Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File:                     qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier:          7BIQtyEwJB9kgM+1lljHpwV3GaYGI4HnuZg5NZp0Toc=
Subject key identifier:   DD:31:BB:3C:55:C0:55:23:B1:E0:7B:B5:75:D0:5B:54:26:8E:0D:F4
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer:       /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial:       01962F3DA37B4BBB067806FFC9C87C5D2E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number:          13DF
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
                          2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: jVvj+ojzQbKla+dD4fpOcWmQhalIR4dnbCr7kZ/e84M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:7b:4b:bb:06:78:06:ff:c9:c8:7c:5d:2e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=dd31bb3c55c05523b1e07bb575d05b54268e0df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:d1:6e:be:ce:9a:31:e8:77:59:89:7b:ec:
                    68:3e:f9:02:01:c7:26:77:c4:97:71:ae:a9:c7:39:
                    24:3a:57:97:74:78:a1:07:61:50:e0:c0:6d:93:b0:
                    4e:71:74:d4:70:78:08:ad:51:03:59:ff:0b:02:06:
                    ec:01:7c:f8:4c:dd:e2:99:30:57:a1:77:e3:5c:a4:
                    cd:63:0f:ca:08:72:73:fa:ae:ae:3d:27:74:48:62:
                    f5:b7:cc:d7:68:35:c0:4e:b9:e4:df:ff:91:dc:f4:
                    d7:40:27:28:3b:b2:ba:ea:7e:e2:da:f9:a7:98:c6:
                    2e:11:b2:47:4b:cf:f9:db:e7:87:db:8a:f3:74:b5:
                    54:80:d9:3c:87:3b:27:7e:e7:e5:45:ec:1a:a9:d9:
                    11:fc:8c:8f:b0:d4:cf:de:c9:44:ae:57:18:a8:8c:
                    a9:6f:3f:77:2e:24:3f:64:1c:4d:89:d7:66:be:25:
                    08:fb:fb:8b:f2:d3:04:ca:bd:13:34:c4:3f:b8:3f:
                    f9:91:0d:f7:a9:55:84:da:0c:75:95:4c:f9:88:ec:
                    d2:ea:5c:79:a9:a4:36:76:f8:3e:a8:da:23:b2:a4:
                    03:f8:81:01:2a:76:f0:7b:52:e9:16:a4:44:80:b7:
                    e7:59:d2:f1:78:9c:fa:48:bc:cc:e4:85:be:8e:bc:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:BB:3C:55:C0:55:23:B1:E0:7B:B5:75:D0:5B:54:26:8E:0D:F4
            X509v3 Authority Key Identifier:
                keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:30:75:be:29:7d:dc:df:94:d6:6f:1f:bc:3c:a8:fc:69:19:
         49:53:44:1c:64:35:fb:41:8a:8b:b4:9b:6a:ae:0c:39:a0:c3:
         c5:db:f6:48:06:67:5d:6e:8f:41:85:29:64:07:7e:51:3d:9e:
         48:e8:c0:99:56:fd:0c:41:0f:bd:2a:65:17:73:9b:26:cf:fd:
         14:b3:3c:c6:2c:eb:03:dd:c2:10:7c:c9:13:6d:91:f2:ab:74:
         8a:7d:a6:57:17:e3:93:25:06:bd:ff:87:12:8f:d8:d3:6a:ad:
         c5:64:fa:7b:db:74:b2:a2:da:ea:0b:c8:e8:0a:52:58:97:af:
         1d:c1:e0:1b:e1:4d:00:08:44:4e:b8:23:05:35:71:e2:89:83:
         db:7f:98:97:1d:5e:82:57:a5:2d:6d:d5:d0:e3:c4:1f:19:7d:
         ad:8c:0e:d7:87:fa:8e:1f:2e:be:7e:45:1e:c8:d4:41:e3:22:
         8c:0c:2c:d1:1b:f4:93:d8:4a:e5:0f:52:c3:60:78:8e:8a:66:
         a2:7d:82:a2:7c:53:3b:95:65:9a:fc:b8:15:87:80:22:bb:e6:
         2f:d3:a6:ef:b3:d9:84:ec:47:79:59:e2:e6:6e:4c:79:66:ab:
         00:68:72:22:6c:b2:8e:0d:17:ab:28:a3:10:76:dd:ad:30:44:
         3f:86:2b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaN7S7sGeAb/ych8XS5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjAyMzE4ZjJjZTk3MmU3MjQwOGNjY2M3ZDMyMGFmMzBj
ZDJiMGQwHhcNMjUwNDEzMTMwMTMwWhcNMjUwNDE0MTMwMTMwWjAzMTEwLwYDVQQD
EyhkZDMxYmIzYzU1YzA1NTIzYjFlMDdiYjU3NWQwNWI1NDI2OGUwZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T3Rbr7OmjHod1mJe+xoPvkCAccm
d8SXca6pxzkkOleXdHihB2FQ4MBtk7BOcXTUcHgIrVEDWf8LAgbsAXz4TN3imTBX
oXfjXKTNYw/KCHJz+q6uPSd0SGL1t8zXaDXATrnk3/+R3PTXQCcoO7K66n7i2vmn
mMYuEbJHS8/52+eH24rzdLVUgNk8hzsnfuflRewaqdkR/IyPsNTP3slErlcYqIyp
bz93LiQ/ZBxNiddmviUI+/uL8tMEyr0TNMQ/uD/5kQ33qVWE2gx1lUz5iOzS6lx5
qaQ2dvg+qNojsqQD+IEBKnbwe1LpFqREgLfnWdLxeJz6SLzM5IW+jry01QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0xuzxVwFUjseB7tXXQW1Qmjg30MB8GA1UdIwQY
MBaAFKjwIxjyzpcuckCMzMfTIK8wzSsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgt
NzU0NGRmMzAwNGIyLzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgtNzU0NGRmMzAwNGIy
LzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjB1vil9
3N+U1m8fvDyo/GkZSVNEHGQ1+0GKi7Sbaq4MOaDDxdv2SAZnXW6PQYUpZAd+UT2e
SOjAmVb9DEEPvSplF3ObJs/9FLM8xizrA93CEHzJE22R8qt0in2mVxfjkyUGvf+H
Eo/Y02qtxWT6e9t0sqLa6gvI6ApSWJevHcHgG+FNAAhETrgjBTVx4omD23+Ylx1e
glelLW3V0OPEHxl9rYwO14f6jh8uvn5FHsjUQeMijAws0Rv0k9hK5Q9Sw2B4jopm
on2ConxTO5Vlmvy4FYeAIrvmL9Om77PZhOxHeVni5m5MeWarAGhyImyyjg0Xqyij
EHbdrTBEP4YruQ==
-----END CERTIFICATE-----