Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          J3x7tpaWNB9OZ+xVxuuoF8ZRSaw6pQuDz0bqHh5RdrU=
Subject key identifier:   88:D3:61:F8:C0:7A:D7:9C:7E:35:4E:BF:2A:B0:FE:75:12:F0:80:85
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       01962E9937EB49AC2AD1024584FA1BF1C263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: P6oNXJ8DQEe5o8SY/C0qdrNV1vRu4QFaZ6V/+ZRTsPQ=)
                          2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:37:eb:49:ac:2a:d1:02:45:84:fa:1b:f1:c2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=88d361f8c07ad79c7e354ebf2ab0fe7512f08085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:90:b3:0b:c6:65:d4:59:1f:75:6b:82:c3:
                    cc:e1:b9:10:91:4a:63:38:7e:6d:f0:9c:1b:83:94:
                    dd:38:f4:ac:42:be:ed:bc:a1:dd:4c:56:56:70:38:
                    29:d7:7f:9b:94:4b:33:cf:99:ff:68:2e:79:01:33:
                    bf:9b:e6:bb:ff:99:26:92:0f:42:f7:48:c8:bb:47:
                    e3:07:9d:53:61:c6:e4:f7:35:44:76:ed:13:69:62:
                    00:32:b6:93:84:bb:b2:58:d1:5e:db:01:b9:33:33:
                    44:22:eb:1b:4e:1c:49:5a:45:f4:ca:46:c6:fa:23:
                    76:94:6c:89:bd:ae:cb:72:49:54:44:f3:a3:b1:d8:
                    91:57:b0:63:f4:9b:02:57:96:ef:5c:1e:4b:14:20:
                    0d:66:06:36:38:ec:7e:d2:ba:42:1a:6e:19:49:e0:
                    cb:df:1c:4e:cd:09:c6:71:17:cb:76:49:e1:56:20:
                    2b:b1:6a:06:1a:b0:52:d4:f3:d1:ac:5d:1f:23:97:
                    41:f6:26:8a:f9:99:a4:77:00:57:56:13:94:a9:44:
                    59:55:53:c1:78:72:c2:c7:25:02:ea:8e:d6:42:39:
                    a1:93:8a:26:12:cb:1d:e4:d0:cc:8b:49:6e:2a:6f:
                    1b:0c:18:eb:52:5d:69:dc:ad:69:29:4b:b1:69:6c:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:61:F8:C0:7A:D7:9C:7E:35:4E:BF:2A:B0:FE:75:12:F0:80:85
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:57:fa:c1:ae:ac:8e:86:f1:74:fd:cc:5a:37:6b:11:47:
         e2:35:4a:4e:30:eb:03:69:0f:a4:25:fb:67:6a:15:c7:d3:b8:
         45:ea:53:fc:71:14:3a:e5:87:73:10:50:44:5a:31:53:7f:16:
         ad:07:e1:8e:fa:5b:28:e9:e1:78:d5:67:02:1f:ef:ae:89:5e:
         ca:3c:58:1d:ca:4f:a6:fb:05:e6:f6:96:ee:b4:93:fe:2b:76:
         7c:18:5e:22:f9:2e:6c:fd:c5:85:be:ac:7a:1e:2d:97:ad:ee:
         cb:ec:5d:3d:64:91:8f:e6:6e:66:26:d1:fd:fb:cd:15:b8:0b:
         21:4a:3c:00:80:8f:1d:75:58:d4:22:4b:52:d8:cc:7c:4d:91:
         a9:e9:2b:1a:56:11:7f:9e:a4:8d:30:46:a5:e9:a6:ca:d9:2f:
         a3:ff:06:99:60:ac:6d:34:a5:9f:42:1f:e2:50:01:d1:88:e7:
         45:86:fc:ea:53:45:a0:59:9f:83:4a:a7:3e:bd:e1:77:5f:82:
         13:d5:dd:fa:f7:9d:c2:3d:45:13:9c:80:d5:58:e3:77:a4:84:
         24:48:ec:e7:14:d5:45:ce:33:4b:be:30:68:bc:58:22:c9:f3:
         6b:26:db:f4:53:b5:64:a3:22:e2:92:9e:d3:d3:2e:9b:79:ef:
         21:41:7f:7d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYumTfrSawq0QJFhPob8cJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjQwMGU2M2NiMjYyYzIwMDBlMDcxY2U5MGFhNzJlZjY5
M2U2YTIwHhcNMjUwNDEzMTAwMTU1WhcNMjUwNDE0MTAwMTU1WjAzMTEwLwYDVQQD
Eyg4OGQzNjFmOGMwN2FkNzljN2UzNTRlYmYyYWIwZmU3NTEyZjA4MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8qQswvGZdRZH3VrgsPM4bkQkUpj
OH5t8Jwbg5TdOPSsQr7tvKHdTFZWcDgp13+blEszz5n/aC55ATO/m+a7/5kmkg9C
90jIu0fjB51TYcbk9zVEdu0TaWIAMraThLuyWNFe2wG5MzNEIusbThxJWkX0ykbG
+iN2lGyJva7LcklURPOjsdiRV7Bj9JsCV5bvXB5LFCANZgY2OOx+0rpCGm4ZSeDL
3xxOzQnGcRfLdknhViArsWoGGrBS1PPRrF0fI5dB9iaK+ZmkdwBXVhOUqURZVVPB
eHLCxyUC6o7WQjmhk4omEssd5NDMi0luKm8bDBjrUl1p3K1pKUuxaWxUeQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIjTYfjAetecfjVOvyqw/nUS8ICFMB8GA1UdIwQY
MBaAFPv0AOY8smLCAA4HHOkKpy72k+aiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fUUE1anl5WXNJQURnY2M2UXFuTHZhVDVxSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0
LWY5NTg1NWYxMDc2My8xLzEtX1FBNWp5eVlzSUFEZ2NjNlFxbkx2YVQ1cUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU0LzliM2Y2Zi05NzU0LTQ1OGYtYjViNC1mOTU4NTVmMTA3
NjMvMS8xLV9RQTVqeXlZc0lBRGdjYzZRcW5MdmFUNXFJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9hX
+sGurI6G8XT9zFo3axFH4jVKTjDrA2kPpCX7Z2oVx9O4RepT/HEUOuWHcxBQRFox
U38WrQfhjvpbKOnheNVnAh/vroleyjxYHcpPpvsF5vaW7rST/it2fBheIvkubP3F
hb6seh4tl63uy+xdPWSRj+ZuZibR/fvNFbgLIUo8AICPHXVY1CJLUtjMfE2Rqekr
GlYRf56kjTBGpemmytkvo/8GmWCsbTSln0If4lAB0YjnRYb86lNFoFmfg0qnPr3h
d1+CE9Xd+vedwj1FE5yA1Vjjd6SEJEjs5xTVRc4zS74waLxYIsnzaybb9FO1ZKMi
4pKe09Mum3nvIUF/fQ==
-----END CERTIFICATE-----