Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File:                     qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier:          q7QYUhBUoAX0Eu/bLxoefEKnqmXNL2pQUy031fQdoBI=
Subject key identifier:   89:01:C2:9A:42:2E:ED:9A:9D:86:BD:DE:85:EE:F4:71:7E:05:E1:60
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer:       /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial:       01962F06FB380616CA54D567A7BDB37FABF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number:          134A
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=)
                          2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: 4UAuMyN6RmEYKiZR2+c1kZbMPNfKTtSj/Q0wkx73dUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:38:06:16:ca:54:d5:67:a7:bd:b3:7f:ab:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=8901c29a422eed9a9d86bdde85eef4717e05e160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:c7:88:d5:85:ed:0b:38:12:8d:aa:8a:c2:
                    87:b7:ca:4c:4f:a6:7d:e8:53:09:7a:91:3d:0d:0a:
                    f2:89:79:f4:e2:26:c5:5c:38:ec:da:f6:20:87:6c:
                    36:72:78:48:ac:1f:ec:c9:51:d5:1f:ac:39:38:a6:
                    87:34:46:79:fb:cf:c8:39:12:45:5f:b4:e2:de:41:
                    eb:af:de:40:a3:af:7b:ab:36:d3:d8:3b:4c:cc:49:
                    c4:d4:be:6f:98:6b:83:8d:9e:6f:e0:66:07:d8:22:
                    65:42:94:a1:3c:c8:b4:2a:fe:0c:43:05:c8:3f:0f:
                    a7:b5:69:e0:65:73:5a:fe:66:d2:6b:97:62:ee:61:
                    8f:42:63:25:95:7d:50:dc:e8:7d:be:fb:1e:99:b0:
                    49:43:27:cd:20:32:f9:1d:8e:38:6d:3b:ea:a0:4e:
                    d7:bd:3c:c9:5a:bb:17:86:ad:a0:e0:60:75:7d:ed:
                    2f:6d:c3:42:d3:db:e1:95:05:21:0c:74:b5:12:97:
                    e9:89:39:89:db:e9:b7:98:15:2e:bc:95:1b:4a:ba:
                    20:4e:04:ef:1d:c2:67:8b:38:56:be:81:6a:c7:49:
                    e5:af:93:ff:eb:cd:63:5e:4a:53:ff:1d:7b:78:84:
                    1e:f0:4b:4b:eb:29:0d:33:5f:6d:d5:f4:b8:e6:b6:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:C2:9A:42:2E:ED:9A:9D:86:BD:DE:85:EE:F4:71:7E:05:E1:60
            X509v3 Authority Key Identifier:
                keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2e:26:bf:a9:73:7a:eb:6b:a0:5f:1f:b5:4b:3a:12:83:f1:
         8a:1e:2b:0a:43:88:a8:e5:30:16:4c:1d:45:d7:84:b7:f9:18:
         c4:ac:2b:05:d7:dc:4f:ab:4f:15:9d:d0:d8:a2:b2:19:1b:74:
         c8:a6:81:04:0e:e6:31:dd:3c:46:bb:56:95:60:1f:56:e6:b3:
         6b:0f:70:32:54:74:5b:6e:bb:08:a7:b9:dc:a9:95:b7:37:56:
         13:31:4b:f5:ed:2f:f7:09:a5:9f:b0:77:1a:3d:15:97:fb:d7:
         49:68:cc:b4:31:35:c1:b0:d2:52:93:44:ee:fa:01:d4:a7:ec:
         5e:91:e7:12:46:76:7d:60:5e:b5:e4:7d:f4:7a:25:d1:ca:55:
         e1:cc:a5:34:0d:4b:17:a9:f0:eb:34:31:3d:b0:25:68:68:ef:
         cd:1b:e6:62:ae:e7:e2:2f:f8:17:ff:0a:9b:44:42:7a:63:3f:
         98:99:bf:89:09:b4:d9:bc:0a:ab:0c:52:37:f6:b0:1c:a9:7d:
         70:c8:80:df:a3:1a:0e:21:21:5b:52:75:2d:14:0e:b5:85:bb:
         49:32:86:60:aa:30:e2:e4:84:e9:f1:47:a7:d8:11:75:a2:15:
         96:f2:00:ed:8b:1a:24:34:45:fd:c0:fa:91:11:3f:77:75:46:
         9e:55:b4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvs4BhbKVNVnp72zf6v5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDI5ZjcwM2I4ZWM4ZTkzY2E0ODQwNWRlZTQ3MzBlZWQ5
M2M2YjIwHhcNMjUwNDEzMTIwMTQ4WhcNMjUwNDE0MTIwMTQ4WjAzMTEwLwYDVQQD
Eyg4OTAxYzI5YTQyMmVlZDlhOWQ4NmJkZGU4NWVlZjQ3MTdlMDVlMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy/HiNWF7Qs4Eo2qisKHt8pMT6Z9
6FMJepE9DQryiXn04ibFXDjs2vYgh2w2cnhIrB/syVHVH6w5OKaHNEZ5+8/IORJF
X7Ti3kHrr95Ao697qzbT2DtMzEnE1L5vmGuDjZ5v4GYH2CJlQpShPMi0Kv4MQwXI
Pw+ntWngZXNa/mbSa5di7mGPQmMllX1Q3Oh9vvsembBJQyfNIDL5HY44bTvqoE7X
vTzJWrsXhq2g4GB1fe0vbcNC09vhlQUhDHS1EpfpiTmJ2+m3mBUuvJUbSrogTgTv
HcJnizhWvoFqx0nlr5P/681jXkpT/x17eIQe8EtL6ykNM19t1fS45rZBaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkBwppCLu2anYa93oXu9HF+BeFgMB8GA1UdIwQY
MBaAFKnSn3A7jsjpPKSEBd7kcw7tk8ayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83YWI5NmYtMDkzZS00YzUyLWJmOWIt
NTJlMTUxZjQyYzIzLzEvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83YWI5NmYtMDkzZS00YzUyLWJmOWItNTJlMTUxZjQyYzIz
LzEvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby4mv6lz
eutroF8ftUs6EoPxih4rCkOIqOUwFkwdRdeEt/kYxKwrBdfcT6tPFZ3Q2KKyGRt0
yKaBBA7mMd08RrtWlWAfVuazaw9wMlR0W267CKe53KmVtzdWEzFL9e0v9wmln7B3
Gj0Vl/vXSWjMtDE1wbDSUpNE7voB1KfsXpHnEkZ2fWBeteR99Hol0cpV4cylNA1L
F6nw6zQxPbAlaGjvzRvmYq7n4i/4F/8Km0RCemM/mJm/iQm02bwKqwxSN/awHKl9
cMiA36MaDiEhW1J1LRQOtYW7STKGYKow4uSE6fFHp9gRdaIVlvIA7YsaJDRF/cD6
kRE/d3VGnlW0Ow==
-----END CERTIFICATE-----