Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File:                     qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier:          A0IzH6VqAz+/4iWqwLcmkYvL9+k4/vlLBwaKXfVEnJw=
Subject key identifier:   3C:E7:18:B4:A8:2A:3A:62:3B:46:D8:6E:8E:43:C0:A1:13:0F:D2:19
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer:       /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial:       01962E98CFDF23E7FB8B841A818C86DCF307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
                          2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: slXpybkrSsTfhEEk9P+MAxSgQ+gwHPoWy6huG7nMtH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cf:df:23:e7:fb:8b:84:1a:81:8c:86:dc:f3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=3ce718b4a82a3a623b46d86e8e43c0a1130fd219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:5d:ab:d8:72:f9:9a:02:3a:9c:39:80:7f:
                    fa:00:e3:1d:89:92:2d:93:b9:cd:1a:fe:5d:21:1c:
                    ab:8f:97:cb:66:8e:2a:eb:2f:32:a8:7e:3b:8b:cf:
                    2a:0c:bc:3f:10:78:84:2f:30:88:72:db:a8:7f:c8:
                    d4:4f:eb:89:88:47:66:57:5d:7b:b6:62:ad:5d:7b:
                    89:c1:49:bf:f3:89:e2:52:e6:f9:1b:6b:08:25:86:
                    5f:d1:1f:7d:37:ac:cc:0b:0e:d0:b7:b9:98:d5:b8:
                    fc:2c:0d:f8:79:3e:9a:ac:5a:08:41:31:5d:cb:02:
                    84:2f:89:12:86:ae:85:8b:71:ca:d4:4b:a3:42:1a:
                    f2:70:0a:8c:3a:98:c1:cf:69:64:84:d2:a7:e4:9d:
                    11:a6:e9:f8:76:ce:25:e8:57:58:73:5d:37:72:45:
                    7a:5c:f0:80:81:87:82:44:8b:c0:ae:a9:77:15:a1:
                    71:c0:8c:50:59:b3:30:1e:66:11:7d:7c:36:73:ff:
                    8f:24:66:d6:0b:8e:80:88:9b:f1:3a:6e:50:b7:39:
                    3c:69:55:c7:57:93:6c:09:06:42:f1:ca:1d:2b:01:
                    16:b4:ca:0f:09:17:40:a2:a8:ac:e2:fe:dd:8e:bf:
                    66:76:55:da:c8:6d:0f:50:ad:9c:e7:86:92:c8:6e:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:18:B4:A8:2A:3A:62:3B:46:D8:6E:8E:43:C0:A1:13:0F:D2:19
            X509v3 Authority Key Identifier:
                keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f3:2a:f2:26:4a:7e:93:41:a2:33:32:9e:f3:db:25:b9:81:
         86:68:ad:f1:ef:78:d5:5b:01:cd:3a:81:fb:1e:77:f1:17:b2:
         81:80:bf:05:10:a6:6c:91:28:8f:c0:79:1d:3a:60:d2:d2:0b:
         97:c8:05:71:08:9a:94:06:97:e4:95:ae:38:78:e4:e1:d5:bc:
         31:81:32:0e:f3:b5:7e:ad:db:f5:7b:2b:3d:09:f8:2b:93:74:
         7a:06:5e:8a:a8:ae:1d:b3:d0:61:46:2c:ff:12:16:30:3f:83:
         28:1e:0c:f6:f6:4f:c9:5c:d3:38:98:33:4a:8e:5d:9f:ae:22:
         17:68:66:61:a4:9a:8b:1c:7d:17:ee:f4:c1:a8:32:15:09:6e:
         7c:28:db:93:92:54:3e:2a:af:1b:7e:a3:fc:3d:ed:e7:14:4a:
         e0:97:ac:62:b6:dd:74:9b:12:e0:28:6d:b6:ed:d0:ae:46:cc:
         27:3e:df:02:51:53:a1:44:89:e5:4b:75:c5:a5:72:15:fc:01:
         8f:9d:4f:03:86:99:41:31:34:56:48:8e:65:fc:6a:31:56:a5:
         28:26:f5:cb:a6:1a:7d:6d:1a:f6:e2:08:a4:74:7c:eb:a7:90:
         92:29:d6:77:7b:6e:e4:69:37:46:b5:ff:4a:8b:62:81:e8:bb:
         1c:d2:ea:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumM/fI+f7i4QagYyG3PMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGVlYmVkOTc1M2Y1ODBiZWE3NWIzNTJlNzA2MzI1YTE4
ZDE0NDcwHhcNMjUwNDEzMTAwMTI4WhcNMjUwNDE0MTAwMTI4WjAzMTEwLwYDVQQD
EygzY2U3MThiNGE4MmEzYTYyM2I0NmQ4NmU4ZTQzYzBhMTEzMGZkMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcVdq9hy+ZoCOpw5gH/6AOMdiZIt
k7nNGv5dIRyrj5fLZo4q6y8yqH47i88qDLw/EHiELzCIctuof8jUT+uJiEdmV117
tmKtXXuJwUm/84niUub5G2sIJYZf0R99N6zMCw7Qt7mY1bj8LA34eT6arFoIQTFd
ywKEL4kShq6Fi3HK1EujQhrycAqMOpjBz2lkhNKn5J0Rpun4ds4l6FdYc103ckV6
XPCAgYeCRIvArql3FaFxwIxQWbMwHmYRfXw2c/+PJGbWC46AiJvxOm5Qtzk8aVXH
V5NsCQZC8codKwEWtMoPCRdAoqis4v7djr9mdlXayG0PUK2c54aSyG4cfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDznGLSoKjpiO0bYbo5DwKETD9IZMB8GA1UdIwQY
MBaAFKmO6+2XU/WAvqdbNS5wYyWhjRRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2Ut
NTJmNjkxOTEzOWM0LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNzQ3NDQtZWQ0OC00NzA3LWE2M2UtNTJmNjkxOTEzOWM0
LzEvcVk3cjdaZFQ5WUMtcDFzMUxuQmpKYUdORkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPMq8iZK
fpNBojMynvPbJbmBhmit8e941VsBzTqB+x538ReygYC/BRCmbJEoj8B5HTpg0tIL
l8gFcQialAaX5JWuOHjk4dW8MYEyDvO1fq3b9XsrPQn4K5N0egZeiqiuHbPQYUYs
/xIWMD+DKB4M9vZPyVzTOJgzSo5dn64iF2hmYaSaixx9F+70wagyFQlufCjbk5JU
PiqvG36j/D3t5xRK4JesYrbddJsS4Chttu3QrkbMJz7fAlFToUSJ5Ut1xaVyFfwB
j51PA4aZQTE0VkiOZfxqMValKCb1y6YafW0a9uIIpHR866eQkinWd3tu5Gk3RrX/
Sotigei7HNLqUQ==
-----END CERTIFICATE-----