Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File:                     0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier:          Op5q2ySrwIiS54PsZO4BU4S6kXLU/uLzps8kjjLTano=
Subject key identifier:   B2:7C:7A:39:D1:26:F8:17:AA:7B:1D:6F:10:6E:34:0A:E6:38:D8:5C
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer:       /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial:       01962FAB28D73C20EACC9CD26B0A11B1FB09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number:          1195
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: 8YAFnaHo8Al8ch4pfr2Zas8F7WpBsQJpw81fn8oDdC4=)
                          2: pTXcU1-027t2C2Vu9gFY335XMJc.roa (hash: VazQFR0+HiS2IaElmJ/i9QSFb0To3uFvpZ1ELlNt0rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:28:d7:3c:20:ea:cc:9c:d2:6b:0a:11:b1:fb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=b27c7a39d126f817aa7b1d6f106e340ae638d85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:7d:99:d0:b1:39:d2:20:53:bc:20:96:50:
                    7b:d6:d5:53:de:2d:f9:1b:ea:6d:7d:73:41:2d:bb:
                    c4:de:fb:c1:a2:65:7b:3a:09:ac:92:5c:2a:60:13:
                    65:08:b9:10:e9:ac:2f:86:66:e3:93:46:fc:8a:cd:
                    96:34:d5:7f:7a:6d:3f:38:d8:15:dc:5f:7a:53:28:
                    7a:53:60:06:aa:80:4c:84:ac:63:31:b5:55:fd:7e:
                    96:15:01:0d:10:86:b1:1d:da:28:71:76:a0:0d:97:
                    bf:a6:69:73:6a:68:23:a6:b0:15:4e:d5:34:2a:23:
                    6d:22:9d:17:33:b8:a3:b0:10:1e:38:e7:7c:85:53:
                    1f:0b:bb:b3:81:91:31:9e:66:2d:40:ff:cd:a3:e5:
                    a8:1d:ba:ff:46:76:da:95:a0:12:db:a3:42:e0:2b:
                    a5:d9:5d:32:78:1b:fa:29:4f:5c:38:a1:0e:a2:23:
                    23:5f:ee:e9:87:1d:92:bc:f3:17:ee:20:ef:d5:bf:
                    3b:c9:ec:d2:06:ea:28:41:57:d2:dd:c4:c0:00:73:
                    d6:d5:cb:3e:90:1a:f1:c1:bf:cd:4a:ca:fb:eb:ae:
                    f2:aa:d1:96:83:24:f8:5e:4b:61:17:13:b3:fa:3f:
                    ef:06:78:63:29:50:0b:dd:cf:45:fc:01:cb:6b:60:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:7A:39:D1:26:F8:17:AA:7B:1D:6F:10:6E:34:0A:E6:38:D8:5C
            X509v3 Authority Key Identifier:
                keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8a:83:8a:ca:02:cb:fd:53:59:b9:20:dd:78:77:a4:83:8f:
         30:29:ca:f8:f1:57:3d:bb:cf:b2:09:18:21:ca:93:18:68:03:
         5b:58:e5:7c:a7:0b:a4:06:68:32:a8:00:02:44:f4:4a:e7:d9:
         3a:60:69:e3:11:6a:ce:e8:53:83:b4:8a:82:11:32:b8:b3:a2:
         95:da:a8:39:65:fb:48:f6:c9:da:5d:f0:c9:84:6b:e2:ae:62:
         cf:aa:0b:1a:f5:14:a0:0b:41:e6:f3:93:51:ba:5b:3f:5c:2a:
         c8:f2:75:4e:86:fd:3a:f4:5c:c7:4c:46:89:46:10:c7:a1:f5:
         b1:07:ec:db:fc:9d:f6:75:1c:64:8f:e9:1f:b5:fa:45:24:d6:
         8a:8a:49:ff:c4:c4:e6:31:44:ff:96:89:38:d0:e5:ba:d6:18:
         11:83:b9:fc:99:35:58:32:ee:99:8c:94:37:f4:b5:13:d6:0f:
         97:0e:83:c4:e9:36:1e:c3:4c:cd:cc:dd:88:66:5e:d1:24:e7:
         6f:db:a1:c8:f5:99:6f:fe:49:5e:68:26:b4:a0:e4:6d:ca:4d:
         2f:57:ff:4e:39:9f:03:79:b5:d5:a6:35:52:08:91:e6:81:8f:
         68:13:92:7b:ed:38:b9:a6:de:0e:db:9a:c8:04:c8:bf:b6:14:
         94:7a:1b:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyjXPCDqzJzSawoRsfsJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMGUzOGIwYjdhMzNlZjNhMTZlMTU0MzM0MDI5ODdkNmQ2
NzhkYTEwHhcNMjUwNDEzMTUwMTA4WhcNMjUwNDE0MTUwMTA4WjAzMTEwLwYDVQQD
EyhiMjdjN2EzOWQxMjZmODE3YWE3YjFkNmYxMDZlMzQwYWU2MzhkODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw999mdCxOdIgU7wgllB71tVT3i35
G+ptfXNBLbvE3vvBomV7OgmsklwqYBNlCLkQ6awvhmbjk0b8is2WNNV/em0/ONgV
3F96Uyh6U2AGqoBMhKxjMbVV/X6WFQENEIaxHdoocXagDZe/pmlzamgjprAVTtU0
KiNtIp0XM7ijsBAeOOd8hVMfC7uzgZExnmYtQP/No+WoHbr/RnbalaAS26NC4Cul
2V0yeBv6KU9cOKEOoiMjX+7phx2SvPMX7iDv1b87yezSBuooQVfS3cTAAHPW1cs+
kBrxwb/NSsr7667yqtGWgyT4XkthFxOz+j/vBnhjKVAL3c9F/AHLa2Da6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ8ejnRJvgXqnsdbxBuNArmONhcMB8GA1UdIwQY
MBaAFNEOOLC3oz7zoW4VQzQCmH1tZ42hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFE0NHNMZWpQdk9oYmhWRE5BS1lmVzFuamFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zZmEwOWEtZTg3NC00ZjM0LWJmNDUt
MmMwZWRhNzA2NjZhLzEvMFE0NHNMZWpQdk9oYmhWRE5BS1lmVzFuamFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8zZmEwOWEtZTg3NC00ZjM0LWJmNDUtMmMwZWRhNzA2NjZh
LzEvMFE0NHNMZWpQdk9oYmhWRE5BS1lmVzFuamFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4qDisoC
y/1TWbkg3Xh3pIOPMCnK+PFXPbvPsgkYIcqTGGgDW1jlfKcLpAZoMqgAAkT0SufZ
OmBp4xFqzuhTg7SKghEyuLOildqoOWX7SPbJ2l3wyYRr4q5iz6oLGvUUoAtB5vOT
UbpbP1wqyPJ1Tob9OvRcx0xGiUYQx6H1sQfs2/yd9nUcZI/pH7X6RSTWiopJ/8TE
5jFE/5aJONDlutYYEYO5/Jk1WDLumYyUN/S1E9YPlw6DxOk2HsNMzczdiGZe0STn
b9uhyPWZb/5JXmgmtKDkbcpNL1f/TjmfA3m11aY1UgiR5oGPaBOSe+04uabeDtua
yATIv7YUlHobQA==
-----END CERTIFICATE-----