Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File:                     R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier:          utc3i2ljaPItLBk5Nxu+nL6HHfhOiyVoK1TpZ2dmGYA=
Subject key identifier:   A2:08:96:A3:DA:39:84:0A:87:83:C9:46:45:D2:44:CF:A7:48:65:F6
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       01962F74ED705BAF4278AC64F04339B69D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: yEskq0S2DQ4cPWu2Qf919z6V3n3XNtT/9Qdow0WP4/U=)
                          2: UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa (hash: dU40dyYAxG0jUVXRYy3IsfQ8lbv7vAwEo5+BvKJGXqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ed:70:5b:af:42:78:ac:64:f0:43:39:b6:9d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=a20896a3da39840a8783c94645d244cfa74865f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:e5:b9:f7:f4:c7:db:6a:20:18:4d:da:ce:
                    f0:55:75:82:b7:57:68:de:99:b5:de:83:bb:8d:45:
                    09:91:42:c7:f3:c8:fb:59:11:b9:30:99:0e:38:3a:
                    3e:83:c0:ad:e2:4f:0a:2a:c8:3c:72:38:37:b7:05:
                    74:8c:a9:14:b3:65:df:ff:42:6d:51:94:3b:eb:d0:
                    39:0a:92:8f:de:19:91:63:f3:cb:f9:8e:d0:59:e0:
                    7b:3d:0e:3f:be:6d:bb:75:28:d8:81:c1:df:99:f5:
                    14:38:43:34:0c:6f:e0:c7:f9:92:e6:b8:96:fa:56:
                    41:40:cf:fb:30:35:5f:df:28:07:13:64:2e:bd:00:
                    cc:de:f1:53:e1:18:37:27:72:2e:c1:0e:16:e4:1d:
                    4a:9e:57:cc:42:cf:db:b5:8a:23:c7:dc:23:10:ee:
                    7b:6e:44:a1:a3:b6:85:6d:7a:59:62:77:8b:ad:9a:
                    36:83:81:30:57:a7:1f:32:c3:39:e0:6f:93:8b:0a:
                    19:2e:55:14:d7:43:13:7b:e4:4d:96:87:18:1e:4b:
                    0d:ac:5d:bb:c1:bc:56:ec:72:dc:4c:11:bb:2d:53:
                    9f:02:c4:ce:09:f7:da:d0:3b:17:8b:53:b0:12:1d:
                    31:ea:63:2d:e9:0c:0a:38:a5:6c:c0:7d:db:2a:fe:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:08:96:A3:DA:39:84:0A:87:83:C9:46:45:D2:44:CF:A7:48:65:F6
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:f7:6e:b4:34:ed:e0:2e:d3:e6:82:1c:97:7e:be:41:ec:
         e9:4a:66:e4:6e:6f:c0:71:b1:e3:4d:03:78:c1:f0:d3:e6:6e:
         e1:8e:57:d5:bd:52:67:be:ba:20:a7:c1:c6:77:9b:75:26:18:
         00:00:6e:f4:ed:a7:b8:dc:95:74:81:e1:3e:fd:54:3f:0d:e7:
         f9:6a:45:d5:ac:0c:be:3c:96:24:a6:9d:dd:ea:8f:a7:3f:d9:
         ac:08:61:09:03:30:05:92:d4:2b:5e:93:0d:60:f0:39:c3:1e:
         dc:c4:c9:5a:ad:f1:ea:89:42:e3:ad:59:bd:87:0f:79:34:7a:
         e9:dc:c5:fb:df:de:41:9a:c5:a3:f1:f5:b3:4a:c0:10:5f:3f:
         9c:2f:17:bf:e3:33:e2:84:fa:0a:b5:9b:e3:76:87:63:75:6d:
         ab:d7:0a:97:61:68:0f:f2:50:7e:89:0f:a9:1e:55:c0:b0:87:
         f1:ca:cc:67:41:9c:26:3f:25:2c:69:78:9f:95:bd:0a:1a:fb:
         ad:8c:dd:32:ae:b1:4a:2c:10:e4:d7:e1:53:9a:a4:b3:1d:db:
         a4:93:eb:ad:28:41:b1:e6:93:0b:d0:b5:ed:15:df:80:52:fa:
         83:87:6a:30:c6:71:ea:47:ad:a7:05:16:e0:d5:a9:46:ca:4e:
         b5:c2:7f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdO1wW69CeKxk8EM5tp0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTQyMjMzZWQ2MzBiMGI4OWY1MmMwNzdmZjBkNWMyYjM3
ZDRkZmEwHhcNMjUwNDEzMTQwMTU0WhcNMjUwNDE0MTQwMTU0WjAzMTEwLwYDVQQD
EyhhMjA4OTZhM2RhMzk4NDBhODc4M2M5NDY0NWQyNDRjZmE3NDg2NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltnluff0x9tqIBhN2s7wVXWCt1do
3pm13oO7jUUJkULH88j7WRG5MJkOODo+g8Ct4k8KKsg8cjg3twV0jKkUs2Xf/0Jt
UZQ769A5CpKP3hmRY/PL+Y7QWeB7PQ4/vm27dSjYgcHfmfUUOEM0DG/gx/mS5riW
+lZBQM/7MDVf3ygHE2QuvQDM3vFT4Rg3J3IuwQ4W5B1KnlfMQs/btYojx9wjEO57
bkSho7aFbXpZYneLrZo2g4EwV6cfMsM54G+TiwoZLlUU10MTe+RNlocYHksNrF27
wbxW7HLcTBG7LVOfAsTOCffa0DsXi1OwEh0x6mMt6QwKOKVswH3bKv4IOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIIlqPaOYQKh4PJRkXSRM+nSGX2MB8GA1UdIwQY
MBaAFEfkIjPtYwsLifUsB3/w1cKzfU36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMt
N2ViOTVjYzBmNzQ5LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMtN2ViOTVjYzBmNzQ5
LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF233brQ0
7eAu0+aCHJd+vkHs6Upm5G5vwHGx400DeMHw0+Zu4Y5X1b1SZ766IKfBxnebdSYY
AABu9O2nuNyVdIHhPv1UPw3n+WpF1awMvjyWJKad3eqPpz/ZrAhhCQMwBZLUK16T
DWDwOcMe3MTJWq3x6olC461ZvYcPeTR66dzF+9/eQZrFo/H1s0rAEF8/nC8Xv+Mz
4oT6CrWb43aHY3Vtq9cKl2FoD/JQfokPqR5VwLCH8crMZ0GcJj8lLGl4n5W9Chr7
rYzdMq6xSiwQ5NfhU5qksx3bpJPrrShBseaTC9C17RXfgFL6g4dqMMZx6ketpwUW
4NWpRspOtcJ/Dw==
-----END CERTIFICATE-----