Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File:                     qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier:          bOTBjK+xmO3mNFQOvgC74rosihMX2BwtTPOG015MSec=
Subject key identifier:   54:F0:65:46:56:A3:B9:D5:79:2F:36:77:4E:EE:BF:7F:62:55:28:7D
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer:       /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial:       01962E61C8A71C9615F6AFADDABC817903CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number:          06BD
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: EWIMCs3S9XYZ9idG6ko+zWeeE6rE31OANsHvy7mgtF0=)
                          2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c8:a7:1c:96:15:f6:af:ad:da:bc:81:79:03:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=54f0654656a3b9d5792f36774eeebf7f6255287d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:53:33:6a:64:e8:95:55:5c:67:1a:48:93:
                    86:35:f0:7b:cf:81:c0:d7:cf:a5:a0:b6:62:c8:09:
                    f4:2c:9b:5d:69:af:12:7e:d4:9a:f5:56:c3:b9:fc:
                    7e:55:c3:2e:9e:8f:27:08:f2:64:cf:60:22:b2:75:
                    48:bd:7f:de:32:83:d8:91:13:2c:f0:f9:e9:ea:91:
                    82:7c:fd:9b:f4:d5:96:23:b3:48:93:bc:45:f5:9f:
                    0a:2b:db:23:13:98:51:66:10:77:55:25:32:72:7c:
                    f0:21:f9:ce:d7:cb:4a:4b:76:ee:2a:e3:c4:30:7d:
                    ef:eb:c0:9c:20:3e:53:2d:7e:b9:9a:53:e2:e3:c8:
                    af:9a:f8:6f:98:9c:3f:09:49:3b:35:8d:cd:d6:09:
                    94:d1:b7:96:da:c2:92:5f:d5:96:75:a0:8e:2c:14:
                    44:ee:b8:d6:42:6f:8e:52:d9:f0:9e:00:04:91:e5:
                    c2:74:9e:0c:99:b7:3d:6d:71:09:25:03:0a:79:d8:
                    ff:2b:5b:e6:2d:fa:ed:95:d9:2c:23:81:5c:b2:a4:
                    16:bb:4e:49:a2:d4:70:d5:aa:bc:dd:f5:f4:b9:fe:
                    ea:fd:1f:2a:16:8f:de:f3:b0:11:76:7b:c3:3b:fb:
                    f1:38:41:96:ed:8c:0a:62:cf:2c:da:24:57:01:89:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F0:65:46:56:A3:B9:D5:79:2F:36:77:4E:EE:BF:7F:62:55:28:7D
            X509v3 Authority Key Identifier:
                keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:a4:d9:42:d6:73:59:0c:af:af:8f:fe:e5:b5:5a:4f:f2:
         7e:cf:d8:27:86:f1:45:18:ad:67:9d:86:cc:77:9d:58:4b:cf:
         ce:f0:80:dd:cc:41:22:55:4d:c3:a0:6b:7b:37:3a:f0:09:96:
         0a:8b:b7:ac:57:b7:b4:3e:aa:8b:77:e6:0c:68:14:73:8f:ae:
         07:9c:f8:94:fc:33:f3:54:76:b2:a5:03:ce:51:8a:9f:38:18:
         44:35:b7:04:3f:49:0c:39:41:9a:6e:fb:30:9e:09:44:76:ea:
         f4:87:50:05:e9:47:98:82:1e:77:8e:96:e8:4f:49:66:0e:12:
         37:0e:cb:60:73:4b:75:3e:15:3d:df:c1:69:32:73:cd:b6:e4:
         a2:38:0a:3d:f2:9b:ca:5d:4e:0b:d1:3d:55:5f:d2:c7:67:f2:
         28:27:a7:45:da:79:b1:d4:a1:c7:07:88:67:60:0a:67:7f:b3:
         29:04:3a:e5:e8:93:a8:55:79:c3:2d:4f:f1:1d:b1:00:bb:32:
         c8:bc:9c:72:5b:95:17:c0:14:3a:c6:97:ea:53:f3:aa:ae:5e:
         0f:5a:eb:48:1b:52:8c:91:f5:03:1a:ab:bd:1c:a6:65:9a:c0:
         7d:43:7f:67:e6:6a:ec:a5:b2:d9:00:3f:69:21:d1:a1:8e:da:
         24:da:f1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcinHJYV9q+t2ryBeQPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw
ZDlkNDUwHhcNMjUwNDEzMDkwMTIyWhcNMjUwNDE0MDkwMTIyWjAzMTEwLwYDVQQD
Eyg1NGYwNjU0NjU2YTNiOWQ1NzkyZjM2Nzc0ZWVlYmY3ZjYyNTUyODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ZTM2pk6JVVXGcaSJOGNfB7z4HA
18+loLZiyAn0LJtdaa8SftSa9VbDufx+VcMuno8nCPJkz2AisnVIvX/eMoPYkRMs
8Pnp6pGCfP2b9NWWI7NIk7xF9Z8KK9sjE5hRZhB3VSUycnzwIfnO18tKS3buKuPE
MH3v68CcID5TLX65mlPi48ivmvhvmJw/CUk7NY3N1gmU0beW2sKSX9WWdaCOLBRE
7rjWQm+OUtnwngAEkeXCdJ4Mmbc9bXEJJQMKedj/K1vmLfrtldksI4FcsqQWu05J
otRw1aq83fX0uf7q/R8qFo/e87ARdnvDO/vxOEGW7YwKYs8s2iRXAYlwYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTwZUZWo7nVeS82d07uv39iVSh9MB8GA1UdIwQY
MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt
NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi
LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcGk2ULW
c1kMr6+P/uW1Wk/yfs/YJ4bxRRitZ52GzHedWEvPzvCA3cxBIlVNw6Brezc68AmW
Cou3rFe3tD6qi3fmDGgUc4+uB5z4lPwz81R2sqUDzlGKnzgYRDW3BD9JDDlBmm77
MJ4JRHbq9IdQBelHmIIed46W6E9JZg4SNw7LYHNLdT4VPd/BaTJzzbbkojgKPfKb
yl1OC9E9VV/Sx2fyKCenRdp5sdShxweIZ2AKZ3+zKQQ65eiTqFV5wy1P8R2xALsy
yLyccluVF8AUOsaX6lPzqq5eD1rrSBtSjJH1AxqrvRymZZrAfUN/Z+Zq7KWy2QA/
aSHRoY7aJNrx5Q==
-----END CERTIFICATE-----