Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File:                     qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier:          fsOS3bs3bKt/raRPht9sgmfUCsI3q1UDUW10MQwGcso=
Subject key identifier:   BA:49:6C:9A:D4:71:7E:01:4C:31:6C:61:6F:FC:5B:F9:F6:FD:8C:C9
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer:       /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial:       01962E61DC922F7C74653FDD2C67281AFE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number:          0255
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
                          2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: 28eD26JTlktmSaYjjpQKMm/eiRiwU2UM04+Y6J02BNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:92:2f:7c:74:65:3f:dd:2c:67:28:1a:fe:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=ba496c9ad4717e014c316c616ffc5bf9f6fd8cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:06:d3:69:cc:19:30:80:0a:c3:e1:d1:65:
                    22:31:57:fb:a9:94:80:04:af:42:34:32:44:70:d3:
                    50:7c:bc:fb:c5:34:d3:9e:d0:77:e0:bb:60:93:f1:
                    88:89:74:25:26:8f:94:a0:5e:90:0b:3b:66:9e:0e:
                    f1:21:29:64:dd:47:b1:14:c2:59:f0:90:33:df:bb:
                    62:6b:6b:71:51:d1:c4:a7:05:d2:a9:f9:25:cb:eb:
                    05:72:48:d9:71:1d:a7:b6:f3:05:42:c8:d3:0c:90:
                    99:dd:e4:a6:cf:8e:c2:e1:3d:19:25:95:27:b0:6e:
                    c4:ee:ce:97:f4:45:03:f7:95:b1:87:83:ea:ae:3f:
                    d3:9f:64:bc:14:49:11:50:fd:60:96:df:04:e7:68:
                    69:04:d3:89:14:a5:6a:5e:29:d4:05:10:8e:12:6a:
                    4d:f8:c3:61:b3:f9:3d:d1:74:24:1d:5f:df:2f:3e:
                    b0:c7:3e:e1:bd:0b:24:ad:cc:25:55:f8:69:fd:61:
                    3d:d3:ce:fa:c6:e4:52:71:7d:e0:18:04:0a:b4:03:
                    fe:22:4e:57:60:6b:f1:2b:4f:57:bc:e4:ba:7f:ef:
                    56:bb:bd:e5:5b:e0:37:01:46:01:2f:61:5f:b5:81:
                    7b:53:80:91:12:f6:57:21:65:78:fd:96:dc:07:3f:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:6C:9A:D4:71:7E:01:4C:31:6C:61:6F:FC:5B:F9:F6:FD:8C:C9
            X509v3 Authority Key Identifier:
                keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:0d:8f:2d:74:cb:d8:cd:bb:ad:ed:90:48:d4:ff:ce:fe:
         6b:cf:60:0f:eb:08:55:e0:1b:d4:dd:f1:37:bf:cf:73:21:9b:
         f4:2e:44:58:ba:19:3c:32:be:79:fd:81:46:98:18:d3:4e:c5:
         ca:c9:75:fb:ae:5c:11:55:fa:73:2d:33:85:bc:ea:ca:08:ae:
         14:96:ce:b5:2d:75:34:01:78:e5:04:02:a5:c9:df:3b:a7:ec:
         99:dc:3d:0a:c2:e9:60:67:aa:38:f3:3d:80:ac:16:41:04:a2:
         de:6c:70:e2:1f:e9:f5:c6:5f:f5:8a:d9:36:6d:a8:a4:43:1f:
         bc:29:0c:35:df:fd:de:42:3b:51:0b:a0:f2:be:a9:09:97:6e:
         73:7b:81:bf:dc:d8:97:81:2c:31:28:40:a2:8e:89:21:c9:3c:
         7f:21:d9:67:0d:91:c6:e6:34:b3:4d:6a:6a:11:91:80:d6:10:
         3c:54:9a:eb:a2:41:64:40:c3:4a:71:c1:81:6d:9c:3c:6e:6a:
         df:f5:fe:23:83:ca:17:f9:bf:00:a0:fe:12:33:4e:68:22:1a:
         94:b7:5c:db:ee:a5:65:4b:f9:d0:1b:09:61:d2:bd:27:bc:88:
         d4:98:98:d1:b4:7a:74:bb:d9:b5:29:52:59:02:69:d1:08:62:
         13:4d:d6:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdySL3x0ZT/dLGcoGv5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk
NjRmZTQwHhcNMjUwNDEzMDkwMTI3WhcNMjUwNDE0MDkwMTI3WjAzMTEwLwYDVQQD
EyhiYTQ5NmM5YWQ0NzE3ZTAxNGMzMTZjNjE2ZmZjNWJmOWY2ZmQ4Y2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjAG02nMGTCACsPh0WUiMVf7qZSA
BK9CNDJEcNNQfLz7xTTTntB34Ltgk/GIiXQlJo+UoF6QCztmng7xISlk3UexFMJZ
8JAz37tia2txUdHEpwXSqfkly+sFckjZcR2ntvMFQsjTDJCZ3eSmz47C4T0ZJZUn
sG7E7s6X9EUD95Wxh4Pqrj/Tn2S8FEkRUP1glt8E52hpBNOJFKVqXinUBRCOEmpN
+MNhs/k90XQkHV/fLz6wxz7hvQskrcwlVfhp/WE90876xuRScX3gGAQKtAP+Ik5X
YGvxK09XvOS6f+9Wu73lW+A3AUYBL2FftYF7U4CREvZXIWV4/ZbcBz+KywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpJbJrUcX4BTDFsYW/8W/n2/YzJMB8GA1UdIwQY
MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt
NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz
LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH58Njy10
y9jNu63tkEjU/87+a89gD+sIVeAb1N3xN7/PcyGb9C5EWLoZPDK+ef2BRpgY007F
ysl1+65cEVX6cy0zhbzqygiuFJbOtS11NAF45QQCpcnfO6fsmdw9CsLpYGeqOPM9
gKwWQQSi3mxw4h/p9cZf9YrZNm2opEMfvCkMNd/93kI7UQug8r6pCZduc3uBv9zY
l4EsMShAoo6JIck8fyHZZw2RxuY0s01qahGRgNYQPFSa66JBZEDDSnHBgW2cPG5q
3/X+I4PKF/m/AKD+EjNOaCIalLdc2+6lZUv50BsJYdK9J7yI1JiY0bR6dLvZtSlS
WQJp0QhiE03WGw==
-----END CERTIFICATE-----