Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft
File:                     Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft (raw, json)
Hash identifier:          mYeSizEsNIlHz9eqAPTH7A6WlBfrNrap71UFyP4h2Es=
Subject key identifier:   DC:69:27:88:D6:CD:64:2E:16:50:43:40:2E:D8:F2:E1:19:63:69:14
Authority key identifier: 43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
Certificate issuer:       /CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Certificate serial:       019547ECBCF9269FBECFA9D7B409C4E78F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft
Manifest number:          07B9
Signing time:             Thu 27 Feb 2025 15:00:51 +0000
Manifest this update:     Thu 27 Feb 2025 15:00:51 +0000
Manifest next update:     Fri 28 Feb 2025 15:00:51 +0000
Files and hashes:         1: Qy_9NnlukPgSoWEuwfRk3j1eLzg.crl (hash: 4bWNjPZv1YNH8TvIs0IOHfFGuKVtatUK0ac1So6SCGk=)
                          2: YBiOU9LodRSxT5PuJn9g5UO2M2o.roa (hash: 08SR7+nvpd/XA2umdXMZ+Q/H2vBB7qTfGHTnuA1+CaQ=)
                          3: qMfi8e7m1fr1Hzuvp-QSKdbHo_c.roa (hash: tC15G7NC/3zskzQUaxJ7obi+f6xMCn57e/4LdL2XoDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:ec:bc:f9:26:9f:be:cf:a9:d7:b4:09:c4:e7:8f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
        Validity
            Not Before: Feb 27 15:00:51 2025 GMT
            Not After : Feb 28 15:00:51 2025 GMT
        Subject: CN=dc692788d6cd642e165043402ed8f2e119636914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:5e:6d:76:65:74:83:1a:19:59:47:6b:8d:
                    b2:61:e7:e6:69:c6:51:74:e7:00:ba:c5:c0:8d:9f:
                    de:1f:bc:cb:bd:a6:de:cf:e8:76:c4:ce:a9:a4:e0:
                    90:99:b1:83:45:af:e9:c3:01:ec:a1:96:43:2c:be:
                    79:9f:25:ab:bb:70:ca:9a:e0:62:06:49:7f:ef:0b:
                    4c:0f:29:62:c1:7c:bc:b5:70:87:32:24:8c:cf:7e:
                    03:bb:bd:3c:b5:fc:65:12:ec:b1:1c:d4:e0:da:43:
                    af:b0:00:8f:25:85:51:9a:db:b0:52:ba:74:1e:b9:
                    ff:fa:a9:0e:88:42:34:09:60:8f:d2:3e:16:69:98:
                    72:30:b5:9f:04:49:ca:e3:56:c4:39:31:42:5f:7a:
                    73:50:55:6c:25:12:82:96:d1:2e:f1:02:92:28:5e:
                    3a:7c:05:1b:98:a6:2f:31:e7:fc:d7:c5:4c:d8:39:
                    18:a2:b3:b3:1f:c4:70:35:e1:29:3d:c8:2d:92:bb:
                    7e:51:57:22:e5:b3:31:ef:b4:1c:43:c2:a2:6c:a1:
                    19:15:36:e6:10:41:6f:c7:ba:0a:5d:f2:42:88:4a:
                    aa:9e:b5:a2:cc:9c:51:a3:8a:43:08:de:dc:7b:30:
                    37:94:92:7a:9a:4e:04:4d:d7:27:17:91:ad:67:ae:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:69:27:88:D6:CD:64:2E:16:50:43:40:2E:D8:F2:E1:19:63:69:14
