Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          Du+CjjreuEl2V+cG/R/BTwCMYUO747Sjpz3xyuJ6fYY=
Subject key identifier:   E0:BC:4C:63:8B:C1:5A:2D:48:E6:39:5D:A8:3A:46:0A:BF:B5:34:A1
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       01962F06586816E709D480A43EE6D920FB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          08B9
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
                          2: Mso8HCZYvubZwvzJB-sovDxI8mw.roa (hash: 5QSILlhvVsZeQGG8ZFj/oRE0YF6aKeUC8j5XzlKYPOQ=)
                          3: Wi63x1CJXlZGfNJJvYSEjYX3SS4.roa (hash: tSrW8yYQj/zhxzh9dR2YbQPqRj4MiI4gJVwxhewvr88=)
                          4: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
                          5: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
                          6: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: IY9iHZ/iF6HlRBc/XqwHXRnRHUCMxEWUoIIQ7ZALxV4=)
                          8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
                          9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:68:16:e7:09:d4:80:a4:3e:e6:d9:20:fb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=e0bc4c638bc15a2d48e6395da83a460abfb534a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:3b:bf:c3:5a:19:2c:2c:91:6c:2f:ee:09:
                    16:e7:46:22:43:5d:c4:1e:52:8a:da:05:47:25:c8:
                    7f:ae:21:23:60:44:f7:b6:39:30:e7:40:3c:a1:96:
                    d5:7e:8a:40:bf:92:fb:40:31:4d:d4:65:a5:eb:9a:
                    85:32:41:ad:6d:96:da:47:78:13:7c:f2:d7:79:4e:
                    f9:b3:9b:fa:13:a7:b4:0c:66:c9:01:17:07:68:2c:
                    85:48:af:9a:c9:f8:76:5f:91:aa:0a:dc:a3:66:8d:
                    be:3f:1a:f9:e9:60:d7:ef:8b:d7:5c:1d:d2:e7:5a:
                    78:c5:a4:42:b5:74:23:a0:89:a1:66:89:d3:8f:13:
                    bf:c7:a5:87:ad:2d:ec:23:40:b2:a1:47:44:66:37:
                    e3:1b:7c:ab:93:22:40:8f:1a:25:8d:3d:4f:4d:34:
                    f0:45:b6:da:a3:bd:7c:44:4c:03:1d:87:13:6d:dd:
                    90:8d:ec:2e:3d:4b:5a:cf:b8:da:7b:21:9c:a3:43:
                    f7:38:80:da:6d:29:e7:c5:a1:bd:ee:df:6e:2b:97:
                    3d:42:df:e0:a0:6f:ca:23:7d:6d:4b:10:5f:28:8d:
                    64:48:35:b2:74:bc:13:c0:3d:ec:65:bb:6d:f1:33:
                    43:73:5a:56:69:6f:11:e5:88:b3:10:ae:e4:d9:34:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:4C:63:8B:C1:5A:2D:48:E6:39:5D:A8:3A:46:0A:BF:B5:34:A1
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:62:b4:79:d4:06:49:2b:9b:9b:8d:1e:43:eb:10:52:42:c0:
         41:e4:74:f5:c3:db:95:f1:9b:1b:56:47:8e:aa:1b:e1:bc:1f:
         79:4a:13:82:aa:ed:02:e2:3f:02:e5:62:13:67:21:4d:3f:84:
         a5:aa:14:ce:af:6c:e2:75:e4:de:bf:e6:fa:c8:5c:67:fe:2b:
         ca:35:d6:3d:10:22:46:dd:2c:e6:2c:a5:db:bb:3c:42:eb:1b:
         83:8d:5b:6d:20:69:06:2d:03:63:b7:6d:e1:f4:5e:d9:9b:91:
         29:b9:75:31:21:0f:c1:2e:03:98:ba:0c:82:45:ed:41:6e:93:
         86:28:9d:d9:26:39:a4:2a:c2:af:e0:d3:4d:58:71:cc:25:f8:
         c2:30:82:3b:92:f0:ec:63:47:2f:4b:17:b8:04:e3:7b:bd:95:
         5e:81:b3:e9:77:bb:9c:5d:1c:f5:81:91:f7:33:ef:5b:d7:13:
         a1:15:84:77:44:1d:61:17:01:92:93:53:4e:c9:eb:47:bc:f9:
         e9:87:6d:52:e5:55:10:74:7f:2a:b0:aa:50:0b:10:a6:37:aa:
         e2:7f:1b:af:33:ca:26:8b:bd:60:67:ac:5d:62:f2:9c:3f:30:
         5d:f8:ba:67:8c:1e:18:d1:cf:7a:91:a8:0d:29:db:ad:a2:b4:
         35:31:0f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlhoFucJ1ICkPubZIPsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjUwNDEzMTIwMTA3WhcNMjUwNDE0MTIwMTA3WjAzMTEwLwYDVQQD
EyhlMGJjNGM2MzhiYzE1YTJkNDhlNjM5NWRhODNhNDYwYWJmYjUzNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5k7v8NaGSwskWwv7gkW50YiQ13E
HlKK2gVHJch/riEjYET3tjkw50A8oZbVfopAv5L7QDFN1GWl65qFMkGtbZbaR3gT
fPLXeU75s5v6E6e0DGbJARcHaCyFSK+ayfh2X5GqCtyjZo2+Pxr56WDX74vXXB3S
51p4xaRCtXQjoImhZonTjxO/x6WHrS3sI0CyoUdEZjfjG3yrkyJAjxoljT1PTTTw
Rbbao718REwDHYcTbd2QjewuPUtaz7jaeyGco0P3OIDabSnnxaG97t9uK5c9Qt/g
oG/KI31tSxBfKI1kSDWydLwTwD3sZbtt8TNDc1pWaW8R5YizEK7k2TQU5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC8TGOLwVotSOY5Xag6Rgq/tTShMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2K0edQG
SSubm40eQ+sQUkLAQeR09cPblfGbG1ZHjqob4bwfeUoTgqrtAuI/AuViE2chTT+E
paoUzq9s4nXk3r/m+shcZ/4ryjXWPRAiRt0s5iyl27s8Qusbg41bbSBpBi0DY7dt
4fRe2ZuRKbl1MSEPwS4DmLoMgkXtQW6Thiid2SY5pCrCr+DTTVhxzCX4wjCCO5Lw
7GNHL0sXuATje72VXoGz6Xe7nF0c9YGR9zPvW9cToRWEd0QdYRcBkpNTTsnrR7z5
6YdtUuVVEHR/KrCqUAsQpjeq4n8brzPKJou9YGesXWLynD8wXfi6Z4weGNHPepGo
DSnbraK0NTEPDw==
-----END CERTIFICATE-----