Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File:                     qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier:          DN/iZ8DXcxWam1SnOwHU6DGhSZcJ9cRo1NtRDHbM2v0=
Subject key identifier:   EC:EC:C3:15:CE:D3:F6:91:25:E1:E3:AE:5E:F0:4A:E2:6D:F9:D1:D6
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer:       /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial:       01962F06E19075990323C848A350A16E51AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number:          069C
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
                          2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: YV4yRDwhp3DQL+6iSC5WNOlFpvj8zFX0DdUTwxg8sLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e1:90:75:99:03:23:c8:48:a3:50:a1:6e:51:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=ececc315ced3f69125e1e3ae5ef04ae26df9d1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:94:c8:c2:0d:d8:6f:40:db:a5:11:7b:db:
                    96:84:23:18:16:85:a6:96:70:67:b0:de:f9:77:07:
                    96:e2:5d:93:3e:64:16:09:aa:09:79:33:a3:c7:bc:
                    51:ac:e7:c7:da:1e:93:d5:c4:91:c8:15:18:6b:f3:
                    7c:38:5e:28:eb:09:2a:4f:11:7b:1e:39:9e:7f:8d:
                    bc:43:8d:fe:38:0d:8a:cf:9a:a6:68:b1:7c:0b:a7:
                    88:22:29:42:43:69:dd:59:d5:22:6d:5e:8e:f3:5a:
                    52:cc:bd:08:2a:2e:92:ea:7f:58:7e:2c:3c:09:e1:
                    03:80:34:bb:00:bc:d5:82:e0:0b:34:69:52:b2:7e:
                    f2:22:c3:7a:df:87:57:27:b1:73:66:af:1e:d7:41:
                    ee:e0:6b:07:3c:89:1c:70:34:76:86:c1:e5:da:a5:
                    61:c6:4d:4f:e3:f7:cb:03:f8:e6:e1:89:0a:e6:35:
                    25:31:2e:df:d2:f8:c0:93:af:5e:04:ba:17:e5:fc:
                    b3:dc:31:59:24:c4:08:46:ba:44:5c:07:0e:f5:0d:
                    51:a2:cf:d1:0a:f7:78:50:9b:ed:17:99:9c:1a:d2:
                    31:a5:59:12:ef:f7:c9:4f:7e:ed:6c:4f:20:bd:2c:
                    ea:a1:da:4a:14:74:af:9a:cb:8f:b3:91:51:bd:fd:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EC:C3:15:CE:D3:F6:91:25:E1:E3:AE:5E:F0:4A:E2:6D:F9:D1:D6
            X509v3 Authority Key Identifier:
                keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:cc:45:c1:c7:d3:e2:65:a4:07:7d:ab:31:97:eb:20:35:3a:
         4e:53:c7:07:bd:1b:f3:18:64:98:27:cb:f3:c6:9a:4b:07:92:
         9d:ac:4a:f8:ba:20:a2:7d:08:3a:a7:79:f7:f9:49:2c:d9:65:
         56:36:80:4d:6a:b7:c2:0c:87:79:d6:71:35:3a:11:fe:ed:0b:
         e0:c5:0a:83:47:b6:2e:e7:fc:fa:1f:50:53:e4:10:ca:58:fa:
         df:b6:6b:0f:a4:df:c4:5d:55:99:82:cf:af:86:6e:b8:a7:5a:
         8f:5f:98:c7:1d:cf:20:de:f8:b9:15:38:44:12:8f:ca:5b:ed:
         8f:be:f4:f1:24:15:8f:45:5d:8d:f4:8d:c9:aa:56:f7:d8:60:
         8a:47:a6:d8:dc:28:ad:55:29:3b:3a:b6:91:f6:b1:70:5c:be:
         9a:35:47:ce:c8:82:b0:fa:ba:5b:ba:11:71:3b:62:00:63:5f:
         d7:48:37:bc:70:2d:eb:d5:c2:35:9b:9c:dd:44:76:6b:29:45:
         1b:ec:e3:ad:f2:a3:52:39:cd:26:7d:6e:3f:30:aa:e2:a3:89:
         a6:43:65:14:a8:24:b6:49:98:7a:0b:b4:2e:ec:f5:56:74:27:
         9b:ad:27:24:ea:b0:13:63:a7:6f:a5:51:38:37:cf:3a:86:d8:
         63:bc:fa:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuGQdZkDI8hIo1ChblGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0
YWUyOWQwHhcNMjUwNDEzMTIwMTQyWhcNMjUwNDE0MTIwMTQyWjAzMTEwLwYDVQQD
EyhlY2VjYzMxNWNlZDNmNjkxMjVlMWUzYWU1ZWYwNGFlMjZkZjlkMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn2UyMIN2G9A26URe9uWhCMYFoWm
lnBnsN75dweW4l2TPmQWCaoJeTOjx7xRrOfH2h6T1cSRyBUYa/N8OF4o6wkqTxF7
Hjmef428Q43+OA2Kz5qmaLF8C6eIIilCQ2ndWdUibV6O81pSzL0IKi6S6n9Yfiw8
CeEDgDS7ALzVguALNGlSsn7yIsN634dXJ7FzZq8e10Hu4GsHPIkccDR2hsHl2qVh
xk1P4/fLA/jm4YkK5jUlMS7f0vjAk69eBLoX5fyz3DFZJMQIRrpEXAcO9Q1Ros/R
Cvd4UJvtF5mcGtIxpVkS7/fJT37tbE8gvSzqodpKFHSvmsuPs5FRvf0IkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzswxXO0/aRJeHjrl7wSuJt+dHWMB8GA1UdIwQY
MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt
ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0
LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasxFwcfT
4mWkB32rMZfrIDU6TlPHB70b8xhkmCfL88aaSweSnaxK+Logon0IOqd59/lJLNll
VjaATWq3wgyHedZxNToR/u0L4MUKg0e2Luf8+h9QU+QQylj637ZrD6TfxF1VmYLP
r4ZuuKdaj1+Yxx3PIN74uRU4RBKPylvtj7708SQVj0VdjfSNyapW99hgikem2Nwo
rVUpOzq2kfaxcFy+mjVHzsiCsPq6W7oRcTtiAGNf10g3vHAt69XCNZuc3UR2aylF
G+zjrfKjUjnNJn1uPzCq4qOJpkNlFKgktkmYegu0Luz1VnQnm60nJOqwE2Onb6VR
ODfPOobYY7z6HA==
-----END CERTIFICATE-----