Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File:                     aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier:          iKfaeL6ywwKrkmSIoO3wA7biabah5LXu1IjMtW8up5A=
Subject key identifier:   10:A8:FA:41:28:1E:87:34:E5:FA:D0:F6:E7:26:5E:FD:3E:4E:80:F3
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer:       /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial:       01962FAB6542F406600988F1597DF0A12A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number:          0DB1
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: jSA3j+cuZTBcd+0OPyhD/yXJ/KnOXOxdDe59QDb4iCg=)
                          2: im7q3DUwwhxBvlVEZtE4tGfmXLI.roa (hash: pwkny+7FbBocVWvTx61zBH07mwGByd5EIRilK7v/x84=)
                          3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:65:42:f4:06:60:09:88:f1:59:7d:f0:a1:2a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=10a8fa41281e8734e5fad0f6e7265efd3e4e80f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:96:24:49:e2:7c:4c:88:91:d3:83:de:10:
                    5c:a1:9a:a7:6c:38:90:21:a7:b5:dd:5d:ff:d6:0c:
                    69:1e:8d:32:72:72:0a:e2:9e:98:76:62:ed:f5:c7:
                    fc:96:4d:b2:63:ab:23:30:be:1a:bc:19:2c:93:ee:
                    cf:06:dc:f9:50:83:79:67:51:20:e1:c6:74:b3:c4:
                    73:57:f3:5e:13:94:c6:fc:52:44:92:44:78:78:f2:
                    17:8d:dc:e3:90:cd:d4:17:19:e0:e4:9c:90:70:5f:
                    ac:56:a8:5c:9b:08:77:52:7b:b9:82:eb:e8:1b:13:
                    5b:95:d9:07:ee:62:80:6b:a0:79:e1:56:3e:46:10:
                    8f:e6:67:dc:e0:3f:e6:6c:7b:0b:ec:f4:fc:3a:fc:
                    da:17:06:ef:94:a9:9c:a5:de:c8:96:7d:55:25:56:
                    e7:38:9a:7a:97:4f:b4:05:df:bb:ee:97:ee:31:81:
                    3a:93:b1:48:0d:7f:b6:75:fa:ea:d4:ff:2f:cb:45:
                    2d:d7:59:f2:95:c4:fd:9a:d6:7e:72:c0:7e:36:39:
                    a0:41:07:55:6f:80:da:9f:30:b2:01:89:de:4e:8a:
                    dd:8a:c7:c9:31:9f:3a:6c:4a:07:a0:b2:f3:c0:45:
                    35:83:60:fb:b8:16:98:d1:54:f2:a2:b5:fd:02:c5:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A8:FA:41:28:1E:87:34:E5:FA:D0:F6:E7:26:5E:FD:3E:4E:80:F3
            X509v3 Authority Key Identifier:
                keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:14:88:35:19:3d:30:06:63:a5:18:fe:c1:f3:98:d2:f7:
         5c:d5:d7:4f:d6:d7:71:2b:62:ca:f5:f5:97:d9:95:24:77:ed:
         8e:f6:5b:7e:70:4c:dd:61:56:b4:d7:e1:d3:2d:27:1c:cc:7c:
         ac:8d:47:03:73:16:46:9c:0c:17:66:23:84:cf:13:83:e6:79:
         d8:a9:e0:56:62:38:c3:e1:a8:ae:4c:3a:58:a6:bb:4b:74:ec:
         7b:be:52:57:84:fa:74:c0:61:a3:11:03:3c:b9:d9:17:7e:a3:
         a3:3e:53:0b:77:59:4d:d1:ac:87:f2:5c:6a:9c:e7:90:2f:90:
         5b:3e:3a:9c:22:62:85:93:e3:46:a3:18:c3:ed:49:c0:a8:90:
         48:a1:f5:2d:2d:70:b7:24:5b:1f:87:44:f6:79:7c:a8:5e:e2:
         a3:cd:78:a4:1b:7c:6f:f9:71:20:18:e2:30:26:57:82:a9:b9:
         9c:92:ad:c0:76:6c:2b:50:e8:be:29:c1:07:58:a4:f6:0e:a2:
         69:c1:5a:14:1f:52:2e:bf:4e:72:ec:34:ec:0e:33:8f:9c:43:
         4f:0d:f3:89:f1:6f:d7:29:79:03:f9:87:9b:a1:33:84:ea:c4:
         7c:1a:59:a9:14:aa:2c:fb:0b:89:f9:91:34:83:42:8c:ff:3e:
         90:cf:05:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2VC9AZgCYjxWX3woSpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw
ZjczYzYwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
EygxMGE4ZmE0MTI4MWU4NzM0ZTVmYWQwZjZlNzI2NWVmZDNlNGU4MGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneCWJEnifEyIkdOD3hBcoZqnbDiQ
Iae13V3/1gxpHo0ycnIK4p6YdmLt9cf8lk2yY6sjML4avBksk+7PBtz5UIN5Z1Eg
4cZ0s8RzV/NeE5TG/FJEkkR4ePIXjdzjkM3UFxng5JyQcF+sVqhcmwh3Unu5guvo
GxNbldkH7mKAa6B54VY+RhCP5mfc4D/mbHsL7PT8OvzaFwbvlKmcpd7Iln1VJVbn
OJp6l0+0Bd+77pfuMYE6k7FIDX+2dfrq1P8vy0Ut11nylcT9mtZ+csB+NjmgQQdV
b4DanzCyAYneTordisfJMZ86bEoHoLLzwEU1g2D7uBaY0VTyorX9AsXsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCo+kEoHoc05frQ9ucmXv0+ToDzMB8GA1UdIwQY
MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt
Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm
LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRIUiDUZ
PTAGY6UY/sHzmNL3XNXXT9bXcStiyvX1l9mVJHftjvZbfnBM3WFWtNfh0y0nHMx8
rI1HA3MWRpwMF2YjhM8Tg+Z52KngVmI4w+Gorkw6WKa7S3Tse75SV4T6dMBhoxED
PLnZF36joz5TC3dZTdGsh/JcapznkC+QWz46nCJihZPjRqMYw+1JwKiQSKH1LS1w
tyRbH4dE9nl8qF7io814pBt8b/lxIBjiMCZXgqm5nJKtwHZsK1DovinBB1ik9g6i
acFaFB9SLr9Ocuw07A4zj5xDTw3zifFv1yl5A/mHm6EzhOrEfBpZqRSqLPsLifmR
NINCjP8+kM8F6g==
-----END CERTIFICATE-----