Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File:                     qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier:          YNWdWPcXYGqlhyn5DxAaG/ngFWqPkhAAluMR78bmdWo=
Subject key identifier:   3F:95:01:3A:02:CC:11:71:8F:C3:04:9E:45:36:B7:3E:6C:39:A5:2E
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer:       /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial:       01962F746A8F94664AB72910A7C33C61681B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: A6zuxn1H3guTbpnaNMYmkw4FIbYX4afZzxjBeff+1mc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6a:8f:94:66:4a:b7:29:10:a7:c3:3c:61:68:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=3f95013a02cc11718fc3049e4536b73e6c39a52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:80:74:c8:5e:71:ec:a7:ac:73:0d:a8:9f:
                    31:12:bd:84:d1:44:e0:74:96:18:33:ee:50:e7:29:
                    ba:92:2a:47:4c:9f:71:88:dc:a6:43:01:c0:35:ed:
                    95:09:17:d8:ca:62:b4:fe:48:3b:74:db:66:97:e2:
                    cc:48:0d:64:06:31:c0:70:3f:b9:50:98:3d:08:98:
                    c5:78:50:e9:4d:7a:26:68:b1:69:27:fc:b5:ec:4a:
                    85:93:f4:b0:10:49:fc:18:ad:9e:d1:ec:57:43:cd:
                    91:b0:7b:40:ec:d3:0e:63:f3:c3:81:36:97:4d:42:
                    53:5d:01:0d:ca:f6:b7:ce:c5:0c:9a:6a:24:61:68:
                    96:1e:93:e9:28:bb:b4:10:d8:18:e5:a0:54:61:4f:
                    21:32:1d:5f:9e:3e:d5:65:66:e7:0e:33:16:96:13:
                    a8:60:80:06:fa:04:4c:6d:2b:e1:00:5f:d8:c9:c6:
                    a3:31:b8:e8:4c:50:17:32:97:9c:52:60:da:2d:9e:
                    ae:0e:17:df:90:9c:d6:9c:2c:83:d8:a1:0c:10:26:
                    7e:62:91:73:08:29:49:60:2c:6e:31:9e:1c:ea:30:
                    6a:4c:1b:26:56:24:84:bb:e0:15:80:51:4d:69:d8:
                    a6:58:b1:6f:54:f8:37:e6:2b:ef:64:c5:40:16:2f:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:01:3A:02:CC:11:71:8F:C3:04:9E:45:36:B7:3E:6C:39:A5:2E
            X509v3 Authority Key Identifier:
                keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:67:e0:45:53:cf:e9:33:de:05:30:1e:0c:2f:d5:04:86:e9:
         96:52:e9:21:59:a9:0a:b1:2c:88:b2:49:fc:4d:40:a7:6b:ef:
         83:75:bd:ee:7a:a6:5b:29:91:97:ad:06:3f:93:1a:97:39:3d:
         87:da:7d:98:ab:62:44:dd:af:88:77:5b:a7:c3:d6:07:62:39:
         cf:2a:2c:7b:e7:bc:b5:c8:1b:99:03:d6:65:6e:4b:32:ad:e0:
         cb:2c:23:22:1d:c7:45:55:d2:b4:fa:3c:0a:53:40:4f:e0:a9:
         c5:fb:06:ed:15:ba:c2:46:e7:03:72:95:53:08:35:e7:66:aa:
         ef:7f:5d:6c:9f:76:4b:14:e6:cd:b2:10:bd:b4:03:dc:b9:44:
         62:b5:d5:a3:4c:f8:a3:ac:e5:d6:2d:06:37:79:27:56:8b:35:
         94:a5:12:67:25:08:31:b8:24:d2:27:22:80:35:1e:dd:9e:da:
         80:d3:27:9d:4c:fd:59:80:a6:20:77:eb:40:d5:b3:42:35:8c:
         c3:58:4d:bd:b9:9a:a1:b3:50:ce:79:9c:e4:6a:b9:35:56:a9:
         f1:aa:df:89:aa:96:1f:17:39:e0:65:3f:e6:16:e8:8f:2c:09:
         ac:1a:af:5c:27:27:d7:ca:90:60:dd:c0:53:3a:35:40:b5:61:
         1f:dd:bd:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGqPlGZKtykQp8M8YWgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMTBiZTk5MWYzZGI4OTUwOTcxMGMyMDY3NmRmN2E4YTRi
ZmUxYjQwHhcNMjUwNDEzMTQwMTIwWhcNMjUwNDE0MTQwMTIwWjAzMTEwLwYDVQQD
EygzZjk1MDEzYTAyY2MxMTcxOGZjMzA0OWU0NTM2YjczZTZjMzlhNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjOAdMheceynrHMNqJ8xEr2E0UTg
dJYYM+5Q5ym6kipHTJ9xiNymQwHANe2VCRfYymK0/kg7dNtml+LMSA1kBjHAcD+5
UJg9CJjFeFDpTXomaLFpJ/y17EqFk/SwEEn8GK2e0exXQ82RsHtA7NMOY/PDgTaX
TUJTXQENyva3zsUMmmokYWiWHpPpKLu0ENgY5aBUYU8hMh1fnj7VZWbnDjMWlhOo
YIAG+gRMbSvhAF/YycajMbjoTFAXMpecUmDaLZ6uDhffkJzWnCyD2KEMECZ+YpFz
CClJYCxuMZ4c6jBqTBsmViSEu+AVgFFNadimWLFvVPg35ivvZMVAFi+Y/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+VAToCzBFxj8MEnkU2tz5sOaUuMB8GA1UdIwQY
MBaAFKoQvpkfPbiVCXEMIGdt96ikv+G0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWhDLW1SODl1SlVKY1F3Z1oyMzNxS1NfNGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzNjUtOGQxNS00MTI1LTkwMTct
MTgzZTJlNzIzMDFiLzEvcWhDLW1SODl1SlVKY1F3Z1oyMzNxS1NfNGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzUzNjUtOGQxNS00MTI1LTkwMTctMTgzZTJlNzIzMDFi
LzEvcWhDLW1SODl1SlVKY1F3Z1oyMzNxS1NfNGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWfgRVPP
6TPeBTAeDC/VBIbpllLpIVmpCrEsiLJJ/E1Ap2vvg3W97nqmWymRl60GP5Malzk9
h9p9mKtiRN2viHdbp8PWB2I5zyose+e8tcgbmQPWZW5LMq3gyywjIh3HRVXStPo8
ClNAT+CpxfsG7RW6wkbnA3KVUwg152aq739dbJ92SxTmzbIQvbQD3LlEYrXVo0z4
o6zl1i0GN3knVos1lKUSZyUIMbgk0icigDUe3Z7agNMnnUz9WYCmIHfrQNWzQjWM
w1hNvbmaobNQznmc5Gq5NVap8arfiaqWHxc54GU/5hbojywJrBqvXCcn18qQYN3A
Uzo1QLVhH9296w==
-----END CERTIFICATE-----