Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File:                     qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier:          D794cC8ixGJVhZHsqtz0PP1jVqSZH2mQMLvFsjueu/s=
Subject key identifier:   4C:51:86:FE:ED:CF:B8:BB:BF:D4:57:46:DC:9D:DF:25:61:DD:DC:28
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer:       /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial:       01962F0651493DF87B3FED6BEE7D217869D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number:          1347
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
                          2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: zsU7eFS58OkMbuA1dWfbNcaDsqPkmNlB+5XsUfdoBeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:49:3d:f8:7b:3f:ed:6b:ee:7d:21:78:69:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=4c5186feedcfb8bbbfd45746dc9ddf2561dddc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:79:24:a7:3a:d7:60:1b:94:96:76:8d:d1:bb:
                    59:30:cb:af:a1:bf:0a:7e:9e:79:b7:50:91:11:78:
                    39:42:3d:35:08:41:dc:9d:49:5f:c4:fd:5c:51:92:
                    89:f7:0b:85:b9:84:b7:93:4a:41:5b:a3:cb:ce:f3:
                    2e:0d:74:09:30:93:c6:ac:26:0d:46:be:87:b4:e2:
                    10:f9:5e:34:1b:b8:1a:c0:c9:b5:7d:f2:78:fa:9b:
                    66:ff:a1:68:dd:1b:7a:61:66:a7:2c:dd:fd:c3:0c:
                    12:f5:39:2c:10:55:ed:b0:1a:5d:8d:c8:ab:0e:88:
                    e9:e7:06:2e:1c:54:80:83:0d:54:b3:0d:48:61:a2:
                    a3:4e:c9:b3:46:b9:d3:f1:77:83:d1:8a:b3:f9:c1:
                    b9:96:9c:49:43:ab:1b:98:a9:29:02:70:46:26:46:
                    1a:9b:68:95:50:d2:4f:07:36:2c:d4:92:64:e4:82:
                    e6:52:f9:c1:c5:4f:26:aa:17:f1:ab:f8:16:61:29:
                    67:6e:aa:c5:88:b0:f0:c6:db:b7:cd:b3:22:43:a7:
                    b6:a3:df:7f:5a:d9:8a:d2:18:10:73:d7:04:96:94:
                    81:d6:e9:4e:54:63:58:c6:6b:f1:20:9c:d0:4b:c8:
                    5e:61:6c:ce:10:a5:11:16:13:6c:7b:d7:1a:ec:c7:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:51:86:FE:ED:CF:B8:BB:BF:D4:57:46:DC:9D:DF:25:61:DD:DC:28
            X509v3 Authority Key Identifier:
                keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:09:d5:d9:af:d4:5b:d6:36:58:0e:61:21:03:43:d7:82:fe:
         3f:fd:18:68:6b:eb:5a:e8:4f:54:99:69:dc:49:ad:53:15:48:
         91:62:0d:70:a1:c6:ee:1c:6c:78:0f:ff:25:19:95:47:fd:fb:
         0f:cf:75:e2:2e:8d:81:a7:a8:a2:52:51:31:0c:8c:9f:6d:b9:
         2d:03:a0:02:4c:24:68:c8:d5:b7:25:4b:73:6f:8f:03:b1:60:
         8c:b5:de:93:7e:b1:48:45:a1:77:c0:7c:16:ed:e6:56:04:5f:
         89:35:3f:16:07:d2:ed:f5:ed:17:a7:86:39:f2:0f:90:d1:30:
         2f:1f:e4:24:ac:dc:2c:a0:96:ac:19:3c:9e:43:8d:25:cb:02:
         3f:3e:48:b9:0a:1e:d0:f0:9d:21:a4:92:88:0e:92:ab:64:3f:
         19:58:c7:cf:1d:e0:2b:68:dd:05:3a:63:44:d4:f2:aa:2d:85:
         09:61:7d:b9:bf:3d:9d:da:9f:df:d7:6b:a0:85:21:21:ec:e2:
         82:0f:b6:a5:72:81:81:76:ab:58:d6:bd:bf:ba:a6:44:3a:84:
         66:85:2e:a6:57:e4:1e:ec:ee:1b:d7:d2:73:55:63:05:22:9c:
         55:90:02:a7:e1:e7:90:76:91:97:c1:f4:38:d7:b4:3a:31:e3:
         19:d7:f9:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlFJPfh7P+1r7n0heGnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4M2YxZGViZDVkNDc4NDg0M2ZhYTI4OGIyZTAxYzg4NTA2
YzFjYzkwHhcNMjUwNDEzMTIwMTA1WhcNMjUwNDE0MTIwMTA1WjAzMTEwLwYDVQQD
Eyg0YzUxODZmZWVkY2ZiOGJiYmZkNDU3NDZkYzlkZGYyNTYxZGRkYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53kkpzrXYBuUlnaN0btZMMuvob8K
fp55t1CREXg5Qj01CEHcnUlfxP1cUZKJ9wuFuYS3k0pBW6PLzvMuDXQJMJPGrCYN
Rr6HtOIQ+V40G7gawMm1ffJ4+ptm/6Fo3Rt6YWanLN39wwwS9TksEFXtsBpdjcir
Dojp5wYuHFSAgw1Usw1IYaKjTsmzRrnT8XeD0Yqz+cG5lpxJQ6sbmKkpAnBGJkYa
m2iVUNJPBzYs1JJk5ILmUvnBxU8mqhfxq/gWYSlnbqrFiLDwxtu3zbMiQ6e2o99/
WtmK0hgQc9cElpSB1ulOVGNYxmvxIJzQS8heYWzOEKURFhNse9ca7Meg2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExRhv7tz7i7v9RXRtyd3yVh3dwoMB8GA1UdIwQY
MBaAFKg/HevV1HhIQ/qiiLLgHIhQbBzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zOTNhMGYtZTQ1Ni00NmUyLWE3NTQt
ZTQ2YzEzYjFjNzZkLzEvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zOTNhMGYtZTQ1Ni00NmUyLWE3NTQtZTQ2YzEzYjFjNzZk
LzEvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAnV2a/U
W9Y2WA5hIQND14L+P/0YaGvrWuhPVJlp3EmtUxVIkWINcKHG7hxseA//JRmVR/37
D8914i6NgaeoolJRMQyMn225LQOgAkwkaMjVtyVLc2+PA7FgjLXek36xSEWhd8B8
Fu3mVgRfiTU/FgfS7fXtF6eGOfIPkNEwLx/kJKzcLKCWrBk8nkONJcsCPz5IuQoe
0PCdIaSSiA6Sq2Q/GVjHzx3gK2jdBTpjRNTyqi2FCWF9ub89ndqf39droIUhIezi
gg+2pXKBgXarWNa9v7qmRDqEZoUuplfkHuzuG9fSc1VjBSKcVZACp+HnkHaRl8H0
ONe0OjHjGdf5HQ==
-----END CERTIFICATE-----