Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
File:                     SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft (raw, json)
Hash identifier:          IC9pLBRQZpoxgCBBkGp2u1ldbv6++KdiNDEKi0VQEkc=
Subject key identifier:   9A:A6:73:73:D3:CA:B5:EF:88:BB:4B:24:82:90:0E:3C:EE:BB:70:B3
Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Certificate issuer:       /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Certificate serial:       01962E98C7022C626EDFAD68750743467AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
Manifest number:          0D47
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl (hash: xvt8Lrg5bjx6DeNe61AZccrmEJwlTPZMEto2+7HSp90=)
                          2: qbL9OL5sc-w50AXrG2tZRkZnW2s.roa (hash: Q4+OtthvOte+9IlGsVQn+tB7AZLUhi+dropNGViFYc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:02:2c:62:6e:df:ad:68:75:07:43:46:7a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=9aa67373d3cab5ef88bb4b2482900e3ceebb70b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:4c:d8:ef:1e:78:50:32:2d:77:cf:8f:17:
                    92:9d:1a:d2:60:69:ac:ea:14:d5:ad:c8:63:14:04:
                    e2:b1:53:86:cc:b0:29:f2:8b:42:f8:29:cb:d2:45:
                    fe:33:83:93:36:d8:ed:14:bb:cf:43:41:d4:95:0e:
                    81:4e:8e:e7:39:07:68:19:30:7a:4a:d2:2a:36:f7:
                    ac:50:38:47:b3:0c:02:ec:25:84:06:e7:20:dd:3e:
                    38:f7:b8:96:b1:db:ed:d3:e3:2e:a0:73:ae:84:c1:
                    73:61:8d:04:58:8e:2d:17:33:a0:b6:89:f9:82:fb:
                    6f:70:82:c6:9a:5f:42:c1:16:30:cb:ed:dc:18:65:
                    79:4b:af:05:71:77:ac:5d:12:98:f5:d4:bc:bb:d0:
                    28:66:89:71:8e:d3:50:f1:7c:20:b7:49:16:e7:9d:
                    1c:9a:4d:c6:65:d7:47:5a:d0:4c:8f:55:d8:e9:d6:
                    ac:9f:e5:05:cd:53:5a:81:ed:cd:b5:5b:91:fa:d9:
                    52:d3:49:38:1c:ff:a7:a9:7b:a0:60:dc:51:71:ba:
                    27:7a:81:0c:7c:67:d4:2e:eb:f5:0b:4b:6e:70:85:
                    35:ca:90:7e:3f:5d:41:ff:1b:fa:a0:c5:0f:34:49:
                    35:02:20:07:0f:8c:3e:5c:c6:f1:eb:07:bc:39:f4:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:73:73:D3:CA:B5:EF:88:BB:4B:24:82:90:0E:3C:EE:BB:70:B3
            X509v3 Authority Key Identifier:
                keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:37:9f:da:2f:b6:bf:31:28:72:45:e8:b6:48:bc:3f:6d:20:
         f0:74:9d:56:d6:37:1a:cc:c3:70:e3:46:a9:de:c5:1e:e9:76:
         db:41:1b:3f:bd:2e:5a:39:d4:1c:44:ba:97:97:e7:99:f1:b0:
         65:cc:34:19:38:56:90:ab:eb:05:a9:ef:bc:3a:ce:69:ba:67:
         e3:1f:e4:8c:98:d8:aa:ee:82:e6:90:54:1a:35:13:c5:55:d9:
         38:51:9e:40:08:ba:a3:ac:ec:75:a5:cc:ae:2b:07:42:b1:f0:
         b2:25:c8:44:76:a3:49:f9:0f:56:08:9a:76:8d:2d:0e:1d:08:
         ff:82:2f:8b:33:88:fb:04:0c:ba:2e:a4:d5:8b:ef:92:fa:0d:
         4e:34:f5:06:88:6b:6a:a8:3c:af:9e:61:33:ca:99:22:66:44:
         ba:3e:75:5e:f7:57:73:12:ae:c2:fa:5a:77:2f:68:40:bf:52:
         41:c8:05:c1:bb:0a:e2:25:cf:8a:06:35:5e:5b:ac:40:9a:3a:
         86:61:d6:67:28:7c:07:55:bd:85:5b:af:03:47:ac:ed:63:75:
         79:d7:c2:2f:a8:37:54:d4:45:7c:fe:17:68:9c:4d:82:a0:be:
         98:ea:8b:09:7c:33:0e:05:e7:1d:46:90:e7:35:2e:45:d3:f2:
         15:71:8a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMcCLGJu361odQdDRnruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjQwYjU5YmJmNjkwNmE1NTVlMTA3NGM1YWU3M2VjNjJk
ZmZjNWYwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
Eyg5YWE2NzM3M2QzY2FiNWVmODhiYjRiMjQ4MjkwMGUzY2VlYmI3MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswtM2O8eeFAyLXfPjxeSnRrSYGms
6hTVrchjFATisVOGzLAp8otC+CnL0kX+M4OTNtjtFLvPQ0HUlQ6BTo7nOQdoGTB6
StIqNvesUDhHswwC7CWEBucg3T4497iWsdvt0+MuoHOuhMFzYY0EWI4tFzOgton5
gvtvcILGml9CwRYwy+3cGGV5S68FcXesXRKY9dS8u9AoZolxjtNQ8Xwgt0kW550c
mk3GZddHWtBMj1XY6dasn+UFzVNage3NtVuR+tlS00k4HP+nqXugYNxRcboneoEM
fGfULuv1C0tucIU1ypB+P11B/xv6oMUPNEk1AiAHD4w+XMbx6we8OfTu5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqmc3PTyrXviLtLJIKQDjzuu3CzMB8GA1UdIwQY
MBaAFEkkC1m79pBqVV4QdMWuc+xi3/xfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUt
ZDE0YWYyY2I4ZmRlLzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUtZDE0YWYyY2I4ZmRl
LzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzef2i+2
vzEockXotki8P20g8HSdVtY3GszDcONGqd7FHul220EbP70uWjnUHES6l5fnmfGw
Zcw0GThWkKvrBanvvDrOabpn4x/kjJjYqu6C5pBUGjUTxVXZOFGeQAi6o6zsdaXM
risHQrHwsiXIRHajSfkPVgiado0tDh0I/4IvizOI+wQMui6k1YvvkvoNTjT1Bohr
aqg8r55hM8qZImZEuj51XvdXcxKuwvpady9oQL9SQcgFwbsK4iXPigY1XlusQJo6
hmHWZyh8B1W9hVuvA0es7WN1edfCL6g3VNRFfP4XaJxNgqC+mOqLCXwzDgXnHUaQ
5zUuRdPyFXGKog==
-----END CERTIFICATE-----