Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File:                     qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier:          0PrrpZzHw4wm6fmCEX7EjuX7TqFsF1/pkLNlCcg2P2o=
Subject key identifier:   32:13:83:23:BC:D5:F8:93:C4:42:C0:59:05:D4:16:CB:35:87:56:81
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer:       /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial:       01962FAB6A1A8051629BE3C8C31F2C6546ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number:          0A5B
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
                          2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: 4lTfiOJJgTN0ahEXYVzMFntomgQAJorpJLqcK/6ZMBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:1a:80:51:62:9b:e3:c8:c3:1f:2c:65:46:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=32138323bcd5f893c442c05905d416cb35875681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:37:58:36:63:af:52:e1:ff:32:40:bc:39:
                    c2:3a:e5:41:d9:21:f4:88:30:d8:71:c5:5e:c4:69:
                    56:3b:43:96:8e:8c:29:51:ae:07:da:b9:e8:76:8b:
                    25:77:d8:86:3c:20:f4:75:44:4b:8e:c6:bc:3f:92:
                    f5:25:d0:1a:f2:a8:a8:86:d4:d9:1b:48:56:0e:e1:
                    11:d3:43:12:1d:99:bf:75:64:d2:7c:71:e3:72:2f:
                    29:4a:a1:26:92:4e:ae:c6:f6:9f:63:ef:61:13:cd:
                    d9:09:02:91:bc:cb:f2:85:8d:c7:f0:ee:00:e2:e3:
                    30:28:08:42:bc:29:18:3a:b2:2f:fc:12:27:c4:a8:
                    32:3f:48:97:e7:44:1e:18:8b:2e:fe:6c:06:0b:71:
                    99:49:9d:f7:e0:dc:ff:5c:ee:15:f4:30:0a:85:60:
                    a8:d5:60:6c:fe:4a:b9:c6:93:4d:af:ae:f7:ed:b7:
                    5e:2d:b9:77:18:76:4c:40:cb:9d:9c:75:fb:56:46:
                    12:29:21:7e:d5:7e:59:ca:01:cb:ab:b7:1a:8c:15:
                    a9:84:3e:f6:7a:c8:fa:9b:f7:ac:d4:23:4d:31:5e:
                    7d:4d:95:65:9a:b6:eb:05:c3:45:37:b7:28:2e:cd:
                    eb:30:c8:83:16:27:9a:9c:2b:3e:1e:b1:fb:95:7f:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:13:83:23:BC:D5:F8:93:C4:42:C0:59:05:D4:16:CB:35:87:56:81
            X509v3 Authority Key Identifier:
                keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:73:0f:71:d1:53:cd:55:d5:f4:45:54:27:e7:09:41:64:1e:
         3a:f0:c0:94:13:68:fa:e1:a7:bd:28:1f:de:cb:94:60:7f:66:
         65:12:cb:39:e1:13:ef:0e:af:68:52:5f:1b:82:c8:8c:4c:9b:
         92:86:d3:37:7c:99:42:dc:e3:2f:0e:56:53:ba:b3:9a:ac:d5:
         74:53:0f:27:8a:d9:a7:9f:76:31:0b:63:48:c3:e1:eb:9d:e9:
         91:f8:76:10:60:15:24:cb:b9:da:24:38:7b:48:b1:28:c6:2a:
         86:98:f4:de:2f:e2:f0:1a:3f:75:a3:3e:ec:cc:94:f1:0d:e5:
         06:bd:6f:89:1f:99:db:78:76:d1:2c:f0:f3:0a:5d:8b:27:46:
         35:e7:a4:1b:d5:b2:8d:5f:29:a3:74:19:f7:ad:c7:5e:29:fd:
         cd:0b:8d:87:ba:bb:49:4e:fc:ec:3a:6b:0e:82:bb:20:f3:88:
         e9:a9:39:50:e7:2c:4b:d3:76:91:82:1d:99:08:70:f1:93:70:
         dc:09:b2:9b:b4:84:e3:b6:24:d6:bb:69:2b:ea:52:c4:b4:13:
         59:ae:1f:50:9f:85:cb:5d:f3:e0:00:ef:7c:ac:df:e8:25:6f:
         79:43:5c:82:56:5b:a3:43:14:1e:ef:6b:89:a7:5b:dd:2b:e0:
         bf:9a:c1:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2oagFFim+PIwx8sZUbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk
NmU2MWMwHhcNMjUwNDEzMTUwMTI0WhcNMjUwNDE0MTUwMTI0WjAzMTEwLwYDVQQD
EygzMjEzODMyM2JjZDVmODkzYzQ0MmMwNTkwNWQ0MTZjYjM1ODc1NjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz83WDZjr1Lh/zJAvDnCOuVB2SH0
iDDYccVexGlWO0OWjowpUa4H2rnodosld9iGPCD0dURLjsa8P5L1JdAa8qiohtTZ
G0hWDuER00MSHZm/dWTSfHHjci8pSqEmkk6uxvafY+9hE83ZCQKRvMvyhY3H8O4A
4uMwKAhCvCkYOrIv/BInxKgyP0iX50QeGIsu/mwGC3GZSZ334Nz/XO4V9DAKhWCo
1WBs/kq5xpNNr6737bdeLbl3GHZMQMudnHX7VkYSKSF+1X5ZygHLq7cajBWphD72
esj6m/es1CNNMV59TZVlmrbrBcNFN7coLs3rMMiDFieanCs+HrH7lX9BpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDITgyO81fiTxELAWQXUFss1h1aBMB8GA1UdIwQY
MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt
MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl
LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3MPcdFT
zVXV9EVUJ+cJQWQeOvDAlBNo+uGnvSgf3suUYH9mZRLLOeET7w6vaFJfG4LIjEyb
kobTN3yZQtzjLw5WU7qzmqzVdFMPJ4rZp592MQtjSMPh653pkfh2EGAVJMu52iQ4
e0ixKMYqhpj03i/i8Bo/daM+7MyU8Q3lBr1viR+Z23h20Szw8wpdiydGNeekG9Wy
jV8po3QZ963HXin9zQuNh7q7SU787DprDoK7IPOI6ak5UOcsS9N2kYIdmQhw8ZNw
3Amym7SE47Yk1rtpK+pSxLQTWa4fUJ+Fy13z4ADvfKzf6CVveUNcglZbo0MUHu9r
iadb3Svgv5rBfA==
-----END CERTIFICATE-----