Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          YOXjBQHGXIpgUlMUarhQcqn3s52aMB8h1NgvhVKIvEA=
Subject key identifier:   20:B6:B4:B3:27:9C:90:DB:BD:AB:FE:47:30:CB:5C:28:AE:BC:07:04
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       01962DF415C9B4E636332521AAD052C3C745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: 0uRkVKY7XXnyDogUgS2r5XX9qoA.roa (hash: lp1oaMmoBZ+ARuOSInljJOVgC+Q+LtTeEykGOBERqsQ=)
                          2: 5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa (hash: yDLDGysDDqgqhb6WLikdy1EXoOl26sXWpiZCWG5MyOM=)
                          3: DpzvwQnVRaFViTZyqTXRWJwxueM.roa (hash: au+QUyze3MKMGVHiIM5HXwnLMoQJIUaM60I83uw/tEc=)
                          4: R5bViWXBO3ouBouRqDAFF7DEDMg.roa (hash: 1qmWPpwQKC0p19qQrIunGPBkKyWE5b9Vy7KJVtEO+pk=)
                          5: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: 2DlbzhIu0smWORMY1FFl0ZonPgvTCAEsFkG7AcgfQhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:15:c9:b4:e6:36:33:25:21:aa:d0:52:c3:c7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=20b6b4b3279c90dbbdabfe4730cb5c28aebc0704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:f3:c7:4a:23:ed:cd:55:73:62:fa:9b:02:
                    a3:45:a4:b2:87:9d:6f:a8:61:e6:75:5b:8f:2a:a6:
                    f6:dc:14:a3:eb:e3:4d:70:97:f6:b1:6f:92:5e:fe:
                    fe:7f:b4:7d:a5:0d:e3:70:cd:23:87:17:af:68:ff:
                    84:13:f0:7d:73:69:b4:54:0d:f9:13:1b:dc:75:32:
                    98:c9:7a:76:8c:29:e6:f4:8a:5e:d0:08:a2:64:31:
                    46:01:86:79:27:91:52:c0:e8:d8:17:50:bc:fa:0f:
                    2b:17:b0:d8:4a:4b:c8:69:97:7f:c0:03:95:b5:af:
                    38:bf:d1:2b:98:e9:f4:ed:bf:a8:22:33:6e:f6:76:
                    c6:fb:dd:25:17:e4:5e:2f:b3:16:da:87:40:21:19:
                    17:33:9c:f4:88:2c:89:8d:1f:63:d7:31:1a:86:c4:
                    23:d1:ab:0e:52:90:4b:64:26:d8:1f:a5:49:38:64:
                    ca:15:70:de:af:56:f6:27:bd:2c:93:d4:22:5a:ea:
                    bb:f3:2b:09:81:28:ee:35:b5:f0:4a:71:17:23:4d:
                    a1:b7:76:03:a0:af:86:c6:eb:1d:31:24:e4:99:5e:
                    42:93:a8:2e:0f:6a:51:a9:58:aa:ec:18:74:84:b9:
                    56:9a:f5:90:41:dd:f1:61:b4:76:de:c7:31:09:58:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B6:B4:B3:27:9C:90:DB:BD:AB:FE:47:30:CB:5C:28:AE:BC:07:04
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:41:3f:6d:e4:1f:a3:a3:48:d0:d6:28:72:b3:4a:1c:45:dd:
         55:79:5d:a9:51:42:1c:7c:a2:fd:92:d5:d0:ce:ba:79:d4:9d:
         ae:c3:b4:d9:93:8f:16:5f:1a:72:f1:48:87:84:41:7c:ec:53:
         87:72:5d:63:e8:9b:26:b7:94:25:8b:be:53:c7:bb:ef:81:13:
         27:91:d7:46:1a:2b:cc:8b:ec:f1:c7:06:6f:31:50:99:be:fb:
         62:6f:43:1b:e8:d5:70:1d:0a:90:a9:15:1a:cd:c4:79:26:c3:
         25:3d:9e:13:86:a9:89:59:7d:73:bb:ce:ed:c3:f8:9d:5e:ec:
         35:c2:fa:9b:8a:6a:1a:bf:9c:ca:91:59:5d:3c:6b:d6:a1:31:
         f1:02:af:a7:6c:82:40:cd:06:ab:01:49:a6:f1:96:cf:f2:ac:
         fa:7c:0c:2e:09:84:a8:54:a8:91:15:08:3b:10:2c:2d:97:8a:
         a0:b2:25:b9:01:b3:c6:e6:61:e6:ab:a8:8b:e2:6c:69:8e:35:
         5e:b3:89:41:87:9d:50:75:17:51:7d:f3:df:c6:13:c6:7f:b3:
         02:be:df:db:8a:e8:0f:94:f6:1f:3a:3e:be:40:c9:09:a3:44:
         aa:d7:7b:6a:b7:1e:cb:01:07:7d:a7:12:c7:97:af:e6:9a:48:
         d4:18:20:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BXJtOY2MyUhqtBSw8dFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmM5YmMyZDJkYWNmZDZmMTMwZDg1YTg0ZmVkZWFiZjE3
OWE1NjcwHhcNMjUwNDEzMDcwMTMzWhcNMjUwNDE0MDcwMTMzWjAzMTEwLwYDVQQD
EygyMGI2YjRiMzI3OWM5MGRiYmRhYmZlNDczMGNiNWMyOGFlYmMwNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnbzx0oj7c1Vc2L6mwKjRaSyh51v
qGHmdVuPKqb23BSj6+NNcJf2sW+SXv7+f7R9pQ3jcM0jhxevaP+EE/B9c2m0VA35
ExvcdTKYyXp2jCnm9Ipe0AiiZDFGAYZ5J5FSwOjYF1C8+g8rF7DYSkvIaZd/wAOV
ta84v9ErmOn07b+oIjNu9nbG+90lF+ReL7MW2odAIRkXM5z0iCyJjR9j1zEahsQj
0asOUpBLZCbYH6VJOGTKFXDer1b2J70sk9QiWuq78ysJgSjuNbXwSnEXI02ht3YD
oK+GxusdMSTkmV5Ck6guD2pRqViq7Bh0hLlWmvWQQd3xYbR23scxCVjoBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC2tLMnnJDbvav+RzDLXCiuvAcEMB8GA1UdIwQY
MBaAFKgsm8LS2s/W8TDYWoT+3qvxeaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgt
NTVjMTQwYzlmNTRmLzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgtNTVjMTQwYzlmNTRm
LzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUE/beQf
o6NI0NYocrNKHEXdVXldqVFCHHyi/ZLV0M66edSdrsO02ZOPFl8acvFIh4RBfOxT
h3JdY+ibJreUJYu+U8e774ETJ5HXRhorzIvs8ccGbzFQmb77Ym9DG+jVcB0KkKkV
Gs3EeSbDJT2eE4apiVl9c7vO7cP4nV7sNcL6m4pqGr+cypFZXTxr1qEx8QKvp2yC
QM0GqwFJpvGWz/Ks+nwMLgmEqFSokRUIOxAsLZeKoLIluQGzxuZh5quoi+JsaY41
XrOJQYedUHUXUX3z38YTxn+zAr7f24roD5T2Hzo+vkDJCaNEqtd7arceywEHfacS
x5ev5ppI1Bggqg==
-----END CERTIFICATE-----