Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File:                     qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier:          SkMJ3hsF2S2AlsN3legBrfs9FdTLjQIvI31YBdHSP1k=
Subject key identifier:   5D:FB:44:C8:EE:34:A1:F1:73:15:BE:C5:20:FA:92:BF:22:E5:16:EA
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer:       /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial:       01962E617864C284B1A7D8F49AC0BD8753F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
                          2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: tqqoAcl8kPbFh2T6c/91RIkhbdMJXqEOkC4wR6O/1rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:78:64:c2:84:b1:a7:d8:f4:9a:c0:bd:87:53:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=5dfb44c8ee34a1f17315bec520fa92bf22e516ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:2e:8f:c0:c9:91:04:e8:0b:b7:41:e1:d8:
                    dc:d8:d8:60:4a:44:03:05:3e:57:67:7a:fa:22:dc:
                    cf:ad:07:73:ef:0a:b7:72:38:5d:1a:c0:ca:f3:ae:
                    e5:65:1c:ac:b5:f6:68:95:6d:6c:7d:32:0f:c7:9b:
                    e3:65:ea:01:ce:77:f7:69:9d:67:42:30:1d:f7:34:
                    21:06:64:ef:f2:a7:b0:e6:d1:06:ac:a5:55:64:45:
                    c9:45:03:45:90:53:5d:e0:5d:f7:d9:86:7f:c2:90:
                    24:c0:ce:07:76:0c:0d:fe:66:59:89:27:05:99:e4:
                    c0:42:9f:75:26:d3:e5:03:9e:75:43:78:52:15:a5:
                    e5:cd:63:a0:28:e1:16:49:4c:ba:f6:62:a2:77:d7:
                    55:38:3a:74:e9:e2:0a:4e:09:c1:97:0a:49:3a:da:
                    a6:2b:df:f8:2d:13:26:9b:72:fc:60:7b:45:15:b0:
                    ac:31:19:3c:b1:67:ec:8b:3d:0a:84:65:7b:0a:d2:
                    0d:41:ea:f6:a5:69:b4:30:81:0f:ff:61:a0:00:11:
                    f3:57:49:db:32:64:b9:fd:1b:22:8f:8b:63:e5:e9:
                    43:28:fc:81:22:61:f5:e1:66:fa:1a:81:1c:56:a1:
                    b2:99:83:ab:b1:78:7b:7e:15:79:58:10:9a:6e:2e:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FB:44:C8:EE:34:A1:F1:73:15:BE:C5:20:FA:92:BF:22:E5:16:EA
            X509v3 Authority Key Identifier:
                keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:21:83:de:05:74:e5:e9:0e:0e:20:e2:2c:3c:fc:78:fc:3c:
         83:80:6c:5b:35:22:81:59:9d:f1:e6:91:f9:c7:24:df:67:75:
         e4:92:c5:2b:88:22:6d:85:8c:5e:41:cf:5d:5a:c1:35:1d:87:
         d0:3f:f2:0b:00:2f:f8:cc:8e:62:8f:59:79:c7:ea:46:f2:9c:
         3c:3b:c8:56:ff:5e:95:d7:44:75:77:dc:0e:2a:64:6b:31:99:
         dd:10:6c:8e:7e:83:30:91:8a:a8:93:8c:bc:a8:86:1d:9b:29:
         75:a0:7a:32:a8:18:62:a1:78:a1:25:2c:2a:af:e5:62:a5:60:
         a4:0e:1d:75:ce:21:8f:1b:b3:2a:49:9c:87:77:cf:cc:27:b1:
         c3:57:b5:68:72:57:cb:78:8a:b7:94:06:64:a3:ea:03:09:ce:
         0c:27:81:1a:c6:7a:91:bb:af:6c:76:50:34:75:43:e3:81:8a:
         d4:c2:15:9b:8b:b9:59:a8:fa:78:ce:2f:25:39:56:f3:33:30:
         2d:89:66:5f:9e:7f:29:78:04:64:99:1d:a8:27:cf:4c:4c:20:
         5d:60:a7:42:0f:e1:fc:3e:f6:1c:0d:dc:5c:cd:05:3c:28:ed:
         35:96:9d:16:ea:89:42:77:1b:9a:a1:40:da:e1:86:67:6d:72:
         bb:9e:0d:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXhkwoSxp9j0msC9h1PyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz
ZjIzYmUwHhcNMjUwNDEzMDkwMTAxWhcNMjUwNDE0MDkwMTAxWjAzMTEwLwYDVQQD
Eyg1ZGZiNDRjOGVlMzRhMWYxNzMxNWJlYzUyMGZhOTJiZjIyZTUxNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJIuj8DJkQToC7dB4djc2NhgSkQD
BT5XZ3r6ItzPrQdz7wq3cjhdGsDK867lZRystfZolW1sfTIPx5vjZeoBznf3aZ1n
QjAd9zQhBmTv8qew5tEGrKVVZEXJRQNFkFNd4F332YZ/wpAkwM4HdgwN/mZZiScF
meTAQp91JtPlA551Q3hSFaXlzWOgKOEWSUy69mKid9dVODp06eIKTgnBlwpJOtqm
K9/4LRMmm3L8YHtFFbCsMRk8sWfsiz0KhGV7CtINQer2pWm0MIEP/2GgABHzV0nb
MmS5/Rsij4tj5elDKPyBImH14Wb6GoEcVqGymYOrsXh7fhV5WBCabi5HfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF37RMjuNKHxcxW+xSD6kr8i5RbqMB8GA1UdIwQY
MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt
MDA3OTc4YmRiMDUyLzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy
LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiGD3gV0
5ekODiDiLDz8ePw8g4BsWzUigVmd8eaR+cck32d15JLFK4gibYWMXkHPXVrBNR2H
0D/yCwAv+MyOYo9ZecfqRvKcPDvIVv9elddEdXfcDipkazGZ3RBsjn6DMJGKqJOM
vKiGHZspdaB6MqgYYqF4oSUsKq/lYqVgpA4ddc4hjxuzKkmch3fPzCexw1e1aHJX
y3iKt5QGZKPqAwnODCeBGsZ6kbuvbHZQNHVD44GK1MIVm4u5Waj6eM4vJTlW8zMw
LYlmX55/KXgEZJkdqCfPTEwgXWCnQg/h/D72HA3cXM0FPCjtNZadFuqJQncbmqFA
2uGGZ21yu54Njw==
-----END CERTIFICATE-----