Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File:                     QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier:          910WOgQbS0dSG0W3lTKG4TG9wvUFOTMXG9yUFp4OgfA=
Subject key identifier:   22:D4:30:73:32:A9:3C:AF:C9:D2:8F:1E:AF:80:AD:6E:57:DF:5E:EE
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer:       /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial:       01962F06B7D049DE4E71AC483A61B4F57787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: EE4aKwpL7BHvDdwQRgd6myh+UB9chqjjAOm90sWKr1w=)
                          2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:d0:49:de:4e:71:ac:48:3a:61:b4:f5:77:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=22d4307332a93cafc9d28f1eaf80ad6e57df5eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:6e:a1:aa:3a:c4:8a:b4:f9:90:d3:31:53:
                    b6:99:6b:70:9a:6f:f2:0d:40:d1:41:a5:72:f7:3d:
                    3c:cd:7e:11:a5:7d:9d:6c:1b:81:f2:54:3c:ea:5c:
                    f3:ec:3b:ea:1f:c1:78:02:3e:04:06:b9:c6:ac:d3:
                    38:90:4c:8a:7e:d9:8d:c2:fa:d1:f7:68:94:2e:d7:
                    04:37:e5:fc:8c:d3:67:c2:43:f0:6e:be:f7:c8:c3:
                    3d:c4:27:b8:f7:22:8f:1e:1e:0b:03:b9:48:03:d2:
                    46:bc:b3:6f:cf:2a:9f:07:7a:02:9c:65:85:85:d6:
                    f9:90:6d:92:14:7a:01:b3:20:59:08:34:c3:a6:ca:
                    6f:38:8f:86:10:9f:c3:10:0d:70:c2:fc:2f:44:91:
                    91:39:21:f1:aa:a2:c0:93:42:b9:bf:3b:6b:00:01:
                    64:d6:b9:4d:15:79:7e:4c:3b:34:85:05:e3:b1:9f:
                    1c:92:0d:05:dd:e7:93:2e:3d:ac:0b:6f:b4:1f:4f:
                    0b:ac:a7:f4:bb:2a:42:68:5f:0e:12:88:d3:05:5c:
                    5c:cd:0e:d5:14:80:fd:85:14:b7:0d:29:43:23:c8:
                    c3:f8:de:1d:05:85:84:22:1b:04:5b:7a:1d:c7:54:
                    12:f6:a3:61:69:46:8e:25:ad:2a:7c:77:99:a1:70:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:30:73:32:A9:3C:AF:C9:D2:8F:1E:AF:80:AD:6E:57:DF:5E:EE
            X509v3 Authority Key Identifier:
                keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:b1:72:95:7d:e7:6c:c0:58:9f:e1:41:df:cd:25:3e:a3:
         dc:6c:fa:ce:86:19:53:52:28:63:f0:30:59:c9:ce:e2:76:5d:
         95:74:e4:e5:72:0e:fd:cf:79:07:d0:f7:f9:cf:a7:be:82:ea:
         80:32:3c:5b:af:ee:39:38:1d:af:95:11:6d:93:f8:8e:1e:8c:
         31:19:2b:6a:ca:24:ea:4b:90:96:de:43:17:27:6c:13:67:c0:
         bf:1d:22:4a:db:97:d7:c1:c8:39:dc:85:92:e3:18:21:fe:cf:
         fa:66:c8:86:9b:91:38:90:37:25:5a:14:6d:10:b0:27:3a:58:
         a0:97:c1:7f:8f:7f:5b:6e:b2:aa:dd:cc:1b:32:a7:80:7a:3a:
         cf:a0:ff:47:30:e6:44:a1:3e:85:13:9c:28:e2:95:aa:a4:b1:
         58:e6:b0:e1:31:f7:31:0a:0c:5b:7d:ff:df:95:64:4e:27:5a:
         0b:54:dd:b7:70:4c:6d:32:38:4e:e4:3d:d2:cf:f9:d2:aa:3f:
         31:61:50:b0:eb:62:67:46:0c:8b:36:14:27:8f:18:43:dd:5b:
         c6:d3:11:ea:eb:13:ac:c4:8a:e1:3a:63:1d:c2:70:63:bd:ff:
         bb:28:bd:fc:b4:33:5b:8a:dd:75:1f:af:52:06:38:95:19:f3:
         97:28:94:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrfQSd5OcaxIOmG09XeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTFmOTZmOTFjNGEwOWY5NzljNWIxODVjMjZjYjAwYWUw
Zjg2YmYwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
EygyMmQ0MzA3MzMyYTkzY2FmYzlkMjhmMWVhZjgwYWQ2ZTU3ZGY1ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHluoao6xIq0+ZDTMVO2mWtwmm/y
DUDRQaVy9z08zX4RpX2dbBuB8lQ86lzz7DvqH8F4Aj4EBrnGrNM4kEyKftmNwvrR
92iULtcEN+X8jNNnwkPwbr73yMM9xCe49yKPHh4LA7lIA9JGvLNvzyqfB3oCnGWF
hdb5kG2SFHoBsyBZCDTDpspvOI+GEJ/DEA1wwvwvRJGROSHxqqLAk0K5vztrAAFk
1rlNFXl+TDs0hQXjsZ8ckg0F3eeTLj2sC2+0H08LrKf0uypCaF8OEojTBVxczQ7V
FID9hRS3DSlDI8jD+N4dBYWEIhsEW3odx1QS9qNhaUaOJa0qfHeZoXDpCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLUMHMyqTyvydKPHq+ArW5X317uMB8GA1UdIwQY
MBaAFEKh+W+RxKCfl5xbGFwmywCuD4a/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUt
MWUwZWQ5ZjM0NGZjLzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUtMWUwZWQ5ZjM0NGZj
LzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG2xcpV9
52zAWJ/hQd/NJT6j3Gz6zoYZU1IoY/AwWcnO4nZdlXTk5XIO/c95B9D3+c+nvoLq
gDI8W6/uOTgdr5URbZP4jh6MMRkrasok6kuQlt5DFydsE2fAvx0iStuX18HIOdyF
kuMYIf7P+mbIhpuROJA3JVoUbRCwJzpYoJfBf49/W26yqt3MGzKngHo6z6D/RzDm
RKE+hROcKOKVqqSxWOaw4TH3MQoMW33/35VkTidaC1Tdt3BMbTI4TuQ90s/50qo/
MWFQsOtiZ0YMizYUJ48YQ91bxtMR6usTrMSK4TpjHcJwY73/uyi9/LQzW4rddR+v
UgY4lRnzlyiU1A==
-----END CERTIFICATE-----