Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          cJYk4sDfBj9rrPV+dNVeetG8BPmRRX9QW2R54fI9Dis=
Subject key identifier:   FD:1B:16:96:F8:60:2C:3A:4A:3E:16:B0:16:B7:2B:52:49:1B:A9:3F
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       01962E9995EB134E93AB1377C1233642727B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          1507
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
                          2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
                          3: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
                          4: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
                          5: _PaUGjvJShI2nma6rn1q_5nZsbw.roa (hash: IISCWbKH8fVMYSEIH2kdkWijGfyVlaENW4tYYQwgOus=)
                          6: f7reVcrHhHE-i0os8pjDmr_KSH4.roa (hash: jXh5JkKzxulogW8DJqArisPnpXo5ZeSQOy/vsvzYL7E=)
                          7: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
                          8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: y05s+PoqxHPqM1u+m7hq3/Jpuq2WdhPqkE8/N/JZE0U=)
                          9: vJ-NNcH9s58i_6pVtY2137W58sA.roa (hash: gaXJVcSt6ugw0X061/2eBl5dxytqTi7AFjDEgazcu8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:eb:13:4e:93:ab:13:77:c1:23:36:42:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=fd1b1696f8602c3a4a3e16b016b72b52491ba93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:3f:b6:1f:50:02:88:3e:be:79:52:ac:bd:
                    61:f0:02:5c:17:60:d4:52:c5:50:3a:69:fb:1d:78:
                    ac:c2:3f:3a:f1:f0:09:83:84:66:cc:75:5b:7a:68:
                    19:4f:53:da:15:bc:da:1e:d1:f1:28:f6:79:f3:82:
                    20:79:c2:2a:c4:11:76:9e:78:04:29:db:18:a4:6b:
                    2f:60:d1:16:79:6c:ad:81:9a:1a:af:43:19:12:76:
                    64:1e:79:eb:2b:5d:ff:5f:22:41:cd:22:73:74:31:
                    e9:29:bf:bc:2c:b4:1c:47:5c:52:ab:57:81:a7:44:
                    6e:9e:44:b2:ca:1a:4b:42:93:b7:74:76:f6:bb:43:
                    2c:b5:f4:0a:16:b5:2b:87:68:c9:78:df:72:98:f8:
                    4d:28:3b:8b:46:29:54:ae:39:5f:4a:74:a1:9b:a0:
                    22:ca:5c:ce:4a:53:40:a4:6e:78:73:f2:fe:bb:4d:
                    8a:b4:f6:c4:e7:3e:65:ec:24:92:77:3a:35:53:64:
                    6a:36:b6:6c:4d:6c:52:c8:e8:aa:68:73:41:d1:a2:
                    9d:84:27:25:ff:a2:22:26:f8:79:61:a9:83:cb:b9:
                    c6:e8:f9:58:20:45:76:36:54:df:95:19:a1:c0:52:
                    e7:b6:c4:ed:a0:2c:d8:84:a5:19:8e:72:f8:8d:df:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1B:16:96:F8:60:2C:3A:4A:3E:16:B0:16:B7:2B:52:49:1B:A9:3F
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:04:12:d7:38:cf:c6:5c:58:78:ea:9d:da:51:cd:31:77:37:
         5a:57:8f:e3:7d:24:3e:95:f3:a3:9c:f5:86:e7:ff:f0:d1:f3:
         5b:47:ff:fe:31:5f:90:a1:b9:0d:51:b9:13:96:9c:a6:53:cf:
         6c:13:05:8e:81:df:47:d8:da:2d:b5:07:6c:ac:bb:32:d1:31:
         26:2c:f1:db:9d:1b:8a:cf:d2:12:77:1e:fb:3b:76:3c:6a:41:
         3f:d0:fe:6b:2c:24:c2:09:4b:05:65:72:a7:7c:de:4c:5c:b4:
         37:43:50:17:1a:aa:f7:10:6f:39:e8:12:5a:cf:9e:a0:34:f7:
         86:c7:2d:46:f4:6b:39:a3:45:25:f5:70:77:28:37:e2:1d:da:
         32:f1:44:31:92:15:55:58:41:12:40:be:1d:59:45:b1:a9:36:
         ca:16:da:72:70:56:5d:7a:58:58:26:cc:78:e5:1c:e2:73:fb:
         5b:da:19:bf:63:0c:b8:fd:68:67:39:a8:5e:0b:fa:25:84:9a:
         41:a4:a5:15:b1:78:df:d2:38:e7:0a:f3:f2:28:c0:3b:0b:86:
         d4:74:81:bf:34:a8:63:ed:ac:ef:11:b5:b0:8b:75:b1:22:3e:
         07:3b:b6:61:5e:3c:11:31:81:61:f9:ed:96:83:2f:ae:35:cd:
         75:44:0f:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZXrE06TqxN3wSM2QnJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl
NzYxZmIwHhcNMjUwNDEzMTAwMjE5WhcNMjUwNDE0MTAwMjE5WjAzMTEwLwYDVQQD
EyhmZDFiMTY5NmY4NjAyYzNhNGEzZTE2YjAxNmI3MmI1MjQ5MWJhOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR4/th9QAog+vnlSrL1h8AJcF2DU
UsVQOmn7HXiswj868fAJg4RmzHVbemgZT1PaFbzaHtHxKPZ584IgecIqxBF2nngE
KdsYpGsvYNEWeWytgZoar0MZEnZkHnnrK13/XyJBzSJzdDHpKb+8LLQcR1xSq1eB
p0RunkSyyhpLQpO3dHb2u0MstfQKFrUrh2jJeN9ymPhNKDuLRilUrjlfSnShm6Ai
ylzOSlNApG54c/L+u02KtPbE5z5l7CSSdzo1U2RqNrZsTWxSyOiqaHNB0aKdhCcl
/6IiJvh5YamDy7nG6PlYIEV2NlTflRmhwFLntsTtoCzYhKUZjnL4jd/rKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0bFpb4YCw6Sj4WsBa3K1JJG6k/MB8GA1UdIwQY
MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt
NmZkOTc4OTIwNWJhLzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh
LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAQS1zjP
xlxYeOqd2lHNMXc3WleP430kPpXzo5z1huf/8NHzW0f//jFfkKG5DVG5E5acplPP
bBMFjoHfR9jaLbUHbKy7MtExJizx250bis/SEnce+zt2PGpBP9D+aywkwglLBWVy
p3zeTFy0N0NQFxqq9xBvOegSWs+eoDT3hsctRvRrOaNFJfVwdyg34h3aMvFEMZIV
VVhBEkC+HVlFsak2yhbacnBWXXpYWCbMeOUc4nP7W9oZv2MMuP1oZzmoXgv6JYSa
QaSlFbF439I45wrz8ijAOwuG1HSBvzSoY+2s7xG1sIt1sSI+Bzu2YV48ETGBYfnt
loMvrjXNdUQPXQ==
-----END CERTIFICATE-----