Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          xC7wMuJTl7bPasj23KVMfT8ycek1oFfayMOcpiX3oaI=
Subject key identifier:   10:5B:E2:79:69:00:6D:2F:96:DE:49:C1:41:4E:24:84:0F:BA:2D:F3
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       01962ECF583BDCA0342353E96372598A57DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          10C9
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=)
                          2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=)
                          3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: b5/2Qyv/B9MqquyD/AyH+fCNsCT4o51zGxiMj+u1u5I=)
                          4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=)
                          5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=)
                          6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=)
                          7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=)
                          8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=)
                          9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=)
                          10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:58:3b:dc:a0:34:23:53:e9:63:72:59:8a:57:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=105be27969006d2f96de49c1414e24840fba2df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:6a:cb:f9:d5:e4:49:21:f2:53:bd:65:95:
                    68:9e:ac:35:de:7d:1e:61:32:1c:39:a8:d0:60:68:
                    51:a5:7a:78:a0:ad:31:8f:d7:82:2f:f4:37:16:b3:
                    b3:46:07:8d:f1:d1:3d:ae:f6:78:de:70:ba:88:4c:
                    84:90:1d:6c:2d:66:6d:a7:0e:14:1e:ea:87:77:8f:
                    c7:17:ed:e4:db:b7:77:52:98:d2:7b:bc:a4:e2:e9:
                    0b:a9:c1:f8:64:37:d6:52:fc:86:8b:24:fb:63:70:
                    99:75:11:76:69:58:ed:12:44:1c:09:46:24:72:57:
                    e3:c7:23:d5:7c:5d:97:6e:73:a0:82:d5:ac:75:a9:
                    2d:29:12:95:08:1a:7f:f5:54:06:ca:73:bf:a7:08:
                    d0:61:6e:8c:7e:b6:f9:e9:d8:44:dd:6d:ea:42:5b:
                    7a:b2:b8:9f:5a:28:68:d0:92:5d:e3:ab:b6:91:9c:
                    e6:b7:6d:cb:63:81:7c:89:39:57:ae:90:e2:05:44:
                    54:29:bc:de:90:c3:09:ac:60:cb:92:ff:f4:fe:07:
                    a8:5b:9b:4d:a3:d2:01:72:0c:12:d0:91:2f:56:d7:
                    63:67:7b:d3:44:b3:56:7d:b2:89:2a:35:21:53:b1:
                    7b:77:c2:07:7f:f8:0c:ac:49:e2:a1:f3:09:fa:3e:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:E2:79:69:00:6D:2F:96:DE:49:C1:41:4E:24:84:0F:BA:2D:F3
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5c:17:6b:2d:58:d3:84:fd:c8:b9:ce:ea:87:95:cc:f4:f3:
         ef:54:f6:2f:cf:b3:87:3d:71:94:8a:04:6e:20:2b:23:ab:68:
         1f:2f:e8:f7:e8:0b:9e:fb:b7:86:31:9b:10:9b:4d:b1:e1:8b:
         61:7f:b3:b8:69:34:ab:c5:23:3d:66:8d:78:99:7b:bc:8d:1a:
         fc:ff:ed:b6:e4:eb:ff:1e:de:2f:26:27:a0:88:e3:a7:95:39:
         06:f7:74:da:e9:42:c7:c2:96:8b:09:5d:bc:ac:0c:8e:c2:33:
         7a:7d:7c:67:0e:cb:5d:a8:bd:4e:1e:b4:37:30:79:b4:e4:0e:
         7f:c9:69:ff:13:7d:fa:f3:c2:9e:07:82:e7:01:99:f2:db:a5:
         dc:20:03:3d:7d:f0:7c:e6:0e:d3:30:f5:3d:74:f9:1f:11:cb:
         4a:1b:5e:e2:1a:b5:63:47:d7:54:3d:a3:32:15:fa:df:66:15:
         71:78:a3:01:14:a0:92:35:33:0d:42:7e:1f:81:eb:a0:56:c6:
         63:2b:6e:44:03:a4:54:dc:e7:3e:08:83:c1:f9:c6:30:51:29:
         c9:12:7d:d2:b0:97:d6:00:89:ce:1d:e4:28:0d:ff:ed:18:7c:
         9e:56:fe:e0:86:fc:dc:73:70:57:0b:0b:22:90:5f:aa:45:e2:
         f7:42:b8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1g73KA0I1PpY3JZilfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl
MmM0ZDcwHhcNMjUwNDEzMTEwMTAyWhcNMjUwNDE0MTEwMTAyWjAzMTEwLwYDVQQD
EygxMDViZTI3OTY5MDA2ZDJmOTZkZTQ5YzE0MTRlMjQ4NDBmYmEyZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEpqy/nV5Ekh8lO9ZZVonqw13n0e
YTIcOajQYGhRpXp4oK0xj9eCL/Q3FrOzRgeN8dE9rvZ43nC6iEyEkB1sLWZtpw4U
HuqHd4/HF+3k27d3UpjSe7yk4ukLqcH4ZDfWUvyGiyT7Y3CZdRF2aVjtEkQcCUYk
clfjxyPVfF2XbnOggtWsdaktKRKVCBp/9VQGynO/pwjQYW6Mfrb56dhE3W3qQlt6
srifWiho0JJd46u2kZzmt23LY4F8iTlXrpDiBURUKbzekMMJrGDLkv/0/geoW5tN
o9IBcgwS0JEvVtdjZ3vTRLNWfbKJKjUhU7F7d8IHf/gMrEniofMJ+j5mkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBb4nlpAG0vlt5JwUFOJIQPui3zMB8GA1UdIwQY
MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct
ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk
LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVwXay1Y
04T9yLnO6oeVzPTz71T2L8+zhz1xlIoEbiArI6toHy/o9+gLnvu3hjGbEJtNseGL
YX+zuGk0q8UjPWaNeJl7vI0a/P/ttuTr/x7eLyYnoIjjp5U5Bvd02ulCx8KWiwld
vKwMjsIzen18Zw7LXai9Th60NzB5tOQOf8lp/xN9+vPCngeC5wGZ8tul3CADPX3w
fOYO0zD1PXT5HxHLShte4hq1Y0fXVD2jMhX632YVcXijARSgkjUzDUJ+H4HroFbG
YytuRAOkVNznPgiDwfnGMFEpyRJ90rCX1gCJzh3kKA3/7Rh8nlb+4Ib83HNwVwsL
IpBfqkXi90K4Mw==
-----END CERTIFICATE-----