Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File:                     QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier:          OCZgIUYakmPnM0EmPUD9y3sOAFRo366cs/5npnY002I=
Subject key identifier:   DE:F4:5E:D0:9B:C8:9A:D2:CF:B8:04:31:4A:59:31:17:B3:02:41:62
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer:       /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial:       01962F74B1912C5B9A2C39164664627EFB53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number:          0CED
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=)
                          2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: czeEtyhw4xYE5dxmdt8caQMInNhVXDMaXeayUfFR9sU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b1:91:2c:5b:9a:2c:39:16:46:64:62:7e:fb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=def45ed09bc89ad2cfb804314a593117b3024162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:a9:88:f1:5c:64:92:d8:d6:5d:fe:a1:0c:
                    b9:75:22:7f:b3:45:a4:2d:e9:ef:c8:8e:29:a8:a0:
                    50:93:12:7b:b9:94:4f:be:cf:94:71:c0:54:49:5d:
                    51:96:2a:7a:d0:16:02:b8:8a:47:cb:90:ad:67:25:
                    d8:7a:55:fd:88:6c:d9:e5:e1:11:17:a7:f2:77:59:
                    26:b6:8f:32:39:aa:3d:9f:5a:4b:ca:f1:42:4e:7d:
                    28:82:92:12:29:a1:c3:ee:85:86:85:b0:61:fe:a6:
                    52:61:d1:7e:e7:43:49:98:85:04:cd:a2:db:f6:d2:
                    a9:e6:f2:5b:09:59:1c:33:ea:5b:e2:2c:de:fa:e0:
                    8f:34:90:1f:92:e2:78:7d:37:d3:a3:2a:34:48:43:
                    f6:e1:f4:eb:4c:bc:6d:ef:8b:f5:d3:10:60:2c:bd:
                    6b:73:95:47:e7:fb:a5:16:79:86:a6:90:86:bc:77:
                    60:41:e4:13:e5:84:8a:da:21:8b:00:2a:2d:8a:b8:
                    da:49:f0:d5:d8:9c:00:08:72:06:fc:6f:eb:83:f1:
                    73:c8:1b:91:ce:20:6d:8c:b5:93:64:9e:7a:34:af:
                    d7:76:41:24:90:76:1c:77:72:a7:e4:c8:cc:4b:a7:
                    0f:19:ec:fe:15:69:94:36:f0:c3:73:80:22:2b:01:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:5E:D0:9B:C8:9A:D2:CF:B8:04:31:4A:59:31:17:B3:02:41:62
            X509v3 Authority Key Identifier:
                keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:a0:6c:d7:bb:39:71:c5:3b:67:96:bd:1b:f6:0a:33:bc:
         b2:35:14:34:d2:1f:13:ba:5b:17:8e:4c:eb:ec:29:cf:bb:d4:
         88:e9:92:20:00:66:9e:79:57:36:a8:3a:a7:77:5a:09:58:ba:
         ec:c0:ed:14:05:8b:5e:22:63:c3:63:a2:99:51:61:a0:73:b2:
         88:73:f1:57:20:2d:b8:19:8a:75:fa:00:63:2f:06:1a:a0:45:
         94:ca:91:dc:b0:66:2f:9d:e0:1c:2d:33:0f:26:e9:ef:83:09:
         2f:6f:7d:2e:38:35:73:af:40:0e:ce:c2:10:99:d9:98:ff:1e:
         3b:d2:ec:77:b0:c4:4e:15:3e:02:8c:da:c6:fa:30:84:a1:bc:
         53:3c:b9:52:b6:f0:69:3d:81:01:b9:f5:97:7a:6c:89:23:9f:
         cd:71:87:87:74:59:c8:ab:eb:d9:14:cc:00:da:3b:f5:40:d9:
         7f:2d:64:57:4f:59:90:2f:d8:3d:07:ee:d6:9d:b4:52:d5:7c:
         2f:9c:76:bf:f4:b3:29:a2:11:41:54:bd:b6:7d:79:fd:7e:35:
         c8:20:5c:77:1f:a0:db:75:6a:2f:7c:d6:13:f6:7e:d3:93:af:
         3c:e4:91:99:0a:27:a3:6f:1d:8f:7f:66:63:c8:e6:ef:e1:5d:
         b1:1d:7b:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLGRLFuaLDkWRmRifvtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNjYyNzMzYmM4NzNkMTNlMWY5ZjY2ZThkZmY3NWM4MjBk
NWQyZjcwHhcNMjUwNDEzMTQwMTM4WhcNMjUwNDE0MTQwMTM4WjAzMTEwLwYDVQQD
EyhkZWY0NWVkMDliYzg5YWQyY2ZiODA0MzE0YTU5MzExN2IzMDI0MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/qpiPFcZJLY1l3+oQy5dSJ/s0Wk
LenvyI4pqKBQkxJ7uZRPvs+UccBUSV1Rlip60BYCuIpHy5CtZyXYelX9iGzZ5eER
F6fyd1kmto8yOao9n1pLyvFCTn0ogpISKaHD7oWGhbBh/qZSYdF+50NJmIUEzaLb
9tKp5vJbCVkcM+pb4ize+uCPNJAfkuJ4fTfToyo0SEP24fTrTLxt74v10xBgLL1r
c5VH5/ulFnmGppCGvHdgQeQT5YSK2iGLACotirjaSfDV2JwACHIG/G/rg/FzyBuR
ziBtjLWTZJ56NK/XdkEkkHYcd3Kn5MjMS6cPGez+FWmUNvDDc4AiKwFaeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN70XtCbyJrSz7gEMUpZMRezAkFiMB8GA1UdIwQY
MBaAFEBmJzO8hz0T4fn2bo3/dcgg1dL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYt
OWNiNTFlNTFmZjc3LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYtOWNiNTFlNTFmZjc3
LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGugbNe7
OXHFO2eWvRv2CjO8sjUUNNIfE7pbF45M6+wpz7vUiOmSIABmnnlXNqg6p3daCVi6
7MDtFAWLXiJjw2OimVFhoHOyiHPxVyAtuBmKdfoAYy8GGqBFlMqR3LBmL53gHC0z
Dybp74MJL299Ljg1c69ADs7CEJnZmP8eO9Lsd7DEThU+AozaxvowhKG8Uzy5Urbw
aT2BAbn1l3psiSOfzXGHh3RZyKvr2RTMANo79UDZfy1kV09ZkC/YPQfu1p20UtV8
L5x2v/SzKaIRQVS9tn15/X41yCBcdx+g23VqL3zWE/Z+05OvPOSRmQono28dj39m
Y8jm7+FdsR174g==
-----END CERTIFICATE-----