Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File:                     q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier:          ZHshrDGUdtRdmwyLHHqPc8gC6k73TaQPlK50tcY2mGI=
Subject key identifier:   75:75:EE:16:F9:56:F6:1C:AF:9F:60:3B:09:C2:9D:AC:7E:BE:50:D1
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer:       /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial:       01962E61999BADA02616A656E68F90444854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number:          112C
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
                          2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: uCnvIznIY7LVvSNJgv2z4wxZBQeLMU39wy01nzkboaw=)
                          3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:9b:ad:a0:26:16:a6:56:e6:8f:90:44:48:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=7575ee16f956f61caf9f603b09c29dac7ebe50d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:73:2c:bf:2c:29:72:41:80:b0:ce:80:a2:
                    1c:4a:93:03:07:ae:6c:bd:5f:b4:5f:0c:4b:8d:87:
                    12:50:68:8c:db:14:f5:f3:8b:9a:c7:13:96:83:72:
                    88:f2:78:51:8a:a9:7c:c1:14:2c:30:2a:48:24:a5:
                    7a:34:2f:7d:f1:f6:aa:50:3d:8f:f6:50:4b:f4:ee:
                    66:50:01:6d:c1:02:23:d5:4e:85:b6:81:83:cb:ef:
                    63:e0:ee:df:8a:3d:3f:0c:7f:20:04:06:f4:ab:9b:
                    68:b4:71:39:13:70:82:d7:b9:ab:99:e8:62:db:99:
                    45:dd:2a:2e:4c:72:8e:4e:a8:24:fe:29:0e:53:3f:
                    b1:fd:0b:ba:37:4f:59:08:16:ce:f5:92:ec:98:af:
                    d0:0b:62:13:6b:f8:e0:fb:e2:6e:cd:81:67:b4:de:
                    66:db:0e:15:65:15:8a:58:d7:a8:f9:91:b4:61:90:
                    87:07:90:e2:a9:09:22:6b:a8:aa:0a:39:81:88:57:
                    ca:52:ed:27:f6:61:0c:b3:cb:5c:4d:62:69:87:be:
                    47:19:fa:1e:32:77:38:78:ea:8d:1a:4d:fe:20:d4:
                    cc:85:76:ef:55:10:83:7a:02:f8:a8:09:09:f9:f0:
                    17:22:d2:19:34:1d:7d:85:48:73:4c:52:96:71:c3:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:EE:16:F9:56:F6:1C:AF:9F:60:3B:09:C2:9D:AC:7E:BE:50:D1
            X509v3 Authority Key Identifier:
                keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:13:42:b0:52:22:e9:17:8b:48:0f:79:ab:14:62:56:72:1f:
         b2:78:5c:32:02:b5:12:71:2e:20:53:f0:1b:66:62:34:bc:db:
         6e:31:ff:f6:3d:86:0a:28:2c:d5:34:5e:21:39:84:e2:e5:52:
         89:70:87:f2:75:28:06:19:ad:84:c1:89:cc:76:0e:b2:15:d2:
         02:07:45:67:55:94:42:30:94:83:ee:d9:e4:0b:b4:24:1e:f8:
         22:4c:a2:37:9a:1d:da:13:14:ba:1e:d1:b5:ba:9f:8b:4b:6e:
         51:75:0b:f4:4b:25:83:cd:8b:02:2e:24:98:84:ea:61:a8:bd:
         33:5a:23:22:47:da:f4:4a:e8:58:e7:91:87:c7:9a:6b:a8:55:
         a6:e1:23:1b:dd:78:f7:e3:71:96:01:a7:d3:a5:e3:0e:d1:d5:
         fb:a9:11:50:53:9e:57:d1:f7:90:1f:2b:81:62:69:95:53:84:
         fd:f5:09:04:b3:25:dc:11:6f:e1:78:0e:c2:db:df:8f:c6:b8:
         1e:7d:f5:3c:1d:de:b8:47:19:70:c3:e2:b0:d1:02:36:cc:04:
         9b:de:69:fa:1d:b1:da:5e:b5:68:6c:b1:a8:c4:54:4a:80:64:
         26:8f:f7:c8:6b:a8:0c:40:05:5d:d6:b2:3e:3a:12:f1:ab:8a:
         95:78:a3:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZmbraAmFqZW5o+QREhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz
MDBiMjAwHhcNMjUwNDEzMDkwMTEwWhcNMjUwNDE0MDkwMTEwWjAzMTEwLwYDVQQD
Eyg3NTc1ZWUxNmY5NTZmNjFjYWY5ZjYwM2IwOWMyOWRhYzdlYmU1MGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9xzLL8sKXJBgLDOgKIcSpMDB65s
vV+0XwxLjYcSUGiM2xT184uaxxOWg3KI8nhRiql8wRQsMCpIJKV6NC998faqUD2P
9lBL9O5mUAFtwQIj1U6FtoGDy+9j4O7fij0/DH8gBAb0q5totHE5E3CC17mrmehi
25lF3SouTHKOTqgk/ikOUz+x/Qu6N09ZCBbO9ZLsmK/QC2ITa/jg++JuzYFntN5m
2w4VZRWKWNeo+ZG0YZCHB5DiqQkia6iqCjmBiFfKUu0n9mEMs8tcTWJph75HGfoe
Mnc4eOqNGk3+INTMhXbvVRCDegL4qAkJ+fAXItIZNB19hUhzTFKWccMXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV17hb5VvYcr59gOwnCnax+vlDRMB8GA1UdIwQY
MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt
MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk
LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERNCsFIi
6ReLSA95qxRiVnIfsnhcMgK1EnEuIFPwG2ZiNLzbbjH/9j2GCigs1TReITmE4uVS
iXCH8nUoBhmthMGJzHYOshXSAgdFZ1WUQjCUg+7Z5Au0JB74IkyiN5od2hMUuh7R
tbqfi0tuUXUL9Eslg82LAi4kmITqYai9M1ojIkfa9EroWOeRh8eaa6hVpuEjG914
9+NxlgGn06XjDtHV+6kRUFOeV9H3kB8rgWJplVOE/fUJBLMl3BFv4XgOwtvfj8a4
Hn31PB3euEcZcMPisNECNswEm95p+h2x2l61aGyxqMRUSoBkJo/3yGuoDEAFXday
PjoS8auKlXijvg==
-----END CERTIFICATE-----