Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File:                     qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier:          ZZYhNcIINM4dGXqxL7QzU1si/LI3/Sc+22IHJo1v/OA=
Subject key identifier:   67:5C:B8:C0:67:67:27:0C:B1:B6:5A:74:F8:35:DD:63:A6:95:B8:6D
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer:       /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial:       01962F741A42CAF6BDAE30835081C6F92BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number:          045C
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa (hash: LJjg55n4xVGP9vBgMbP2ScHffsmfqIcNY661vZ01XEY=)
                          2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: Vq+dyt5fAMJGcG93KH9Z1+6m9LmLK7vcwh6Bh5vPCyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:42:ca:f6:bd:ae:30:83:50:81:c6:f9:2b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=675cb8c06767270cb1b65a74f835dd63a695b86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f0:2d:a6:12:ba:a5:cc:1d:a0:bc:03:64:5c:
                    75:e3:62:4e:c3:22:33:47:24:a1:e8:c4:cb:69:8b:
                    1b:87:8e:5a:b6:86:9f:a6:4f:60:8d:5e:ad:08:56:
                    d3:84:77:58:c5:03:2c:eb:83:d7:d0:9f:f5:5d:a2:
                    ff:27:e7:02:6c:1d:2d:01:2a:eb:88:99:9a:1e:50:
                    18:40:db:7e:7e:5f:dd:fb:e8:bb:72:11:12:48:f1:
                    e9:64:75:50:d8:d1:d7:e3:db:66:43:91:29:3f:98:
                    a9:75:49:df:fb:4e:1e:3c:4f:8f:22:8f:7d:eb:60:
                    6e:68:85:30:c6:90:0a:fa:55:26:de:35:ff:c5:5c:
                    2f:bc:64:34:75:c9:3b:40:6b:fa:a5:96:29:d1:c6:
                    2b:d2:98:2f:73:ee:4e:62:b5:39:2e:21:0a:34:60:
                    ab:9f:11:ce:9d:a0:16:93:ad:e0:03:31:a5:83:5b:
                    47:3f:68:cf:b3:0a:40:1b:ca:c7:0a:db:84:d1:14:
                    45:ce:f2:c8:dc:71:14:e8:6b:f3:1f:d7:90:f5:aa:
                    5c:6f:f8:5d:43:5f:fb:8e:a6:8e:b3:15:bb:1b:03:
                    3d:bb:45:cb:f9:af:31:c5:13:51:e2:ee:a9:fd:ed:
                    f1:da:79:6d:18:b7:ca:eb:71:01:f5:a3:b2:79:cd:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:B8:C0:67:67:27:0C:B1:B6:5A:74:F8:35:DD:63:A6:95:B8:6D
            X509v3 Authority Key Identifier:
                keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:00:1c:40:a0:1f:da:42:a5:83:3b:d4:82:9c:54:cb:6b:21:
         00:2b:78:fa:04:b7:bb:f0:e9:b1:3a:cd:79:09:5f:ba:8b:5c:
         3b:d8:56:40:f1:d5:f0:ba:94:f6:2d:0a:1d:c5:06:1d:9d:81:
         32:08:e6:35:27:8b:9a:5a:f1:59:9a:14:ae:a0:00:9f:b3:3f:
         1a:c5:1f:1f:59:57:a0:62:4c:fa:c9:bd:92:89:02:c1:51:aa:
         38:7f:13:b5:59:f5:94:b8:39:99:fb:58:5c:1e:1b:b6:05:38:
         27:50:ba:a4:82:e5:fc:7c:16:5a:9d:67:77:48:b3:65:07:9d:
         9a:0b:4f:58:37:34:26:e4:47:ad:06:ad:cc:5b:1b:e1:be:f0:
         48:28:55:a5:88:90:c1:74:10:c3:2c:3d:37:b2:12:f1:bc:82:
         1e:2b:01:05:d3:8b:96:f9:06:f4:3b:2f:01:7b:2b:ed:11:86:
         74:d6:0b:c4:0b:f9:0a:ef:19:d2:92:8d:75:d8:77:c3:1a:c3:
         b9:35:8b:93:12:8f:10:eb:bc:5b:42:1d:e7:64:b3:08:85:cf:
         92:10:6e:0b:8a:89:bd:a7:3c:81:85:7d:e0:cc:4b:a5:01:29:
         8f:18:38:58:95:e2:31:a1:33:95:bb:51:cc:45:0b:b1:a4:9e:
         80:06:3e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBpCyva9rjCDUIHG+SvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc0NTUxOTMyM2Q4YzJkOTNjMWIxMDdiZjg1ZjYxOTMz
YzcxY2EwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
Eyg2NzVjYjhjMDY3NjcyNzBjYjFiNjVhNzRmODM1ZGQ2M2E2OTViODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vAtphK6pcwdoLwDZFx142JOwyIz
RySh6MTLaYsbh45atoafpk9gjV6tCFbThHdYxQMs64PX0J/1XaL/J+cCbB0tASrr
iJmaHlAYQNt+fl/d++i7chESSPHpZHVQ2NHX49tmQ5EpP5ipdUnf+04ePE+PIo99
62BuaIUwxpAK+lUm3jX/xVwvvGQ0dck7QGv6pZYp0cYr0pgvc+5OYrU5LiEKNGCr
nxHOnaAWk63gAzGlg1tHP2jPswpAG8rHCtuE0RRFzvLI3HEU6GvzH9eQ9apcb/hd
Q1/7jqaOsxW7GwM9u0XL+a8xxRNR4u6p/e3x2nltGLfK63EB9aOyec0MLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdcuMBnZycMsbZadPg13WOmlbhtMB8GA1UdIwQY
MBaAFKpnRVGTI9jC2TwbEHv4X2GTPHHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hZjE4YzQtYzA0NC00NDg1LThlZjAt
ZDc4MTJhMzM4MTgzLzEvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hZjE4YzQtYzA0NC00NDg1LThlZjAtZDc4MTJhMzM4MTgz
LzEvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQAcQKAf
2kKlgzvUgpxUy2shACt4+gS3u/DpsTrNeQlfuotcO9hWQPHV8LqU9i0KHcUGHZ2B
MgjmNSeLmlrxWZoUrqAAn7M/GsUfH1lXoGJM+sm9kokCwVGqOH8TtVn1lLg5mftY
XB4btgU4J1C6pILl/HwWWp1nd0izZQedmgtPWDc0JuRHrQatzFsb4b7wSChVpYiQ
wXQQwyw9N7IS8byCHisBBdOLlvkG9DsvAXsr7RGGdNYLxAv5Cu8Z0pKNddh3wxrD
uTWLkxKPEOu8W0Id52SzCIXPkhBuC4qJvac8gYV94MxLpQEpjxg4WJXiMaEzlbtR
zEULsaSegAY+3w==
-----END CERTIFICATE-----