Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File:                     QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier:          lvAvfFshLiWacTCj5ptlpbIjKobVCEnjity2Y4E4QlQ=
Subject key identifier:   6A:C6:DC:98:AC:C8:B0:DE:5A:CF:E1:57:08:54:E2:EC:E5:EE:27:A6
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer:       /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial:       01962E61ED97BCB24CAF53416FE89156BFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number:          0131
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: 0E2dGZLUf6BKXamRv8HxxgYUyC8WA+n1k0UtkPbdTrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ed:97:bc:b2:4c:af:53:41:6f:e8:91:56:bf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=6ac6dc98acc8b0de5acfe1570854e2ece5ee27a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:f3:7f:89:47:35:c6:c2:5c:bf:c5:55:fb:
                    54:3f:e3:a4:de:83:4e:fa:14:66:68:74:b7:6f:72:
                    c9:25:42:c1:9b:40:52:5f:1e:c2:fb:2d:43:56:76:
                    fb:59:89:78:2a:7c:c2:9d:26:cc:45:c4:69:a8:d3:
                    fb:cd:ab:6c:b9:7d:d9:45:96:cf:cf:cf:de:18:63:
                    7e:ea:15:01:4a:d7:ac:8d:d5:9a:64:6f:7a:f2:aa:
                    5b:e8:56:e9:c2:83:61:f0:cf:6e:30:9d:07:d2:2d:
                    75:ad:08:7f:8d:79:8a:90:2f:b5:0b:6b:e6:54:0f:
                    0c:0a:7c:29:75:94:9d:69:0b:75:1f:ff:b2:27:b6:
                    ee:fb:35:93:38:24:b5:6b:75:ea:e6:2c:c3:be:57:
                    9b:b2:5b:11:b6:32:83:5a:0d:6c:d3:36:72:7d:cd:
                    c5:d2:6b:9d:46:5e:f1:1a:5b:a6:0d:84:a5:c5:2b:
                    18:29:c1:41:d9:9c:61:b2:ca:74:8d:43:5e:b0:82:
                    e2:70:90:21:dc:15:a8:52:61:01:31:7d:76:85:91:
                    ea:01:e1:f6:c0:79:07:66:11:9e:84:55:ba:9a:a5:
                    dc:1c:dd:86:e7:d5:70:15:50:12:01:40:94:c4:24:
                    8a:08:2d:ec:21:03:9b:66:38:80:f5:d5:a0:33:3b:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:DC:98:AC:C8:B0:DE:5A:CF:E1:57:08:54:E2:EC:E5:EE:27:A6
            X509v3 Authority Key Identifier:
                keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:48:35:2c:0b:f8:ab:05:8c:c7:2e:47:5e:05:9a:b0:e1:
         e1:22:8b:f7:48:c3:e0:f3:51:1a:e6:01:c8:1a:ff:03:59:06:
         00:4f:d3:34:6e:b8:4e:f8:9d:1f:a6:92:22:f6:21:8a:61:f6:
         15:a2:04:2a:67:4c:63:07:9d:1a:67:b2:50:1e:f7:0f:d1:41:
         ad:2b:67:91:81:a2:9d:5e:1a:d9:8f:88:21:fe:04:8c:e2:fc:
         46:11:b6:f7:5f:b2:6b:28:9b:80:ca:6d:a0:86:a1:c1:dc:4b:
         98:02:b0:ee:de:dd:71:d1:9b:82:72:53:27:2c:56:bf:0b:03:
         c4:0d:78:9e:be:45:48:69:67:0d:9d:52:4a:7f:0d:7d:2c:31:
         68:cc:f5:8a:fb:00:69:bb:2f:01:35:19:b5:56:be:de:07:08:
         43:f6:da:29:6b:5b:9a:14:46:c9:5d:8c:8c:c4:f6:16:7c:31:
         1b:26:ec:a9:e8:d4:56:bb:b3:78:86:79:d8:2c:91:ff:15:19:
         20:e7:03:2e:3c:e2:e4:e9:c2:18:58:ca:84:0f:a2:72:a7:eb:
         16:77:b8:58:0d:4b:28:f3:bc:68:54:e8:f3:8d:ac:a8:cf:df:
         45:19:2e:0b:21:2a:18:55:fe:87:8d:7a:11:34:41:65:cc:39:
         0d:a4:df:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYe2XvLJMr1NBb+iRVr/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNWZmYzc0YWU5MjM4NmFmYjdjZTc3MGYwMzkwZTkwZDRj
ZGUzMDYwHhcNMjUwNDEzMDkwMTMxWhcNMjUwNDE0MDkwMTMxWjAzMTEwLwYDVQQD
Eyg2YWM2ZGM5OGFjYzhiMGRlNWFjZmUxNTcwODU0ZTJlY2U1ZWUyN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAzzf4lHNcbCXL/FVftUP+Ok3oNO
+hRmaHS3b3LJJULBm0BSXx7C+y1DVnb7WYl4KnzCnSbMRcRpqNP7zatsuX3ZRZbP
z8/eGGN+6hUBStesjdWaZG968qpb6FbpwoNh8M9uMJ0H0i11rQh/jXmKkC+1C2vm
VA8MCnwpdZSdaQt1H/+yJ7bu+zWTOCS1a3Xq5izDvlebslsRtjKDWg1s0zZyfc3F
0mudRl7xGlumDYSlxSsYKcFB2Zxhssp0jUNesILicJAh3BWoUmEBMX12hZHqAeH2
wHkHZhGehFW6mqXcHN2G59VwFVASAUCUxCSKCC3sIQObZjiA9dWgMzuuHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrG3JisyLDeWs/hVwhU4uzl7iemMB8GA1UdIwQY
MBaAFEBf/HSukjhq+3zncPA5DpDUzeMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQt
NzI0NmFlZmNkMjcyLzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQtNzI0NmFlZmNkMjcy
LzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf1INSwL
+KsFjMcuR14FmrDh4SKL90jD4PNRGuYByBr/A1kGAE/TNG64TvidH6aSIvYhimH2
FaIEKmdMYwedGmeyUB73D9FBrStnkYGinV4a2Y+IIf4EjOL8RhG291+yayibgMpt
oIahwdxLmAKw7t7dcdGbgnJTJyxWvwsDxA14nr5FSGlnDZ1SSn8NfSwxaMz1ivsA
absvATUZtVa+3gcIQ/baKWtbmhRGyV2MjMT2FnwxGybsqejUVruzeIZ52CyR/xUZ
IOcDLjzi5OnCGFjKhA+icqfrFne4WA1LKPO8aFTo842sqM/fRRkuCyEqGFX+h416
ETRBZcw5DaTfuw==
-----END CERTIFICATE-----