Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File:                     qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier:          3tumEHm0FQ+CxIoiUjI3HC7pq3O/xVs92wbOsGZ+yRo=
Subject key identifier:   19:AF:27:76:70:C2:05:C1:2E:A7:70:C0:87:44:24:E3:DC:A9:F1:19
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer:       /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial:       01962E2ACEE2F8202D626A2DB165D2B63E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number:          0340
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
                          2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: Gd95Lw6u/QYwedLcKuRpqHPXekBupSg6VzaLc9shV4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:e2:f8:20:2d:62:6a:2d:b1:65:d2:b6:3e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=19af277670c205c12ea770c0874424e3dca9f119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:37:66:63:49:5f:03:77:fc:bb:95:aa:03:
                    7d:ed:8e:4b:10:14:12:6c:37:28:36:66:8c:98:7f:
                    b9:f1:35:31:d7:61:d4:43:c7:51:bc:9d:ef:d7:89:
                    fe:15:f1:46:45:2c:70:95:20:4b:d5:54:ca:e4:47:
                    36:57:e1:c8:d6:0e:f7:13:11:35:3f:ab:dc:0c:b0:
                    72:f1:d4:04:54:ed:3f:b5:45:21:d1:fa:56:70:10:
                    af:df:cf:7d:f3:ed:b2:44:ee:9e:18:bd:9f:b7:e5:
                    cb:82:75:4b:38:68:13:2f:67:dd:78:51:fe:b1:89:
                    af:2b:03:c1:f9:7f:05:2f:f0:5b:38:19:70:a0:5d:
                    63:31:0b:79:13:05:75:bb:8a:84:5a:05:2f:2a:f7:
                    37:2b:2d:49:91:f7:a7:a5:98:25:06:0b:39:49:b3:
                    b1:63:14:cb:34:66:c9:80:1e:f3:2b:43:7f:61:07:
                    a1:b8:d4:85:d8:f6:77:de:1c:8b:10:23:93:37:78:
                    0c:d0:e6:90:49:94:fa:ac:1d:c2:26:13:87:b7:fb:
                    2d:2d:44:d9:5e:aa:59:87:d8:cc:a3:ee:e8:c4:26:
                    0f:9b:2c:ab:66:64:ec:c4:c8:c8:50:1f:2a:a5:25:
                    7c:8d:bd:63:b2:20:b8:42:4d:ae:25:5f:3b:7d:b5:
                    93:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:27:76:70:C2:05:C1:2E:A7:70:C0:87:44:24:E3:DC:A9:F1:19
            X509v3 Authority Key Identifier:
                keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:0b:fe:b1:7f:54:06:ad:58:d6:5b:4c:e5:30:3b:8f:ad:
         82:b5:7f:49:93:ee:89:34:e1:bb:1d:ad:0d:d7:5e:43:86:b3:
         6f:98:e8:5f:9a:46:a0:5d:58:1f:59:f5:e4:b4:0b:53:5b:d5:
         2b:13:d7:74:d4:8c:b4:b7:90:20:5f:ee:d1:d9:20:fc:80:7d:
         d3:92:f4:b5:d0:25:da:08:ce:bb:35:a8:1d:e5:e4:fb:92:fe:
         4e:21:15:f4:22:6c:03:e0:48:b7:1e:7a:c4:87:df:c4:e1:bc:
         3e:b1:2e:9a:0d:e3:4e:b6:15:9e:f7:cd:c0:24:e9:57:8d:20:
         10:24:8a:96:99:30:07:af:12:d4:55:4a:03:f4:fe:3f:a2:6d:
         3e:ae:47:0c:31:b1:99:24:3b:9c:74:ee:6f:97:16:9f:40:ad:
         43:0e:25:eb:8e:22:39:04:1a:37:05:bf:89:e1:71:0d:17:58:
         05:29:85:cd:b1:8d:09:92:00:72:c8:68:01:fc:82:8e:01:a5:
         83:50:43:d0:85:05:a7:2b:0c:2e:36:8b:03:32:de:10:db:c1:
         5b:14:28:d4:f3:99:3a:f5:7d:4c:11:14:91:44:8e:bb:dc:eb:
         79:52:63:8c:0a:63:45:7e:24:2d:c4:59:e1:a5:fc:f7:12:28:
         6d:4b:66:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKs7i+CAtYmotsWXStj5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli
NjIxZTQwHhcNMjUwNDEzMDgwMTE5WhcNMjUwNDE0MDgwMTE5WjAzMTEwLwYDVQQD
EygxOWFmMjc3NjcwYzIwNWMxMmVhNzcwYzA4NzQ0MjRlM2RjYTlmMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z03ZmNJXwN3/LuVqgN97Y5LEBQS
bDcoNmaMmH+58TUx12HUQ8dRvJ3v14n+FfFGRSxwlSBL1VTK5Ec2V+HI1g73ExE1
P6vcDLBy8dQEVO0/tUUh0fpWcBCv38998+2yRO6eGL2ft+XLgnVLOGgTL2fdeFH+
sYmvKwPB+X8FL/BbOBlwoF1jMQt5EwV1u4qEWgUvKvc3Ky1JkfenpZglBgs5SbOx
YxTLNGbJgB7zK0N/YQehuNSF2PZ33hyLECOTN3gM0OaQSZT6rB3CJhOHt/stLUTZ
XqpZh9jMo+7oxCYPmyyrZmTsxMjIUB8qpSV8jb1jsiC4Qk2uJV87fbWT7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmvJ3ZwwgXBLqdwwIdEJOPcqfEZMB8GA1UdIwQY
MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt
YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1
LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATX0L/rF/
VAatWNZbTOUwO4+tgrV/SZPuiTThux2tDddeQ4azb5joX5pGoF1YH1n15LQLU1vV
KxPXdNSMtLeQIF/u0dkg/IB905L0tdAl2gjOuzWoHeXk+5L+TiEV9CJsA+BItx56
xIffxOG8PrEumg3jTrYVnvfNwCTpV40gECSKlpkwB68S1FVKA/T+P6JtPq5HDDGx
mSQ7nHTub5cWn0CtQw4l644iOQQaNwW/ieFxDRdYBSmFzbGNCZIAcshoAfyCjgGl
g1BD0IUFpysMLjaLAzLeENvBWxQo1POZOvV9TBEUkUSOu9zreVJjjApjRX4kLcRZ
4aX89xIobUtm9A==
-----END CERTIFICATE-----