Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          LAAZznJVB7m7A9yYAz7FVa7g1EmDYSy5ju7ZIN7cJ00=
Subject key identifier:   BF:21:57:90:08:63:F1:0A:6F:B8:A8:D4:79:D5:1A:EA:D3:9E:CA:51
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       01962ECFA85859CF68A157AD3740722ED8A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          0596
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: nipkf8GLTcnuuWre/cSkzjvSVOavkK+u39tzsYMfIog=)
                          2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a8:58:59:cf:68:a1:57:ad:37:40:72:2e:d8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=bf2157900863f10a6fb8a8d479d51aead39eca51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:aa:92:f4:cb:b1:ac:94:ac:5a:83:b6:c4:
                    3d:60:0f:85:02:1b:b0:cf:61:54:84:c8:52:56:96:
                    0b:72:37:37:ab:d5:62:63:62:df:ba:7f:13:95:7f:
                    85:05:eb:0c:3f:40:4f:67:f4:a9:af:64:84:d6:92:
                    a4:1c:42:89:45:5c:36:57:b9:a2:bc:68:2b:01:15:
                    bb:85:bf:7d:02:c1:85:5a:5b:49:67:1f:c7:40:a8:
                    85:b4:75:e3:fb:07:8d:fa:68:cc:ae:d3:1e:4d:0f:
                    07:2f:58:33:83:b5:34:59:bf:7e:ee:4c:57:6c:dd:
                    80:2e:ef:0a:bd:68:c4:14:26:1b:d9:b8:3d:fb:6c:
                    7c:77:94:71:58:f6:63:7c:79:85:79:fb:97:45:0a:
                    e8:18:8b:fd:15:23:29:92:a7:41:a1:00:d2:32:68:
                    f7:7a:80:a5:3d:e3:99:ea:c4:a7:6d:d8:96:c8:20:
                    81:f8:89:dc:bd:2d:29:f7:04:f0:e9:5a:8b:82:11:
                    9e:e8:16:10:fa:b8:bb:95:80:aa:64:c0:86:d2:80:
                    51:af:d5:25:cc:ca:1b:96:e1:5e:9a:6b:ea:82:82:
                    eb:8e:60:9c:04:c8:dd:24:fd:c6:b0:cb:67:fd:ae:
                    49:d7:04:75:d9:7d:ee:85:b5:61:aa:a1:2b:04:6f:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:21:57:90:08:63:F1:0A:6F:B8:A8:D4:79:D5:1A:EA:D3:9E:CA:51
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8d:81:e8:86:e4:c3:5b:44:2f:45:3a:a7:a1:13:6c:bb:10:
         8a:bc:8f:8c:98:90:ef:0f:1a:a6:74:f4:3b:64:1b:06:44:bd:
         37:7e:5b:c6:73:1d:f0:56:5a:62:41:58:1e:61:a9:da:7b:48:
         8e:a2:1c:aa:b4:22:43:7c:49:5a:dd:8c:6e:9e:1a:7f:49:f4:
         95:f0:9b:e7:d0:ee:5a:c3:e8:98:eb:99:cc:6d:ad:04:1c:b5:
         ae:1a:8c:68:d7:7d:bf:44:5e:ff:94:dc:b9:43:ff:63:ca:66:
         00:6f:dd:a6:3c:dd:13:84:f4:58:ff:06:d8:dc:d9:d2:aa:ea:
         30:31:c1:c4:05:42:e0:09:27:e7:5d:a5:11:92:c6:75:c2:31:
         83:f9:3f:1f:b9:c3:da:20:20:15:f4:50:5f:9b:0a:d6:56:a8:
         a4:d3:20:10:60:11:49:43:9b:db:ee:f9:11:7e:7a:df:ed:54:
         f7:c5:c0:5f:e4:9c:c6:11:7c:52:9f:25:f6:21:e1:af:18:37:
         55:d8:ce:ca:35:12:52:99:ab:e3:f8:57:8b:95:c3:10:74:e0:
         56:e0:62:e1:1f:fb:65:d3:b1:a8:51:f6:1f:10:4c:16:dc:0f:
         4b:d4:60:29:75:b3:ce:ab:eb:f3:24:72:4b:e0:7c:c2:fe:04:
         b4:76:dd:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6hYWc9ooVetN0ByLtimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh
YTA2YTYwHhcNMjUwNDEzMTEwMTIzWhcNMjUwNDE0MTEwMTIzWjAzMTEwLwYDVQQD
EyhiZjIxNTc5MDA4NjNmMTBhNmZiOGE4ZDQ3OWQ1MWFlYWQzOWVjYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+mqkvTLsayUrFqDtsQ9YA+FAhuw
z2FUhMhSVpYLcjc3q9ViY2Lfun8TlX+FBesMP0BPZ/Spr2SE1pKkHEKJRVw2V7mi
vGgrARW7hb99AsGFWltJZx/HQKiFtHXj+weN+mjMrtMeTQ8HL1gzg7U0Wb9+7kxX
bN2ALu8KvWjEFCYb2bg9+2x8d5RxWPZjfHmFefuXRQroGIv9FSMpkqdBoQDSMmj3
eoClPeOZ6sSnbdiWyCCB+IncvS0p9wTw6VqLghGe6BYQ+ri7lYCqZMCG0oBRr9Ul
zMobluFemmvqgoLrjmCcBMjdJP3GsMtn/a5J1wR12X3uhbVhqqErBG/HzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8hV5AIY/EKb7io1HnVGurTnspRMB8GA1UdIwQY
MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt
MTYxMGEwYzk5M2I0LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0
LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn42B6Ibk
w1tEL0U6p6ETbLsQiryPjJiQ7w8apnT0O2QbBkS9N35bxnMd8FZaYkFYHmGp2ntI
jqIcqrQiQ3xJWt2Mbp4af0n0lfCb59DuWsPomOuZzG2tBBy1rhqMaNd9v0Re/5Tc
uUP/Y8pmAG/dpjzdE4T0WP8G2NzZ0qrqMDHBxAVC4Akn512lEZLGdcIxg/k/H7nD
2iAgFfRQX5sK1laopNMgEGARSUOb2+75EX563+1U98XAX+ScxhF8Up8l9iHhrxg3
VdjOyjUSUpmr4/hXi5XDEHTgVuBi4R/7ZdOxqFH2HxBMFtwPS9RgKXWzzqvr8yRy
S+B8wv4EtHbd3w==
-----END CERTIFICATE-----