Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File:                     QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier:          heJ9uxRAAWPEwIiIMQDDcfwiciTD3BCQ0sF5kJZ8Dzg=
Subject key identifier:   90:2F:31:BB:08:94:CC:96:B8:32:1D:B9:86:8D:72:83:96:A4:F9:CD
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer:       /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial:       01962F3DB80BB7C61A90DA5FADD6923FA9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number:          1046
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: MZvK5ANpFrWQotS/6TBHDPufVnkXlhshix3p8lYHQu8=)
                          2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b8:0b:b7:c6:1a:90:da:5f:ad:d6:92:3f:a9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=902f31bb0894cc96b8321db9868d728396a4f9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:2d:59:9c:1f:22:6b:d1:20:75:cf:65:62:
                    c0:ef:3b:3b:0b:59:4e:82:de:54:8d:a8:a0:98:57:
                    fb:42:15:c7:c7:5c:5a:e0:f0:6f:75:29:bb:9e:24:
                    2b:f1:58:84:e6:fb:cc:06:6d:ed:5b:61:93:bf:bc:
                    02:76:c8:38:07:cf:b7:db:d1:46:2d:cc:ad:98:80:
                    4f:b4:d0:b1:c6:c9:c6:f9:56:d0:3e:15:dc:1a:4c:
                    61:1b:8b:a1:fb:37:e4:18:1d:d2:5d:cb:a6:fa:77:
                    f4:1b:99:dd:bf:4a:74:53:62:2c:48:65:fd:12:2e:
                    32:bf:5c:1c:25:8f:07:4d:a1:56:98:bb:5b:ae:80:
                    a9:6c:a6:5e:1c:63:b3:00:81:26:06:df:87:30:f0:
                    c7:45:c4:4a:51:59:b3:1f:be:e4:d3:06:5a:c3:2b:
                    92:a4:85:96:01:ad:f3:93:e2:dc:1f:4c:99:b8:6a:
                    e0:3b:76:7d:66:c3:18:ca:9e:25:10:d4:5f:31:af:
                    c2:21:43:d2:cd:8f:29:09:8c:e0:c6:bc:4f:2e:26:
                    d3:93:cd:d5:80:3d:41:37:28:9b:46:cb:9e:41:48:
                    0e:20:32:47:d3:a8:17:a9:02:3b:e2:c5:a6:6a:67:
                    97:fd:b7:ac:8e:20:ef:1f:f2:e3:20:02:22:88:23:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:31:BB:08:94:CC:96:B8:32:1D:B9:86:8D:72:83:96:A4:F9:CD
            X509v3 Authority Key Identifier:
                keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b0:d9:e6:39:20:d2:e4:9d:d8:0e:93:d5:2d:21:13:f9:7b:
         00:a0:1c:a9:33:d8:78:29:ed:81:90:f8:48:d4:09:83:f8:3e:
         8c:b4:62:dc:52:89:e6:51:5f:96:57:02:ce:c7:37:35:d7:b7:
         48:14:1a:f7:e4:51:b8:50:90:8b:74:75:c2:93:2d:a7:f7:ce:
         e1:63:c6:c3:a7:e7:0b:46:ea:cd:ed:9d:b4:89:d9:6a:a6:6a:
         7d:e3:a2:ee:04:f8:2e:30:9d:0d:37:70:85:0c:c2:6d:05:90:
         e7:9f:65:22:3d:69:58:da:69:37:75:86:bc:8d:6b:30:76:04:
         56:3e:04:cb:82:db:6d:fe:a1:ba:66:e4:6e:09:47:8c:68:b2:
         bc:98:2c:fb:38:49:01:04:a5:20:9c:67:a5:89:dd:77:46:1d:
         5a:39:d1:c5:b3:05:21:8f:4d:01:41:46:be:3c:28:f3:12:c1:
         aa:7d:0d:6d:13:03:8b:8c:d1:26:b4:f4:ad:1d:fe:4c:79:4d:
         21:96:8d:57:ac:92:82:a6:f1:7f:ff:c2:5f:5f:4e:90:1f:1a:
         28:9b:0c:b2:f1:c9:73:6d:14:72:51:65:49:e7:26:c4:4a:de:
         7d:a4:51:22:a5:75:b4:e1:1d:bd:40:89:80:37:e4:7b:1e:40:
         23:cb:27:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbgLt8YakNpfrdaSP6nbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk
NGU1OTIwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
Eyg5MDJmMzFiYjA4OTRjYzk2YjgzMjFkYjk4NjhkNzI4Mzk2YTRmOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXgtWZwfImvRIHXPZWLA7zs7C1lO
gt5UjaigmFf7QhXHx1xa4PBvdSm7niQr8ViE5vvMBm3tW2GTv7wCdsg4B8+329FG
LcytmIBPtNCxxsnG+VbQPhXcGkxhG4uh+zfkGB3SXcum+nf0G5ndv0p0U2IsSGX9
Ei4yv1wcJY8HTaFWmLtbroCpbKZeHGOzAIEmBt+HMPDHRcRKUVmzH77k0wZawyuS
pIWWAa3zk+LcH0yZuGrgO3Z9ZsMYyp4lENRfMa/CIUPSzY8pCYzgxrxPLibTk83V
gD1BNyibRsueQUgOIDJH06gXqQI74sWmameX/besjiDvH/LjIAIiiCNgFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAvMbsIlMyWuDIduYaNcoOWpPnNMB8GA1UdIwQY
MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt
MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4
LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrDZ5jkg
0uSd2A6T1S0hE/l7AKAcqTPYeCntgZD4SNQJg/g+jLRi3FKJ5lFfllcCzsc3Nde3
SBQa9+RRuFCQi3R1wpMtp/fO4WPGw6fnC0bqze2dtInZaqZqfeOi7gT4LjCdDTdw
hQzCbQWQ559lIj1pWNppN3WGvI1rMHYEVj4Ey4Lbbf6humbkbglHjGiyvJgs+zhJ
AQSlIJxnpYndd0YdWjnRxbMFIY9NAUFGvjwo8xLBqn0NbRMDi4zRJrT0rR3+THlN
IZaNV6ySgqbxf//CX19OkB8aKJsMsvHJc20UclFlSecmxErefaRRIqV1tOEdvUCJ
gDfkex5AI8snmA==
-----END CERTIFICATE-----