Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File:                     qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier:          HMhP63zMiwdov5gKy1UPAT7ozkbT/mA14dsCd6Aw2nU=
Subject key identifier:   6B:A6:A5:B3:1F:B1:01:76:16:49:D5:A8:28:B7:A3:90:55:B2:63:72
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer:       /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial:       01962F3DE5A15C9B6CDEE8CE57B659D81D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
                          2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: IvZMphp2AkSLTyk6faJViALK2JDs5BXn/GCQhSQGYaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e5:a1:5c:9b:6c:de:e8:ce:57:b6:59:d8:1d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=6ba6a5b31fb101761649d5a828b7a39055b26372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:bc:dd:1c:8a:ad:12:c0:3f:5e:a2:53:0b:
                    3c:65:7a:37:f8:ef:c6:b6:d4:0a:41:70:4a:03:96:
                    0a:65:9a:f9:64:5c:0d:7b:43:57:27:78:8f:fc:06:
                    e0:11:4c:e9:fd:52:a9:da:75:05:f4:0f:0f:99:b7:
                    e1:a3:38:b5:8f:92:4e:be:07:d2:fd:99:ea:da:78:
                    11:26:14:f1:2c:45:ad:af:45:61:be:03:3c:c2:c2:
                    59:77:28:d9:37:6c:a4:4d:4c:dc:26:ec:6d:c9:e1:
                    c6:67:61:8e:79:5e:a8:8d:50:12:c9:5d:b7:bc:ff:
                    90:ae:0b:31:f3:ef:54:2b:e7:48:a2:e9:95:e3:b7:
                    df:9a:cf:5e:2d:8b:5b:81:ab:c9:cf:14:cd:9e:af:
                    d4:f1:13:99:6c:9d:a2:77:f1:3e:b9:69:b9:6f:06:
                    a7:d9:1c:1c:db:83:f0:73:08:40:68:0a:56:85:12:
                    2a:fa:c0:d4:4e:db:b2:01:2c:63:01:c3:00:22:45:
                    69:f6:da:50:e2:6d:09:ba:a5:0a:d9:92:c3:3e:16:
                    65:38:a2:d0:5f:c6:d0:f8:d9:71:c2:1a:27:4e:63:
                    76:61:4c:e4:1c:29:18:67:b2:22:03:e9:33:3e:8e:
                    2e:8b:ec:5f:28:3c:95:52:bf:52:59:62:8b:b2:f0:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A6:A5:B3:1F:B1:01:76:16:49:D5:A8:28:B7:A3:90:55:B2:63:72
            X509v3 Authority Key Identifier:
                keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b5:c9:80:55:69:d6:8e:9f:d9:ef:c3:20:79:af:24:7c:5a:
         8d:64:9e:f1:aa:b5:f9:1b:d1:b4:2b:91:c8:cf:b4:ce:8e:87:
         c9:28:e2:ef:28:da:89:ec:42:0b:8f:f9:9c:7f:3a:57:1b:e5:
         5e:1f:b0:22:68:23:6f:92:10:fb:09:57:35:6b:07:3c:22:c2:
         f1:a1:84:29:aa:d2:28:e7:54:23:7d:35:2c:df:02:f7:7c:22:
         45:38:41:2a:4a:24:23:58:f3:2f:56:69:40:49:90:22:0a:a3:
         80:87:ec:30:7d:09:92:c2:37:70:c8:02:85:c7:bd:53:71:3f:
         78:08:9e:ee:da:6f:a6:85:f4:05:b0:33:3e:8d:6b:df:15:97:
         9b:ab:e5:29:c2:47:5c:06:29:f2:e5:6e:98:9c:af:94:c6:0d:
         ce:21:2f:73:06:4a:f4:f6:ca:2d:41:ef:8a:25:cc:3e:91:ff:
         3d:60:fc:dd:4f:d7:7d:64:a4:18:fa:38:7d:78:ba:d4:9c:50:
         fa:e9:cb:a9:69:a8:b3:c2:f3:81:29:17:b0:60:eb:1b:f2:d4:
         2c:70:80:82:1e:c5:f7:d9:f7:a3:8b:11:78:19:3b:60:6e:7e:
         ba:e5:f3:48:15:05:1f:34:47:65:63:e9:c4:a6:12:a9:68:f3:
         c9:bf:96:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeWhXJts3ujOV7ZZ2B0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTZjMWUxNGM4NmU2ZWY1YjE2NzI0ZjcxMTc2NzZlYzcy
MTQ5NTcwHhcNMjUwNDEzMTMwMTQ3WhcNMjUwNDE0MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg2YmE2YTViMzFmYjEwMTc2MTY0OWQ1YTgyOGI3YTM5MDU1YjI2MzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjm83RyKrRLAP16iUws8ZXo3+O/G
ttQKQXBKA5YKZZr5ZFwNe0NXJ3iP/AbgEUzp/VKp2nUF9A8Pmbfhozi1j5JOvgfS
/Znq2ngRJhTxLEWtr0VhvgM8wsJZdyjZN2ykTUzcJuxtyeHGZ2GOeV6ojVASyV23
vP+Qrgsx8+9UK+dIoumV47ffms9eLYtbgavJzxTNnq/U8ROZbJ2id/E+uWm5bwan
2Rwc24PwcwhAaApWhRIq+sDUTtuyASxjAcMAIkVp9tpQ4m0JuqUK2ZLDPhZlOKLQ
X8bQ+NlxwhonTmN2YUzkHCkYZ7IiA+kzPo4ui+xfKDyVUr9SWWKLsvCQGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGumpbMfsQF2FknVqCi3o5BVsmNyMB8GA1UdIwQY
MBaAFKiWweFMhubvWxZyT3EXZ27HIUlXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt
MTRhMDgyNWI1MjkxLzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx
LzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrXJgFVp
1o6f2e/DIHmvJHxajWSe8aq1+RvRtCuRyM+0zo6HySji7yjaiexCC4/5nH86Vxvl
Xh+wImgjb5IQ+wlXNWsHPCLC8aGEKarSKOdUI301LN8C93wiRThBKkokI1jzL1Zp
QEmQIgqjgIfsMH0JksI3cMgChce9U3E/eAie7tpvpoX0BbAzPo1r3xWXm6vlKcJH
XAYp8uVumJyvlMYNziEvcwZK9PbKLUHviiXMPpH/PWD83U/XfWSkGPo4fXi61JxQ
+unLqWmos8LzgSkXsGDrG/LULHCAgh7F99n3o4sReBk7YG5+uuXzSBUFHzRHZWPp
xKYSqWjzyb+Wvg==
-----END CERTIFICATE-----