Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File:                     q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier:          1Oqap+y3+oK/68ICaJIboJhDmSEpOet+8rCoLZPbkAk=
Subject key identifier:   F0:C6:9E:ED:B9:A4:AB:BF:0C:3A:69:57:91:CE:2B:6A:37:59:1F:84
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer:       /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial:       01962F745B5AC0A4C93647A166EF73430F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
                          2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: Qg+fqSeG0WcdJCwHTJF0FGtG/1jNgrG+FTBa+2QiLRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:5a:c0:a4:c9:36:47:a1:66:ef:73:43:0f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=f0c69eedb9a4abbf0c3a695791ce2b6a37591f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:62:84:af:fb:5b:d8:4b:0b:24:95:93:e4:
                    40:bb:87:6c:17:14:04:3a:45:72:c5:29:d9:26:de:
                    4e:15:4c:be:49:5f:5a:7e:11:62:24:91:51:9c:95:
                    09:87:31:41:97:99:0c:1a:05:ef:44:48:91:81:ba:
                    e5:93:85:0e:10:09:7a:be:4c:52:f2:31:f3:4f:9c:
                    43:6b:91:3c:72:12:e2:37:67:25:7f:e4:ce:91:d4:
                    75:59:02:ae:76:6d:ef:b6:a6:de:1d:df:97:fd:a0:
                    e8:9c:a7:c6:f3:3f:56:8d:0d:82:81:11:51:d3:c0:
                    46:59:6b:39:29:00:3a:8f:f4:22:38:e5:3c:c6:9f:
                    1f:ce:db:e0:d0:e2:b6:3b:21:66:06:4f:ff:12:ba:
                    f5:40:34:d7:aa:00:0f:82:28:97:a4:a6:c1:a6:52:
                    ed:d5:58:3d:27:6e:29:b3:e3:48:cf:74:d9:de:74:
                    1c:59:90:0c:74:a3:e7:8e:3f:d0:d3:f7:a1:f4:e5:
                    9f:b5:8e:08:3c:c6:a2:6e:70:bb:cf:d3:75:83:bf:
                    25:79:a7:65:fe:e8:2a:b0:91:5c:69:85:ff:8b:73:
                    e9:1c:36:5d:db:aa:15:cf:a6:80:f7:7d:7e:48:6d:
                    ab:e5:b9:dd:46:94:e0:69:2c:39:5c:fd:4d:91:65:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C6:9E:ED:B9:A4:AB:BF:0C:3A:69:57:91:CE:2B:6A:37:59:1F:84
            X509v3 Authority Key Identifier:
                keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d4:55:85:83:bd:7a:71:8e:de:9b:59:89:4c:2f:76:e2:49:
         53:6c:a4:93:48:55:1a:cd:80:76:a1:d4:d9:7c:ea:e1:2d:3f:
         7e:f9:09:fa:c3:18:6d:4e:1f:7d:88:a9:cb:3c:cb:91:86:0b:
         04:87:74:d6:2d:6c:e3:17:5c:c9:ac:e4:c2:05:c4:b3:1b:0d:
         67:fc:17:4e:1b:b6:07:4a:07:86:88:3c:c4:97:5a:6c:8d:a5:
         87:28:57:14:a4:76:b4:4a:5b:00:df:b7:6f:69:62:13:75:2a:
         25:5f:0b:09:d5:df:60:fa:12:54:24:fd:e6:e2:73:e2:48:1c:
         2f:41:4f:fc:ac:0a:0a:23:f3:b8:3e:dc:d1:af:5b:46:a2:8f:
         30:7c:25:17:e3:cc:92:4f:24:1b:bb:e7:37:65:d6:11:2d:e6:
         eb:76:24:92:84:dc:6a:4e:09:cf:93:ec:f6:cf:d4:9d:68:9d:
         13:77:bd:72:46:c1:1c:28:32:ad:a6:0e:7a:85:e7:a4:9d:f5:
         9e:93:85:55:9b:a9:ce:75:15:53:15:59:f6:fb:12:96:71:b7:
         48:39:26:c4:68:18:c1:88:9c:19:28:ab:e2:5d:b3:7e:0c:42:
         0a:15:e6:31:50:c6:9a:2d:a8:de:0a:35:fc:b1:5e:58:82:ce:
         5a:2c:1e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFtawKTJNkehZu9zQw9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNDY2ODYwMDhhOGMxMDFlODRlYTg3ODMxOGFlNThlYjcx
Y2VjODIwHhcNMjUwNDEzMTQwMTE2WhcNMjUwNDE0MTQwMTE2WjAzMTEwLwYDVQQD
EyhmMGM2OWVlZGI5YTRhYmJmMGMzYTY5NTc5MWNlMmI2YTM3NTkxZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaxihK/7W9hLCySVk+RAu4dsFxQE
OkVyxSnZJt5OFUy+SV9afhFiJJFRnJUJhzFBl5kMGgXvREiRgbrlk4UOEAl6vkxS
8jHzT5xDa5E8chLiN2clf+TOkdR1WQKudm3vtqbeHd+X/aDonKfG8z9WjQ2CgRFR
08BGWWs5KQA6j/QiOOU8xp8fztvg0OK2OyFmBk//Err1QDTXqgAPgiiXpKbBplLt
1Vg9J24ps+NIz3TZ3nQcWZAMdKPnjj/Q0/eh9OWftY4IPMaibnC7z9N1g78leadl
/ugqsJFcaYX/i3PpHDZd26oVz6aA931+SG2r5bndRpTgaSw5XP1NkWXMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDGnu25pKu/DDppV5HOK2o3WR+EMB8GA1UdIwQY
MBaAFKtGaGAIqMEB6E6oeDGK5Y63HOyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmIt
ZjMzNjNjYmQ0MjRjLzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmItZjMzNjNjYmQ0MjRj
LzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxNRVhYO9
enGO3ptZiUwvduJJU2ykk0hVGs2AdqHU2Xzq4S0/fvkJ+sMYbU4ffYipyzzLkYYL
BId01i1s4xdcyazkwgXEsxsNZ/wXThu2B0oHhog8xJdabI2lhyhXFKR2tEpbAN+3
b2liE3UqJV8LCdXfYPoSVCT95uJz4kgcL0FP/KwKCiPzuD7c0a9bRqKPMHwlF+PM
kk8kG7vnN2XWES3m63YkkoTcak4Jz5Ps9s/UnWidE3e9ckbBHCgyraYOeoXnpJ31
npOFVZupznUVUxVZ9vsSlnG3SDkmxGgYwYicGSir4l2zfgxCChXmMVDGmi2o3go1
/LFeWILOWiwezw==
-----END CERTIFICATE-----