            X509v3 Authority Key Identifier:
                keyid:43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9a:6f:53:eb:ed:c7:e3:01:44:fa:41:85:55:79:74:8d:5a:
         15:ea:d9:1c:8b:e0:a0:08:f0:e7:34:8c:94:ca:40:72:3e:9a:
         a8:0b:04:a7:4e:06:ed:dc:30:56:6d:42:77:35:b4:99:3b:98:
         b0:9f:89:26:b4:78:45:79:91:b2:9d:ef:8c:ea:8f:41:25:db:
         0a:d2:50:85:81:3d:db:15:19:24:8c:07:c2:2a:9b:d0:b9:10:
         50:dd:c4:4a:d0:ef:b8:8c:50:5e:36:04:c0:98:2a:9a:c7:75:
         ef:b1:a9:2b:39:02:cc:bf:94:d7:b8:6d:1f:21:c2:37:9c:5e:
         ca:96:52:df:85:55:0c:ff:73:58:ef:61:c9:02:41:6c:69:78:
         3c:48:be:7f:b3:c0:19:15:fc:87:fd:ec:c6:c2:71:0b:6d:d2:
         0f:f3:cb:dc:98:5b:05:8f:94:81:f8:4a:85:28:d5:bd:47:f2:
         6b:cf:68:a2:cf:38:d9:b2:f8:94:df:27:ab:e5:7f:a5:48:86:
         2f:ce:0a:df:de:d6:4a:d8:b1:a8:a1:55:59:8d:22:10:5b:de:
         d8:84:93:a7:4e:df:00:19:cb:12:ae:f6:8d:ac:79:85:b4:a3:
         77:1f:45:6e:70:61:74:03:b0:d5:e9:d9:f6:2f:2a:28:07:fb:
         c5:0e:1c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVH7Lz5Jp++z6nXtAnE549JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmZmZDM2Nzk2ZTkwZjgxMmExNjEyZWMxZjQ2NGRlM2Q1
ZTJmMzgwHhcNMjUwMjI3MTUwMDUxWhcNMjUwMjI4MTUwMDUxWjAzMTEwLwYDVQQD
EyhkYzY5Mjc4OGQ2Y2Q2NDJlMTY1MDQzNDAyZWQ4ZjJlMTE5NjM2OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtctebXZldIMaGVlHa42yYefmacZR
dOcAusXAjZ/eH7zLvabez+h2xM6ppOCQmbGDRa/pwwHsoZZDLL55nyWru3DKmuBi
Bkl/7wtMDyliwXy8tXCHMiSMz34Du708tfxlEuyxHNTg2kOvsACPJYVRmtuwUrp0
Hrn/+qkOiEI0CWCP0j4WaZhyMLWfBEnK41bEOTFCX3pzUFVsJRKCltEu8QKSKF46
fAUbmKYvMef818VM2DkYorOzH8RwNeEpPcgtkrt+UVci5bMx77QcQ8KibKEZFTbm
EEFvx7oKXfJCiEqqnrWizJxRo4pDCN7cezA3lJJ6mk4ETdcnF5GtZ653bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxpJ4jWzWQuFlBDQC7Y8uEZY2kUMB8GA1UdIwQY
MBaAFEMv/TZ5bpD4EqFhLsH0ZN49Xi84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlfOU5ubHVrUGdTb1dFdXdmUmszajFlTHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xOTZmODktMjQyMS00YmMxLWIzMDUt
OGM2YTVlMGVhMDZlLzEvUXlfOU5ubHVrUGdTb1dFdXdmUmszajFlTHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8xOTZmODktMjQyMS00YmMxLWIzMDUtOGM2YTVlMGVhMDZl
LzEvUXlfOU5ubHVrUGdTb1dFdXdmUmszajFlTHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKppvU+vt
x+MBRPpBhVV5dI1aFerZHIvgoAjw5zSMlMpAcj6aqAsEp04G7dwwVm1CdzW0mTuY
sJ+JJrR4RXmRsp3vjOqPQSXbCtJQhYE92xUZJIwHwiqb0LkQUN3EStDvuIxQXjYE
wJgqmsd177GpKzkCzL+U17htHyHCN5xeypZS34VVDP9zWO9hyQJBbGl4PEi+f7PA
GRX8h/3sxsJxC23SD/PL3JhbBY+UgfhKhSjVvUfya89oos842bL4lN8nq+V/pUiG
L84K397WStixqKFVWY0iEFve2ISTp07fABnLEq72jax5hbSjdx9FbnBhdAOw1enZ
9i8qKAf7xQ4cag==
-----END CERTIFICATE-----