Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File:                     SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier:          syoLj9oa/mOf9RN7FFKJjYidEI17/e8CNp77+9X+coU=
Subject key identifier:   CF:AD:07:00:7B:A0:05:26:A0:00:69:B1:99:AA:AB:D1:74:13:46:32
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer:       /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial:       01962F74BC3119E335358CBCFB3F2025BE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number:          124C
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
                          2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: q7kNUmaL1VR64blJa1xyfUo45GMTsCFFE0eoEr+qda0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:31:19:e3:35:35:8c:bc:fb:3f:20:25:be:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=cfad07007ba00526a00069b199aaabd174134632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:27:35:d2:23:74:6a:cf:ee:95:c3:04:14:
                    6f:f9:c1:32:73:7c:c6:af:b4:0e:5f:3b:f4:f5:3d:
                    ec:82:79:a6:7c:ad:9a:3f:1b:77:43:3f:69:39:8b:
                    5f:8d:4c:f3:4e:48:69:ac:20:cc:48:f0:59:88:85:
                    6a:6d:a3:52:d8:89:52:69:cb:b6:c7:b8:66:9e:8d:
                    7f:eb:29:24:ba:8a:a8:2d:56:e2:d3:2b:80:23:fb:
                    8f:dd:55:26:48:71:33:e6:e1:c1:3a:2e:d4:83:87:
                    c9:55:52:ef:97:fd:4a:ff:46:ef:55:f7:45:20:f9:
                    d1:2a:38:fc:a0:8e:bb:3f:fa:38:c2:db:e5:4c:22:
                    5f:dd:e9:46:90:e7:22:2b:09:93:99:af:0c:9a:23:
                    a0:bb:3c:13:40:84:d1:67:9e:56:05:71:30:b9:0d:
                    5d:72:d7:c4:a1:ac:a5:70:01:44:c9:ea:5d:24:95:
                    a4:ce:95:f9:01:12:ff:00:e3:27:94:69:f9:b3:d9:
                    f5:cc:df:22:83:33:cf:56:10:5d:29:92:ac:11:7c:
                    80:6b:16:d4:6d:36:f5:67:ea:f8:ff:7b:11:34:11:
                    26:41:da:d1:74:c8:17:dc:ca:38:08:44:a2:27:fc:
                    1e:c4:35:34:12:b2:95:73:c4:90:64:fe:e5:4b:53:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AD:07:00:7B:A0:05:26:A0:00:69:B1:99:AA:AB:D1:74:13:46:32
            X509v3 Authority Key Identifier:
                keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:7b:40:9f:e7:ae:ad:47:2e:95:32:63:61:db:db:16:55:
         f2:ea:ca:eb:67:75:f2:ed:41:e5:7c:aa:ec:dc:ee:d3:cf:26:
         76:76:1b:fc:7e:f1:55:fe:9b:fe:02:f8:93:03:00:ec:6d:a1:
         d8:89:3a:d7:fd:9c:77:14:a1:66:a6:6c:5e:1b:3b:38:86:6d:
         b7:ea:5e:c3:24:6c:43:14:6e:31:3e:1b:50:3e:42:3c:06:81:
         c9:6e:e5:50:a0:b8:24:c7:fb:28:e1:54:6c:90:96:1c:cc:08:
         5f:69:82:19:3c:04:46:68:23:6c:10:e9:ef:87:58:35:3c:63:
         ee:36:ba:7d:6a:b7:93:bf:49:a4:be:a5:5e:52:7d:8a:2a:6b:
         ef:57:76:69:37:61:38:dc:d7:70:28:b2:4d:5a:8d:ba:8e:52:
         4c:b5:67:d8:ca:77:0c:e4:af:06:39:22:15:2a:2b:9d:d1:7b:
         1a:92:00:98:83:ec:bc:9b:10:91:83:51:03:09:14:ac:53:2e:
         c1:51:23:ca:dc:57:28:68:65:20:1b:2b:25:88:50:ad:c3:88:
         97:3b:f4:97:13:16:42:51:51:7a:51:c0:4e:25:95:87:81:18:
         6c:43:30:c3:56:a3:c9:24:22:54:d1:c4:f9:a6:99:63:87:1d:
         74:2c:53:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLwxGeM1NYy8+z8gJb42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTY5MTc4NzZmZDc4OTI2YzE5MjdiOWZkYzc5NjU4ZDc0
NmM4NGMwHhcNMjUwNDEzMTQwMTQxWhcNMjUwNDE0MTQwMTQxWjAzMTEwLwYDVQQD
EyhjZmFkMDcwMDdiYTAwNTI2YTAwMDY5YjE5OWFhYWJkMTc0MTM0NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2InNdIjdGrP7pXDBBRv+cEyc3zG
r7QOXzv09T3sgnmmfK2aPxt3Qz9pOYtfjUzzTkhprCDMSPBZiIVqbaNS2IlSacu2
x7hmno1/6ykkuoqoLVbi0yuAI/uP3VUmSHEz5uHBOi7Ug4fJVVLvl/1K/0bvVfdF
IPnRKjj8oI67P/o4wtvlTCJf3elGkOciKwmTma8MmiOguzwTQITRZ55WBXEwuQ1d
ctfEoaylcAFEyepdJJWkzpX5ARL/AOMnlGn5s9n1zN8igzPPVhBdKZKsEXyAaxbU
bTb1Z+r4/3sRNBEmQdrRdMgX3Mo4CESiJ/wexDU0ErKVc8SQZP7lS1O0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+tBwB7oAUmoABpsZmqq9F0E0YyMB8GA1UdIwQY
MBaAFEqmkXh2/XiSbBknuf3HlljXRshMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQt
OWNlMjdjMTJiMmY0LzEvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQtOWNlMjdjMTJiMmY0
LzEvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASP17QJ/n
rq1HLpUyY2Hb2xZV8urK62d18u1B5Xyq7Nzu088mdnYb/H7xVf6b/gL4kwMA7G2h
2Ik61/2cdxShZqZsXhs7OIZtt+pewyRsQxRuMT4bUD5CPAaByW7lUKC4JMf7KOFU
bJCWHMwIX2mCGTwERmgjbBDp74dYNTxj7ja6fWq3k79JpL6lXlJ9iipr71d2aTdh
ONzXcCiyTVqNuo5STLVn2Mp3DOSvBjkiFSorndF7GpIAmIPsvJsQkYNRAwkUrFMu
wVEjytxXKGhlIBsrJYhQrcOIlzv0lxMWQlFRelHATiWVh4EYbEMww1ajySQiVNHE
+aaZY4cddCxTIg==
-----END CERTIFICATE-----