF0ED5230D8EFE3B100E35823C4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
                          2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: q8sg2MMMU1DwIg6HbG+YIPMVRcXIZyiJ6xGmWpLYw/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f0:ed:52:30:d8:ef:e3:b1:00:e3:58:23:c4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=2368bc167f5e981f8bfa5ab65e222cb513d61723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:7b:be:03:d9:ae:c9:5e:36:3d:79:c7:a7:
                    0a:eb:ae:50:9a:17:4a:71:67:92:f9:d5:68:13:4c:
                    9d:3c:8b:18:d8:89:56:95:f4:29:70:5c:65:d8:f7:
                    01:47:e9:10:4f:90:ea:41:3c:6f:f0:5a:91:9e:26:
                    64:4c:e4:fa:5d:99:cd:3c:cd:c5:2f:94:6d:fa:5c:
                    c1:8d:25:22:92:5a:be:ff:7d:d0:a5:b8:f6:cc:1c:
                    9d:50:9b:80:c6:f4:93:9f:fa:47:fa:45:a8:a3:36:
                    aa:6a:42:48:e9:c3:19:61:60:4b:73:33:ba:62:50:
                    c4:c2:29:b8:4f:05:3f:30:c3:e4:e1:bf:50:b6:cb:
                    11:ee:23:fa:9e:32:91:a4:d8:a2:c7:fc:ff:70:ef:
                    ba:a5:27:5b:65:f9:25:f7:0b:9e:98:78:55:ea:b0:
                    41:b2:c1:b5:15:9f:68:f0:5a:0e:14:31:f3:01:a9:
                    df:5f:4d:cf:c3:51:fe:b2:8e:6d:30:7e:6f:79:ed:
                    3d:8c:1d:f1:c4:24:ab:63:3b:bd:dc:96:2f:cd:7e:
                    ff:f3:09:18:ad:9c:1d:c2:1b:10:7f:49:9d:b4:26:
                    51:93:7e:58:5d:2e:ad:ba:c8:46:cb:bd:ae:bc:44:
                    d0:8d:8e:01:d4:0e:5f:11:ba:6c:50:3f:f3:36:c6:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:68:BC:16:7F:5E:98:1F:8B:FA:5A:B6:5E:22:2C:B5:13:D6:17:23
            X509v3 Authority Key Identifier:
                keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:20:18:17:00:9b:f2:af:e4:eb:c7:7d:df:ec:e2:6b:1b:
         15:dc:3f:e2:b0:5d:67:f1:2a:b3:e4:58:82:7f:fa:e9:54:90:
         af:d0:4b:75:04:63:cd:e5:8a:6c:04:b6:36:35:16:29:d0:23:
         18:45:ed:82:14:3f:0e:d1:73:0f:e5:d6:b9:e0:44:a8:99:41:
         35:77:6c:58:e7:28:56:dc:96:0d:7c:5c:71:15:82:cd:2d:df:
         8d:ca:0f:c7:d6:57:93:22:04:4c:97:b9:b9:66:c2:fb:1e:01:
         61:82:ba:36:17:29:b3:bf:3d:ab:4f:f2:61:09:a2:3e:92:dd:
         af:90:a6:88:8f:a2:49:a9:db:0e:de:15:2b:73:10:9f:c9:8c:
         66:b3:ff:69:c2:5d:06:4e:cb:5c:40:fe:76:92:46:33:37:ce:
         ca:5b:84:48:65:d7:e7:79:6d:48:13:00:3f:29:13:a2:50:be:
         5c:47:86:f4:41:a1:fc:ec:12:0e:f6:c5:62:ae:c6:4f:63:cc:
         9f:fd:9a:82:fc:02:81:e3:23:05:f3:73:b3:08:4e:c2:9a:08:
         19:fb:e2:4f:b4:b6:f6:8a:33:67:54:97:83:31:c2:17:e4:bf:
         99:52:34:02:e0:1d:5e:d6:ef:5c:1d:a8:99:dd:3c:f0:1d:ed:
         7a:f3:68:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvDtUjDY7+OxAONYI8S6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNTdmZDgzZTA4ZTBmMzFlNzk1MTQ2NzdjMDk4ODExZWY2
OTA2ZDcwHhcNMjUwNDEzMDgwMTI4WhcNMjUwNDE0MDgwMTI4WjAzMTEwLwYDVQQD
EygyMzY4YmMxNjdmNWU5ODFmOGJmYTVhYjY1ZTIyMmNiNTEzZDYxNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sh7vgPZrsleNj15x6cK665QmhdK
cWeS+dVoE0ydPIsY2IlWlfQpcFxl2PcBR+kQT5DqQTxv8FqRniZkTOT6XZnNPM3F
L5Rt+lzBjSUiklq+/33Qpbj2zBydUJuAxvSTn/pH+kWoozaqakJI6cMZYWBLczO6
YlDEwim4TwU/MMPk4b9QtssR7iP6njKRpNiix/z/cO+6pSdbZfkl9wuemHhV6rBB
ssG1FZ9o8FoOFDHzAanfX03Pw1H+so5tMH5vee09jB3xxCSrYzu93JYvzX7/8wkY
rZwdwhsQf0mdtCZRk35YXS6tushGy72uvETQjY4B1A5fEbpsUD/zNsakhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNovBZ/Xpgfi/patl4iLLUT1hcjMB8GA1UdIwQY
MBaAFEFX/YPgjg8x55UUZ3wJiBHvaQbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQt
ZTI4MzFjZDdmY2M4LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQtZTI4MzFjZDdmY2M4
LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn0gGBcA
m/Kv5OvHfd/s4msbFdw/4rBdZ/Eqs+RYgn/66VSQr9BLdQRjzeWKbAS2NjUWKdAj
GEXtghQ/DtFzD+XWueBEqJlBNXdsWOcoVtyWDXxccRWCzS3fjcoPx9ZXkyIETJe5
uWbC+x4BYYK6Nhcps789q0/yYQmiPpLdr5CmiI+iSanbDt4VK3MQn8mMZrP/acJd
Bk7LXED+dpJGMzfOyluESGXX53ltSBMAPykTolC+XEeG9EGh/OwSDvbFYq7GT2PM
n/2agvwCgeMjBfNzswhOwpoIGfviT7S29oozZ1SXgzHCF+S/mVI0AuAdXtbvXB2o
md088B3tevNodw==
-----END CERTIFICATE-----