Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File:                     cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier:          dhoHhCIq5EgHscq7vddzgeA/FLXiJIZfCHBheFLmx0Y=
Subject key identifier:   E9:CC:87:4F:1A:25:51:FE:6A:B8:9B:D4:97:FB:85:98:07:4A:75:DD
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer:       /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial:       01962DF407E5345FC27F5F7FAF5725CF1A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number:          102C
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
                          2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: LAAKaM5jUbkPEHTz4ZGquvQK//NcP7IYn78MlF8vIpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:07:e5:34:5f:c2:7f:5f:7f:af:57:25:cf:1a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=e9cc874f1a2551fe6ab89bd497fb8598074a75dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dc:fb:d7:dc:8c:6a:22:b7:40:12:07:86:64:
                    81:92:d3:71:27:c8:11:ba:e3:e2:c5:cc:d5:db:76:
                    3f:62:1f:35:0c:ad:d9:7a:86:d3:73:a0:d3:64:61:
                    3e:cd:4f:54:c0:49:47:cb:62:fb:98:96:10:4d:6a:
                    68:a8:44:39:bd:a6:60:ef:1b:90:da:f9:86:a8:26:
                    bc:2f:d7:54:42:d7:df:7f:49:f1:0a:fb:18:aa:d1:
                    99:ae:e5:1f:f0:b4:fd:70:76:43:91:2b:4b:ea:ea:
                    99:59:f1:1c:88:ef:02:07:77:7d:ad:38:c1:7a:f7:
                    5b:c7:eb:0d:e3:93:6f:73:17:56:a6:9f:38:41:7a:
                    7e:bc:5a:23:7b:11:9a:44:7b:83:ae:dd:2a:81:d8:
                    07:ac:b5:c0:a6:60:88:f5:f9:b3:c6:3d:9a:10:75:
                    64:b8:0c:56:a3:ad:b3:d4:d4:50:4f:53:32:21:da:
                    31:84:ab:ba:a8:55:a6:79:bf:76:31:6b:11:b7:17:
                    fb:0d:fa:82:95:ad:91:04:41:85:15:64:44:e7:24:
                    13:87:47:2f:b8:aa:e4:f7:92:f1:66:f3:8a:ea:eb:
                    73:15:6a:33:d9:5d:69:42:ba:0e:e8:56:b1:9b:d4:
                    fd:fe:25:64:41:ef:11:b5:08:2b:d2:37:08:5d:60:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CC:87:4F:1A:25:51:FE:6A:B8:9B:D4:97:FB:85:98:07:4A:75:DD
            X509v3 Authority Key Identifier:
                keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:c5:0b:79:1b:9b:24:b9:8b:d2:2b:ed:37:1a:cd:c4:3a:
         fd:a9:79:bc:10:c5:2c:47:5a:35:e7:07:9a:5f:ea:e6:6a:99:
         41:1a:7d:ab:49:df:37:8c:7f:da:a6:56:0b:3d:af:42:66:d6:
         5c:4d:9b:7b:40:d8:4c:76:42:45:6f:9a:62:b0:d1:bf:9f:30:
         6a:37:32:30:bd:e8:50:63:65:9e:26:e7:4b:f9:89:7b:09:cb:
         ca:06:c2:8c:9c:d4:33:47:7b:f9:6b:41:04:ed:7f:54:4f:1f:
         fa:6e:eb:e4:3c:56:9c:fa:f8:e1:8a:f7:17:b4:f1:3a:62:18:
         66:8d:ec:85:70:cb:33:0b:ef:e7:2b:e2:e5:ae:74:89:ea:e3:
         08:fd:78:7c:ef:7d:5d:31:42:0a:ab:d4:1f:8b:67:ca:21:4e:
         9b:12:b2:71:7f:28:21:7b:5e:77:ae:37:9c:c4:8b:53:c6:6f:
         6e:4e:ae:47:2c:04:4f:83:73:be:9e:ca:3b:da:e3:6d:d6:af:
         69:0f:94:15:d9:70:38:24:41:14:58:7b:10:3e:7e:6f:31:f0:
         f7:79:68:95:cc:c3:61:a5:dd:ab:74:39:96:4c:a1:b7:5a:30:
         40:d9:f9:2f:5a:46:7f:58:16:33:07:69:15:d6:8f:ed:f9:ae:
         62:e1:32:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9AflNF/Cf19/r1clzxpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYTNjNmNhNDM1ZWJkYmY5NmZmZmE0YzVkOThlNDYwMDgy
OGY3MTIwHhcNMjUwNDEzMDcwMTI5WhcNMjUwNDE0MDcwMTI5WjAzMTEwLwYDVQQD
EyhlOWNjODc0ZjFhMjU1MWZlNmFiODliZDQ5N2ZiODU5ODA3NGE3NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tz719yMaiK3QBIHhmSBktNxJ8gR
uuPixczV23Y/Yh81DK3ZeobTc6DTZGE+zU9UwElHy2L7mJYQTWpoqEQ5vaZg7xuQ
2vmGqCa8L9dUQtfff0nxCvsYqtGZruUf8LT9cHZDkStL6uqZWfEciO8CB3d9rTjB
evdbx+sN45NvcxdWpp84QXp+vFojexGaRHuDrt0qgdgHrLXApmCI9fmzxj2aEHVk
uAxWo62z1NRQT1MyIdoxhKu6qFWmeb92MWsRtxf7DfqCla2RBEGFFWRE5yQTh0cv
uKrk95LxZvOK6utzFWoz2V1pQroO6Faxm9T9/iVkQe8RtQgr0jcIXWDz8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnMh08aJVH+arib1Jf7hZgHSnXdMB8GA1UdIwQY
MBaAFHKjxspDXr2/lv/6TF2Y5GAIKPcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWIt
Y2ViMjFiOGU4MzJiLzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWItY2ViMjFiOGU4MzJi
LzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdDFC3kb
myS5i9Ir7TcazcQ6/al5vBDFLEdaNecHml/q5mqZQRp9q0nfN4x/2qZWCz2vQmbW
XE2be0DYTHZCRW+aYrDRv58wajcyML3oUGNlnibnS/mJewnLygbCjJzUM0d7+WtB
BO1/VE8f+m7r5DxWnPr44Yr3F7TxOmIYZo3shXDLMwvv5yvi5a50ierjCP14fO99
XTFCCqvUH4tnyiFOmxKycX8oIXted643nMSLU8Zvbk6uRywET4Nzvp7KO9rjbdav
aQ+UFdlwOCRBFFh7ED5+bzHw93lolczDYaXdq3Q5lkyht1owQNn5L1pGf1gWMwdp
FdaP7fmuYuEy0A==
-----END CERTIFICATE-----