Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File:                     QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier:          T2mT4JPT/ClJAJch7RaZNPOmjSviE5KvU8SCBEFzlwg=
Subject key identifier:   A6:3C:E0:45:43:D8:CE:98:10:19:DE:93:7C:4E:27:2C:D1:2D:40:BA
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer:       /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial:       01962FAB7A86F06C727F152A0CC02B253245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number:          0DEE
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
                          2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: sUZTzUF4Hx6saIUACrdaQ3dnM1AMz2JbUdRwscC7T4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7a:86:f0:6c:72:7f:15:2a:0c:c0:2b:25:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=a63ce04543d8ce981019de937c4e272cd12d40ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:c5:c3:2d:10:7d:f2:3b:cf:84:81:3b:59:
                    b7:ee:34:7a:4b:09:e8:2c:f7:92:ef:38:6d:1c:60:
                    6a:cb:48:ac:e2:b1:bd:09:28:9e:e8:02:dc:05:b6:
                    40:ed:b9:aa:24:2f:20:47:de:ac:4f:0f:8c:ee:e4:
                    74:80:bd:f9:56:05:24:bb:8b:3a:77:01:3a:ea:65:
                    91:8d:1a:16:26:b5:f3:e5:20:a0:75:7c:5f:38:85:
                    7e:58:c1:c8:fa:52:ae:5b:d8:98:79:a6:fc:f0:b7:
                    c8:22:2d:c4:db:b2:e8:82:98:ee:ad:d9:4a:78:bd:
                    ff:8d:22:04:87:c2:d7:d3:93:a7:31:94:29:3e:5a:
                    a7:61:8b:aa:b8:b2:43:db:53:1e:a2:1b:34:9f:48:
                    e5:ac:fa:a9:c0:c9:b7:d5:92:aa:66:42:74:b5:0a:
                    20:48:65:ef:de:a0:94:b9:d9:fc:2e:c0:07:02:6a:
                    2a:d9:29:69:8b:21:0b:a9:3f:b6:c7:76:cc:d9:ff:
                    e3:27:ab:96:7e:aa:34:75:53:e1:df:ae:12:e0:a7:
                    cc:7e:af:44:15:66:84:6a:1a:74:ff:08:c1:24:84:
                    8f:6b:30:e9:8e:44:12:cc:af:09:41:b3:b1:8f:e7:
                    5a:4c:26:58:4e:77:93:49:d1:0f:df:4a:5b:0e:39:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3C:E0:45:43:D8:CE:98:10:19:DE:93:7C:4E:27:2C:D1:2D:40:BA
            X509v3 Authority Key Identifier:
                keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:f3:93:a9:2a:a3:47:ae:59:64:4d:60:14:ed:35:9b:7d:
         fe:bb:d6:8e:db:ce:64:54:0d:08:4f:bf:e5:ed:3f:cb:ac:da:
         d1:0f:cd:d4:6d:1d:c1:ff:09:72:c0:b9:3b:17:87:67:b6:62:
         84:a7:39:93:01:af:81:60:3e:9d:90:78:83:69:19:43:07:8d:
         31:4a:9a:78:8f:ec:f9:09:49:42:57:25:fa:fe:79:9d:6b:cf:
         ff:f7:d5:64:0a:5f:ab:05:a2:10:be:38:f4:39:60:8a:3a:4b:
         83:21:f5:fc:3f:07:34:92:57:57:23:ca:3a:8e:d8:ba:e3:b7:
         03:3b:e6:bb:8c:73:01:08:23:74:1e:2b:4d:a8:87:ee:d9:b8:
         99:c0:91:bb:4d:f3:a5:8e:35:30:85:19:d9:af:ad:ca:bc:b1:
         38:97:9f:6a:25:94:47:bc:0a:bc:a1:3e:e3:df:d5:48:94:4b:
         27:82:88:dd:8c:34:46:8e:24:a0:26:14:e7:f7:a4:bb:2e:26:
         5a:28:cf:fd:a6:2f:e5:ba:7a:58:4f:be:36:89:5b:54:79:4d:
         47:46:f5:45:bf:52:86:2d:50:7f:dd:d4:de:9a:6b:bd:a6:f5:
         e0:b8:a7:be:7f:f8:c9:fb:d2:18:ff:12:4c:98:01:da:93:2f:
         c7:38:d8:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3qG8GxyfxUqDMArJTJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NjNTUyYWI1N2RiYWZhNDYyMWZiNWRjNTkzYTQ1NjA3
Y2ZiMGEwHhcNMjUwNDEzMTUwMTI5WhcNMjUwNDE0MTUwMTI5WjAzMTEwLwYDVQQD
EyhhNjNjZTA0NTQzZDhjZTk4MTAxOWRlOTM3YzRlMjcyY2QxMmQ0MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUfFwy0QffI7z4SBO1m37jR6Swno
LPeS7zhtHGBqy0is4rG9CSie6ALcBbZA7bmqJC8gR96sTw+M7uR0gL35VgUku4s6
dwE66mWRjRoWJrXz5SCgdXxfOIV+WMHI+lKuW9iYeab88LfIIi3E27LogpjurdlK
eL3/jSIEh8LX05OnMZQpPlqnYYuquLJD21Meohs0n0jlrPqpwMm31ZKqZkJ0tQog
SGXv3qCUudn8LsAHAmoq2SlpiyELqT+2x3bM2f/jJ6uWfqo0dVPh364S4KfMfq9E
FWaEahp0/wjBJISPazDpjkQSzK8JQbOxj+daTCZYTneTSdEP30pbDjnQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY84EVD2M6YEBnek3xOJyzRLUC6MB8GA1UdIwQY
MBaAFEJ8xVKrV9uvpGIftdxZOkVgfPsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDct
ODVhNWI0Y2ZjODRmLzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDctODVhNWI0Y2ZjODRm
LzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNXzk6kq
o0euWWRNYBTtNZt9/rvWjtvOZFQNCE+/5e0/y6za0Q/N1G0dwf8JcsC5OxeHZ7Zi
hKc5kwGvgWA+nZB4g2kZQweNMUqaeI/s+QlJQlcl+v55nWvP//fVZApfqwWiEL44
9DlgijpLgyH1/D8HNJJXVyPKOo7YuuO3Azvmu4xzAQgjdB4rTaiH7tm4mcCRu03z
pY41MIUZ2a+tyryxOJefaiWUR7wKvKE+49/VSJRLJ4KI3Yw0Ro4koCYU5/ekuy4m
WijP/aYv5bp6WE++NolbVHlNR0b1Rb9Shi1Qf93U3pprvab14Linvn/4yfvSGP8S
TJgB2pMvxzjYBg==
-----END CERTIFICATE-----