Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
File:                     QiW1cPRt5cbosrZO0JCtE4XatzE.mft (raw, json)
Hash identifier:          T3cvQScAscRMCX0V9+7bX7o1xupO7ie7QUO5SBtfis4=
Subject key identifier:   DB:F7:93:5C:63:FA:81:E6:7E:59:C6:4A:C3:7C:A1:7D:CA:7C:20:40
Authority key identifier: 42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
Certificate issuer:       /CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Certificate serial:       01962F74A86136806CC08EA6FA0E50076E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: Ad__4Mw9qH40aKjCCd6U7wn1LE8.roa (hash: XmUspE3wSTnFZCF/0+RPTjtSL/Xtm1GMKSxL+nI/8po=)
                          2: QiW1cPRt5cbosrZO0JCtE4XatzE.crl (hash: 6jhmh/D1SPP5f5b44fPX53GUI+Hf+HFOFWONVg3PlP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a8:61:36:80:6c:c0:8e:a6:fa:0e:50:07:6e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=dbf7935c63fa81e67e59c64ac37ca17dca7c2040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:cc:e7:27:5b:84:4d:fb:2f:00:3f:e3:c4:
                    18:3b:5f:4e:b4:e9:18:a0:48:39:ad:d0:75:de:7d:
                    59:fc:b7:85:77:b2:08:26:7f:11:a1:15:19:9a:59:
                    81:87:f1:c6:98:92:85:6e:0d:6b:a9:26:23:f0:2b:
                    7c:8d:35:be:8e:3c:fa:7e:09:26:b1:9a:db:e0:34:
                    b3:60:21:42:3b:2d:aa:96:ce:1e:a6:09:d7:03:84:
                    3e:2f:24:ef:21:f3:94:2b:6f:e7:bf:98:de:c6:4d:
                    bf:c3:25:1a:8a:52:28:bf:a1:8e:82:c2:e2:dd:19:
                    17:49:5d:45:e4:6c:bd:a9:73:1f:9f:64:ad:80:58:
                    7c:93:24:40:cb:7f:14:62:84:aa:32:4a:3d:f7:f6:
                    1e:d0:06:0d:1a:0f:ba:f5:4c:22:95:58:0d:ae:f9:
                    96:2f:8e:57:88:0c:4e:67:b1:f0:0c:f2:5b:b7:9e:
                    eb:4c:c5:07:27:76:ba:ed:2d:0e:de:62:ee:24:ef:
                    ad:8e:a8:93:56:87:67:1e:e5:9c:04:35:f4:1d:07:
                    92:5d:6a:19:11:ad:d6:a9:bc:64:bd:a8:74:bf:d1:
                    37:6e:ad:6c:d1:3d:ee:64:2f:15:cb:05:a8:2b:3d:
                    2e:2f:bc:fd:e0:1b:b6:5a:d7:d5:bc:11:a7:db:79:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F7:93:5C:63:FA:81:E6:7E:59:C6:4A:C3:7C:A1:7D:CA:7C:20:40
            X509v3 Authority Key Identifier:
                keyid:42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:09:c0:5a:54:67:30:09:7d:74:38:f1:e0:b4:d4:54:be:
         14:4b:3f:e4:9b:81:79:02:e8:a0:fb:23:2f:d1:d8:06:56:2a:
         38:6a:cb:72:3e:65:ff:b7:3b:ee:7f:b4:2b:dd:e4:dc:c9:b7:
         19:a2:02:0d:0c:a2:61:5d:d8:51:f5:4f:69:7a:73:5a:39:71:
         72:5e:39:4c:34:5f:06:b9:7b:7c:25:64:52:fe:b7:63:bb:77:
         89:14:2b:bf:c8:ac:e7:e1:2d:09:4f:ee:e0:eb:85:78:de:7f:
         17:86:80:dd:08:05:de:41:bf:96:16:fb:60:56:de:0d:25:95:
         c0:9f:49:aa:08:3a:c7:19:60:26:b2:fa:a4:c9:69:42:74:6c:
         9c:67:c7:b5:3e:c0:48:e5:18:7f:92:d3:ad:33:c4:a9:2f:52:
         15:40:24:1b:27:5a:e6:c0:2d:9d:b2:88:a1:93:c3:1b:4a:27:
         e6:bc:fa:16:9e:b8:19:d2:b9:0a:fd:ff:cc:f1:d2:08:90:a7:
         9d:b4:45:04:b1:03:59:32:7f:8a:ea:18:0a:8c:a2:a5:2a:af:
         06:68:1e:bb:31:88:4f:df:35:5b:f6:39:d6:12:0a:c1:f3:3b:
         de:c1:28:a8:00:92:dc:4d:78:2c:c6:b7:3c:c4:b3:12:da:61:
         48:54:83:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKhhNoBswI6m+g5QB24iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjViNTcwZjQ2ZGU1YzZlOGIyYjY0ZWQwOTBhZDEzODVk
YWI3MzEwHhcNMjUwNDEzMTQwMTM2WhcNMjUwNDE0MTQwMTM2WjAzMTEwLwYDVQQD
EyhkYmY3OTM1YzYzZmE4MWU2N2U1OWM2NGFjMzdjYTE3ZGNhN2MyMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoELM5ydbhE37LwA/48QYO19OtOkY
oEg5rdB13n1Z/LeFd7IIJn8RoRUZmlmBh/HGmJKFbg1rqSYj8Ct8jTW+jjz6fgkm
sZrb4DSzYCFCOy2qls4epgnXA4Q+LyTvIfOUK2/nv5jexk2/wyUailIov6GOgsLi
3RkXSV1F5Gy9qXMfn2StgFh8kyRAy38UYoSqMko99/Ye0AYNGg+69UwilVgNrvmW
L45XiAxOZ7HwDPJbt57rTMUHJ3a67S0O3mLuJO+tjqiTVodnHuWcBDX0HQeSXWoZ
Ea3Wqbxkvah0v9E3bq1s0T3uZC8VywWoKz0uL7z94Bu2WtfVvBGn23lH5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNv3k1xj+oHmflnGSsN8oX3KfCBAMB8GA1UdIwQY
MBaAFEIltXD0beXG6LK2TtCQrROF2rcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGIt
MzkwYjg1Mzk0YmViLzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGItMzkwYjg1Mzk0YmVi
LzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2kJwFpU
ZzAJfXQ48eC01FS+FEs/5JuBeQLooPsjL9HYBlYqOGrLcj5l/7c77n+0K93k3Mm3
GaICDQyiYV3YUfVPaXpzWjlxcl45TDRfBrl7fCVkUv63Y7t3iRQrv8is5+EtCU/u
4OuFeN5/F4aA3QgF3kG/lhb7YFbeDSWVwJ9Jqgg6xxlgJrL6pMlpQnRsnGfHtT7A
SOUYf5LTrTPEqS9SFUAkGyda5sAtnbKIoZPDG0on5rz6Fp64GdK5Cv3/zPHSCJCn
nbRFBLEDWTJ/iuoYCoyipSqvBmgeuzGIT981W/Y51hIKwfM73sEoqACS3E14LMa3
PMSzEtphSFSDSQ==
-----END CERTIFICATE-----