Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File:                     Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier:          vuLba4r6JuKRxZSbTZgR57fN8wyEqZVgPqJo2+OowK0=
Subject key identifier:   27:DA:AA:64:72:6F:30:9A:23:EF:F5:A9:E0:12:DF:DB:DE:11:54:9C
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer:       /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial:       01962F74F244F41F28947FAE4B7CA3738CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number:          1472
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: 7Ii3o_ZhGPWdlGRrqt0iNC6A45A.roa (hash: bSJ6yN+1N4lchi22FVNmsmx0YQvJ/a2LompQsIf4Zik=)
                          2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: 1lyFiv9OivQe4Ou6biRp2+MK63LQdgmXy+mmb7J2ucc=)
                          3: XFuigRA8MEoOFoeSisElJd3ZsTs.roa (hash: 6UiYiGL9M04Fpw4dwtYLRNHZ/SpRJ4sN2n0AIpfwxcA=)
                          4: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f2:44:f4:1f:28:94:7f:ae:4b:7c:a3:73:8c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=27daaa64726f309a23eff5a9e012dfdbde11549c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:30:f5:a5:aa:dd:90:9c:a1:0d:06:62:94:
                    97:1c:7c:88:e1:b4:ff:6f:84:2c:7f:f9:aa:6c:35:
                    32:93:d0:e9:6a:0a:33:f5:69:41:34:76:77:b6:e4:
                    21:32:02:77:51:6b:d4:55:35:72:9e:86:3f:07:26:
                    76:51:c6:28:f7:2e:2b:6f:b8:20:6e:b7:bc:67:1b:
                    94:27:12:67:3f:ac:76:6d:5d:e3:e2:c2:a3:35:c1:
                    e3:8b:e0:c8:5f:e9:21:1b:e8:64:0a:f2:63:8b:56:
                    df:a0:3b:fb:bf:9a:f7:b6:c7:1a:91:ba:c0:1c:82:
                    18:51:4b:65:f6:68:fc:47:08:23:f8:4c:dd:7a:6d:
                    55:68:1f:85:da:3e:58:7c:84:b2:c3:3b:0b:6c:19:
                    26:00:52:a8:e7:8c:0d:ab:27:0f:6a:f8:5e:d4:f9:
                    4b:91:af:e1:ea:0e:e7:54:1f:5b:47:60:50:17:d5:
                    95:99:7d:e0:cb:29:9f:df:4a:c0:55:b0:a8:1a:b6:
                    ac:db:a0:14:68:1b:5f:90:c2:55:02:2c:07:12:50:
                    29:53:40:06:a5:9c:a3:22:b3:ab:dc:c9:66:db:0f:
                    21:fc:c9:bb:b8:23:ef:41:9e:36:9b:e1:96:c9:e5:
                    eb:52:4e:cb:b0:66:be:16:01:d9:de:b9:b3:de:8b:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DA:AA:64:72:6F:30:9A:23:EF:F5:A9:E0:12:DF:DB:DE:11:54:9C
            X509v3 Authority Key Identifier:
                keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4d:a8:72:e8:35:e5:bc:05:ae:34:1d:7c:0b:bb:e8:6c:9b:
         ec:5d:a2:88:33:54:17:ee:13:f7:b0:87:e5:90:6c:e7:29:ec:
         0a:a0:7b:56:86:22:33:b1:b9:0a:1b:95:09:43:06:6a:4e:69:
         0b:ee:a9:39:a3:dc:08:43:8c:fc:3f:c0:27:e7:1d:2d:f4:35:
         d2:f3:e8:d4:1b:ec:27:31:9f:0a:d9:c5:02:cf:00:60:14:b0:
         06:63:1e:51:f1:a1:bb:e4:01:9c:e4:c5:35:79:70:65:1b:3b:
         51:2d:06:31:e8:c7:2a:d0:c0:4a:82:63:05:1e:4a:06:65:39:
         c7:ca:14:f3:55:fd:03:bd:25:e5:12:e5:aa:78:0a:8c:34:9b:
         b0:80:1e:a4:bf:08:06:eb:c6:14:14:b3:50:e8:18:91:dc:08:
         b5:ac:33:a9:c6:60:d1:8e:2d:50:d4:ac:8b:a3:1a:6c:f5:2c:
         c8:59:d1:65:1e:26:eb:c4:fc:9e:6a:61:a6:15:3d:e7:3f:06:
         bd:2d:5f:28:f3:a3:36:3c:5d:04:d3:ee:91:ed:e3:68:19:62:
         6e:f6:7f:c1:ef:33:e9:76:db:41:9f:8b:56:c6:42:45:b9:45:
         fb:e1:4e:4d:18:45:d9:38:d6:72:bc:e8:3e:b1:4b:a1:90:f0:
         55:e1:78:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdPJE9B8olH+uS3yjc4y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjUwNDEzMTQwMTU1WhcNMjUwNDE0MTQwMTU1WjAzMTEwLwYDVQQD
EygyN2RhYWE2NDcyNmYzMDlhMjNlZmY1YTllMDEyZGZkYmRlMTE1NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPcw9aWq3ZCcoQ0GYpSXHHyI4bT/
b4Qsf/mqbDUyk9Dpagoz9WlBNHZ3tuQhMgJ3UWvUVTVynoY/ByZ2UcYo9y4rb7gg
bre8ZxuUJxJnP6x2bV3j4sKjNcHji+DIX+khG+hkCvJji1bfoDv7v5r3tscakbrA
HIIYUUtl9mj8Rwgj+Ezdem1VaB+F2j5YfISywzsLbBkmAFKo54wNqycPavhe1PlL
ka/h6g7nVB9bR2BQF9WVmX3gyymf30rAVbCoGras26AUaBtfkMJVAiwHElApU0AG
pZyjIrOr3Mlm2w8h/Mm7uCPvQZ42m+GWyeXrUk7LsGa+FgHZ3rmz3osNpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfaqmRybzCaI+/1qeAS39veEVScMB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJU2ocug1
5bwFrjQdfAu76Gyb7F2iiDNUF+4T97CH5ZBs5ynsCqB7VoYiM7G5ChuVCUMGak5p
C+6pOaPcCEOM/D/AJ+cdLfQ10vPo1BvsJzGfCtnFAs8AYBSwBmMeUfGhu+QBnOTF
NXlwZRs7US0GMejHKtDASoJjBR5KBmU5x8oU81X9A70l5RLlqngKjDSbsIAepL8I
BuvGFBSzUOgYkdwItawzqcZg0Y4tUNSsi6MabPUsyFnRZR4m68T8nmphphU95z8G
vS1fKPOjNjxdBNPuke3jaBlibvZ/we8z6XbbQZ+LVsZCRblF++FOTRhF2TjWcrzo
PrFLoZDwVeF48Q==
-----END CERTIFICATE-----