Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File:                     qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier:          lSV+8QpoZms4MOP/L/RGbB3XSi9lfhrjFRooRvBrKtI=
Subject key identifier:   44:F1:42:85:56:85:94:2C:AD:85:B7:71:64:08:A7:75:4C:FB:9E:EE
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer:       /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial:       01962ECFB51B813B49891DCAD52286D540A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number:          10B3
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
                          2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: YMDywFLcW/+K9S62ePnoUkZ7keg8k/yDxgsGPzGE6QY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b5:1b:81:3b:49:89:1d:ca:d5:22:86:d5:40:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=44f142855685942cad85b7716408a7754cfb9eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:d8:55:b9:63:49:24:15:0c:26:73:8a:06:
                    34:2f:72:02:bf:61:a8:7b:35:7f:ea:cd:6d:5f:f9:
                    11:15:01:3d:97:bb:f9:b4:e6:58:bf:0f:6f:2a:13:
                    72:53:3b:8a:a4:a4:d2:1c:9b:0c:04:52:ba:1b:d2:
                    a4:16:98:ac:72:6a:88:ef:06:16:7e:b5:31:64:63:
                    8c:28:66:24:87:3f:e5:fb:33:41:28:42:ce:17:35:
                    87:d4:34:5d:01:6a:8d:88:9d:ca:f3:06:9a:2a:48:
                    cc:f8:06:67:af:43:1f:c2:74:1d:5a:49:91:c4:32:
                    44:1e:2c:aa:38:a4:9f:dd:8b:c4:0b:e2:50:99:93:
                    1d:a9:33:96:bd:ae:83:9a:f4:30:4f:10:d7:a3:22:
                    07:53:32:66:cc:27:f2:85:32:4f:a9:e2:52:63:5b:
                    ac:9b:d8:2c:52:3e:68:da:22:7a:70:6d:2d:38:46:
                    22:f3:df:a0:fb:77:dc:37:89:5f:ea:6b:7d:4d:21:
                    4d:26:a7:fd:02:58:ca:e9:95:b5:09:e2:b1:ba:fa:
                    1f:e3:0d:a6:3d:02:6e:95:8a:fa:73:50:fe:fc:88:
                    d4:c2:b9:ef:f6:67:c4:1e:eb:38:0c:54:fd:c8:6b:
                    ca:96:66:61:58:bf:2d:28:00:66:52:91:b9:ad:bf:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F1:42:85:56:85:94:2C:AD:85:B7:71:64:08:A7:75:4C:FB:9E:EE
            X509v3 Authority Key Identifier:
                keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:61:7e:2a:65:a1:6c:2d:bd:5f:03:32:c8:66:bf:3a:e3:37:
         ac:56:a2:85:33:3a:d1:10:1c:67:a8:b5:91:27:33:b1:6e:d8:
         11:86:66:f8:fe:0e:af:0c:ff:91:7c:c9:dc:f3:6f:2c:03:98:
         b6:35:dd:3e:e3:24:d3:d8:44:1d:34:cc:57:48:e7:c2:af:8e:
         06:13:3e:54:84:77:ef:04:e0:d2:2a:15:fc:cb:08:99:f4:1f:
         79:cc:44:a8:8e:38:d6:50:ac:55:6d:f6:47:0e:36:be:ac:2e:
         31:5f:bf:1f:06:2f:ba:16:f5:fe:f7:9f:f3:ee:33:24:31:46:
         30:46:7d:6c:84:94:20:d4:db:d1:ae:81:4a:3f:df:f8:47:d3:
         3b:19:d1:58:68:da:23:1b:e2:a4:c0:55:61:74:4f:37:6e:d6:
         8e:23:c3:eb:be:8e:67:7b:d4:25:59:a6:5a:95:73:70:f6:4b:
         56:61:3e:b2:e0:7d:33:5f:64:c8:af:c4:65:40:6d:95:0d:ef:
         64:37:06:db:6b:16:13:59:0e:92:f1:c4:0d:c4:f8:e4:50:e9:
         00:0b:b5:1d:10:04:27:95:c1:02:18:c4:67:d1:77:2c:2d:30:
         7b:50:a6:a3:89:2d:00:2c:a4:79:ae:79:a1:18:7d:ef:ee:e1:
         19:1e:69:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7UbgTtJiR3K1SKG1UCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw
YzExMWIwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
Eyg0NGYxNDI4NTU2ODU5NDJjYWQ4NWI3NzE2NDA4YTc3NTRjZmI5ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHYVbljSSQVDCZzigY0L3ICv2Go
ezV/6s1tX/kRFQE9l7v5tOZYvw9vKhNyUzuKpKTSHJsMBFK6G9KkFpiscmqI7wYW
frUxZGOMKGYkhz/l+zNBKELOFzWH1DRdAWqNiJ3K8waaKkjM+AZnr0MfwnQdWkmR
xDJEHiyqOKSf3YvEC+JQmZMdqTOWva6DmvQwTxDXoyIHUzJmzCfyhTJPqeJSY1us
m9gsUj5o2iJ6cG0tOEYi89+g+3fcN4lf6mt9TSFNJqf9AljK6ZW1CeKxuvof4w2m
PQJulYr6c1D+/IjUwrnv9mfEHus4DFT9yGvKlmZhWL8tKABmUpG5rb/6QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETxQoVWhZQsrYW3cWQIp3VM+57uMB8GA1UdIwQY
MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt
MGViOGYzN2EwMTc5LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5
LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWF+KmWh
bC29XwMyyGa/OuM3rFaihTM60RAcZ6i1kSczsW7YEYZm+P4Orwz/kXzJ3PNvLAOY
tjXdPuMk09hEHTTMV0jnwq+OBhM+VIR37wTg0ioV/MsImfQfecxEqI441lCsVW32
Rw42vqwuMV+/HwYvuhb1/vef8+4zJDFGMEZ9bISUINTb0a6BSj/f+EfTOxnRWGja
IxvipMBVYXRPN27WjiPD676OZ3vUJVmmWpVzcPZLVmE+suB9M19kyK/EZUBtlQ3v
ZDcG22sWE1kOkvHEDcT45FDpAAu1HRAEJ5XBAhjEZ9F3LC0we1Cmo4ktACykea55
oRh97+7hGR5pxg==
-----END CERTIFICATE-----