Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File:                     qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier:          PKvAtIlNHaQ43DFEd6kcu/q0QbQ0B6nRNsABm85A+Qo=
Subject key identifier:   B0:74:68:30:7C:8A:9A:FE:B2:D3:32:0B:91:06:71:12:12:3B:A0:A0
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer:       /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial:       01962FAB94461C3618D667D2AE38AE30E0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
                          2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: 5iInqusZqRfz+UIqFIQG8HxLaP4/3NquEYqDA4ChLik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:46:1c:36:18:d6:67:d2:ae:38:ae:30:e0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=b07468307c8a9afeb2d3320b91067112123ba0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:ca:49:8c:c9:b4:96:ea:a9:21:5d:e9:ed:
                    2a:94:d1:1a:0a:cd:96:de:8a:ff:c0:fa:1c:63:a6:
                    e7:4e:4c:3d:d2:2c:5d:77:4a:f3:22:51:34:dd:b2:
                    d2:0a:28:15:3c:cf:a7:c1:ee:e8:8b:ea:b6:8d:bd:
                    e7:f0:36:95:26:1e:25:51:02:a8:f4:ac:4d:2d:d7:
                    09:36:19:e0:9e:32:38:51:3d:db:b5:ed:e4:0b:18:
                    98:b4:52:1a:39:37:7e:68:6f:fd:75:8f:de:72:10:
                    fc:cc:72:30:5d:2f:3d:b3:98:05:35:c1:ac:24:64:
                    ef:17:0f:8b:c9:7e:82:6d:72:f0:04:e9:fd:a4:af:
                    71:c2:32:03:cf:ed:d8:a3:a8:2e:2e:b3:3a:1d:85:
                    37:ae:b7:1a:4d:dd:93:0c:99:ed:6e:73:95:40:66:
                    0f:6d:86:5d:05:33:fb:de:66:42:da:ba:7e:84:ab:
                    63:ba:91:97:da:b0:6a:15:1d:7c:31:ce:d0:b1:a4:
                    bc:8a:21:d6:dc:8c:44:ab:58:46:53:72:7d:18:e1:
                    51:64:48:4c:17:8b:72:e2:cf:62:10:29:ca:0b:19:
                    26:c0:17:9e:f7:ad:7a:1a:74:7a:48:f8:78:99:9a:
                    26:59:a4:b7:ca:b0:0d:21:3e:13:ad:ec:7a:ee:f0:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:74:68:30:7C:8A:9A:FE:B2:D3:32:0B:91:06:71:12:12:3B:A0:A0
            X509v3 Authority Key Identifier:
                keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:45:ff:4f:95:8a:7f:ed:a4:f4:c9:5c:91:dd:7c:a1:85:
         71:cd:f5:a4:3d:72:49:a7:b5:ee:7b:4b:67:12:5e:af:43:80:
         20:a1:ac:55:5a:88:fd:4c:32:26:57:7b:11:20:6c:a0:0a:76:
         89:84:79:60:84:71:f4:da:cc:7c:d2:92:60:99:34:a0:b5:5b:
         ff:2f:9e:84:9c:32:8b:4f:d4:72:2a:fb:bb:0e:36:60:95:8c:
         a2:df:f1:e9:e1:59:b7:fc:b8:ac:11:46:28:63:73:c0:75:f9:
         af:24:62:1e:db:3e:ca:bc:2b:e9:42:c8:57:87:03:0f:0e:b6:
         56:84:61:87:23:98:1a:d5:cd:19:1e:96:59:25:3e:f6:53:a7:
         b0:5c:5e:d8:1f:92:8d:1a:b2:8f:35:b7:24:72:cc:32:b8:d9:
         d7:f2:66:e9:56:c1:11:36:54:2a:84:17:f8:20:db:d6:e4:8c:
         13:24:68:cd:b0:cd:4f:7e:0f:6d:c5:fc:63:a0:e9:c5:95:a7:
         ec:a0:02:a9:c6:87:8b:f6:72:59:c8:2f:86:3b:15:e7:c5:eb:
         8f:89:b5:a5:df:9c:f0:f4:42:bd:14:dc:ff:04:f3:c6:8f:42:
         ea:13:53:fc:4b:73:2b:42:b0:20:27:24:f1:c9:12:83:80:b4:
         2e:60:6c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5RGHDYY1mfSrjiuMODDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDY5MDU4YjRkMzY3NjEyYmU0ODA3MzcyYjVlNTkzZTAz
NDc3NjYwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
EyhiMDc0NjgzMDdjOGE5YWZlYjJkMzMyMGI5MTA2NzExMjEyM2JhMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphfKSYzJtJbqqSFd6e0qlNEaCs2W
3or/wPocY6bnTkw90ixdd0rzIlE03bLSCigVPM+nwe7oi+q2jb3n8DaVJh4lUQKo
9KxNLdcJNhngnjI4UT3bte3kCxiYtFIaOTd+aG/9dY/echD8zHIwXS89s5gFNcGs
JGTvFw+LyX6CbXLwBOn9pK9xwjIDz+3Yo6guLrM6HYU3rrcaTd2TDJntbnOVQGYP
bYZdBTP73mZC2rp+hKtjupGX2rBqFR18Mc7QsaS8iiHW3IxEq1hGU3J9GOFRZEhM
F4ty4s9iECnKCxkmwBee9616GnR6SPh4mZomWaS3yrANIT4Trex67vB9fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB0aDB8ipr+stMyC5EGcRISO6CgMB8GA1UdIwQY
MBaAFKsGkFi002dhK+SAc3K15ZPgNHdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt
NTY2NzQxOWY0NGU4LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4
LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbBF/0+V
in/tpPTJXJHdfKGFcc31pD1ySae17ntLZxJer0OAIKGsVVqI/UwyJld7ESBsoAp2
iYR5YIRx9NrMfNKSYJk0oLVb/y+ehJwyi0/Ucir7uw42YJWMot/x6eFZt/y4rBFG
KGNzwHX5ryRiHts+yrwr6ULIV4cDDw62VoRhhyOYGtXNGR6WWSU+9lOnsFxe2B+S
jRqyjzW3JHLMMrjZ1/Jm6VbBETZUKoQX+CDb1uSMEyRozbDNT34PbcX8Y6DpxZWn
7KACqcaHi/ZyWcgvhjsV58Xrj4m1pd+c8PRCvRTc/wTzxo9C6hNT/EtzK0KwICck
8ckSg4C0LmBs7Q==
-----END CERTIFICATE-----