Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File:                     Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier:          JGAsKHfxJcWFvt9ryLgPhj7GWzK4p67MrwR1d2DWeMk=
Subject key identifier:   F4:57:1E:4E:52:6A:3C:C3:A7:2A:3E:ED:4E:0A:57:45:77:2C:24:01
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       01962DF432EBBBECE59FF396B03B4E7A4890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number:          1502
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 0xlQ3OoAf3jw6dFpT3Cm7wgpHUc.roa (hash: MQMgI1VWvUX5TVbBWyEo2dcW4NQMw/+uEaquqgjFfto=)
                          2: 3FEjI3AeaOdfwu2SE8mhTfKLsPM.roa (hash: SX8ruu5xtU5nHOj268+AdU4uDijl/E2PS/yTXGtZ3JQ=)
                          3: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=)
                          4: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=)
                          5: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: xS7j7Gwf7xKZ3dqhYP3mHyNwwU562raMZvw4L0BL1ew=)
                          6: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=)
                          7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=)
                          8: jQWzz1KtPVeMOk9juszbTA9KSZM.roa (hash: tyZR5R+Av5TR5d+AMDxHfCQO1+yCBaGSUIry75HEJTI=)
                          9: prsVOyRGU3MtYYx93kWm773j8G4.roa (hash: XFsscFozdK/fanLtH4eqsqCTvm9rcJcpt7EZvhsiimc=)
                          10: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=)
                          11: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=)
                          12: ys5vmqUy51MsJ0ygo_iK-V09VLk.roa (hash: 0bEBsx5vAAoh9m1hQ5TVct9tCZkHxHVWgyiCpF/cLSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:32:eb:bb:ec:e5:9f:f3:96:b0:3b:4e:7a:48:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=f4571e4e526a3cc3a72a3eed4e0a5745772c2401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:58:1d:35:1d:1e:54:7f:49:83:c4:34:df:
                    e9:03:45:e1:d8:85:88:e7:13:c6:8e:1a:4c:a0:db:
                    55:1f:8d:61:54:61:c5:0c:cb:ca:b9:bc:63:de:54:
                    ae:6e:c1:6f:f2:41:b0:b6:7b:b3:d3:fd:8d:55:11:
                    78:3e:3c:78:d8:24:e6:aa:51:7d:d8:22:23:e9:f0:
                    3d:f8:60:65:65:6f:45:38:ed:07:68:06:54:04:d3:
                    69:6d:04:61:24:32:1a:74:37:17:7e:70:0d:4d:f3:
                    67:5a:dd:72:0b:71:33:e8:37:be:61:fa:3d:44:69:
                    69:c6:36:d3:4b:e5:ed:f3:43:ec:99:51:86:3b:7a:
                    83:e3:3d:03:7d:f8:1b:6d:39:5d:9c:f4:fd:b2:95:
                    89:f0:65:16:69:df:36:5a:63:47:74:3d:6e:6e:38:
                    14:2c:a6:9c:41:f0:86:3a:44:a3:4b:e2:5b:bb:c2:
                    f1:fc:bd:e3:34:d7:07:04:d8:ac:05:97:9f:b5:65:
                    16:df:1b:c7:39:1c:3f:71:71:d5:13:55:d5:d2:28:
                    fc:89:c5:50:40:32:1f:75:b7:a8:82:d2:c5:2b:80:
                    0f:e3:5b:5a:c3:bf:da:eb:f6:52:c9:0f:c3:09:cb:
                    f3:db:88:d4:85:19:9d:9e:e3:ab:46:27:6a:92:5e:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:1E:4E:52:6A:3C:C3:A7:2A:3E:ED:4E:0A:57:45:77:2C:24:01
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:55:36:3a:1a:c0:c6:33:d6:98:21:d4:0a:66:29:0c:90:97:
         30:5f:b1:2c:65:48:37:91:fe:dc:af:91:e1:eb:17:b2:39:6b:
         40:8b:4d:6f:24:a3:09:38:a7:ca:28:ad:4a:05:36:a8:d8:2c:
         bd:80:56:87:10:99:77:26:23:81:f1:05:69:ce:43:70:ff:16:
         e7:2f:98:43:19:c0:d9:16:a4:82:e1:80:be:f9:84:c9:7e:01:
         48:53:50:a8:b2:d3:fb:8f:10:2d:fd:46:24:50:90:f9:41:86:
         2f:65:b0:f7:36:55:48:38:84:45:d8:36:5b:1e:c7:29:87:28:
         9f:2b:76:f4:9f:53:9f:37:91:29:32:b7:46:d8:4a:05:ac:08:
         c4:d0:3b:ee:bc:2c:af:36:7c:ee:78:ce:23:36:11:6d:f2:5f:
         84:d2:34:30:8d:77:de:85:11:40:a3:14:87:ed:af:6d:6c:e2:
         2b:e5:d7:ff:cf:ad:6e:18:c4:4a:d9:41:3b:f7:96:32:86:db:
         dc:3a:5d:bf:26:94:74:96:38:84:b7:12:cb:6f:f3:88:7d:33:
         c8:ac:8d:db:a4:8d:ed:ac:dd:ad:c8:9b:31:be:f9:97:6a:3c:
         4e:ec:8b:36:ed:c6:04:17:b3:79:27:32:ad:9d:93:1b:09:e9:
         37:ff:e7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DLru+zln/OWsDtOekiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjUwNDEzMDcwMTQwWhcNMjUwNDE0MDcwMTQwWjAzMTEwLwYDVQQD
EyhmNDU3MWU0ZTUyNmEzY2MzYTcyYTNlZWQ0ZTBhNTc0NTc3MmMyNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zxYHTUdHlR/SYPENN/pA0Xh2IWI
5xPGjhpMoNtVH41hVGHFDMvKubxj3lSubsFv8kGwtnuz0/2NVRF4Pjx42CTmqlF9
2CIj6fA9+GBlZW9FOO0HaAZUBNNpbQRhJDIadDcXfnANTfNnWt1yC3Ez6De+Yfo9
RGlpxjbTS+Xt80PsmVGGO3qD4z0DffgbbTldnPT9spWJ8GUWad82WmNHdD1ubjgU
LKacQfCGOkSjS+Jbu8Lx/L3jNNcHBNisBZeftWUW3xvHORw/cXHVE1XV0ij8icVQ
QDIfdbeogtLFK4AP41taw7/a6/ZSyQ/DCcvz24jUhRmdnuOrRidqkl58YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRXHk5SajzDpyo+7U4KV0V3LCQBMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVU2OhrA
xjPWmCHUCmYpDJCXMF+xLGVIN5H+3K+R4esXsjlrQItNbySjCTinyiitSgU2qNgs
vYBWhxCZdyYjgfEFac5DcP8W5y+YQxnA2RakguGAvvmEyX4BSFNQqLLT+48QLf1G
JFCQ+UGGL2Ww9zZVSDiERdg2Wx7HKYconyt29J9TnzeRKTK3RthKBawIxNA77rws
rzZ87njOIzYRbfJfhNI0MI133oURQKMUh+2vbWziK+XX/8+tbhjEStlBO/eWMobb
3DpdvyaUdJY4hLcSy2/ziH0zyKyN26SN7azdrcibMb75l2o8TuyLNu3GBBezeScy
rZ2TGwnpN//nCA==
-----END CERTIFICATE-----