Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File:                     QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier:          g3KEivTvoJQ3Jiwd1V+Qz5f2WPExgpe1w/gQ8jHhRk4=
Subject key identifier:   62:92:7B:F1:E6:F6:C0:5E:32:89:24:D6:AE:D2:2A:A5:27:05:85:42
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer:       /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial:       01962ECFD678EDE92E61D92C06A3124714A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
                          2: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: R5aV31OJT4A8P+YzbqzCM+XFxsVHHLFSXN0TCMtbeNM=)
                          3: aTUWINMGKAxXyPjULlDsCzxwjNA.roa (hash: RaczMm3Wo4rB6JIQE6qKdkcTiCDtnDTo1726sQtpVeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d6:78:ed:e9:2e:61:d9:2c:06:a3:12:47:14:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=62927bf1e6f6c05e328924d6aed22aa527058542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:d7:ba:d0:24:9b:f9:90:69:3f:6f:e6:87:
                    f3:59:d0:eb:ec:9c:e4:80:fa:c3:b2:97:80:5e:6e:
                    5d:f0:33:3b:8e:c9:d2:aa:1d:cf:50:87:6c:3c:a1:
                    3f:87:bb:17:2a:68:0b:cf:fa:7e:fe:25:0f:c6:cd:
                    a9:16:b5:75:40:a6:30:21:d5:e4:e9:03:9f:d8:d8:
                    63:c8:b7:9d:7b:4c:e3:4e:ca:20:fc:62:64:68:ab:
                    81:8d:ff:99:ea:ac:90:43:2c:8c:49:1d:4b:0b:47:
                    df:67:47:cc:8c:b5:28:76:97:86:3a:79:a3:b5:41:
                    fb:47:39:7b:35:78:e1:d7:8b:5e:89:c6:c7:81:ba:
                    26:cb:d8:cc:61:db:27:98:67:8a:3d:b6:7e:2c:c7:
                    23:9e:ed:06:b0:74:26:c2:4c:d0:af:e0:10:8b:dc:
                    21:f5:d2:42:ed:fc:fb:b4:74:0c:d6:a1:25:c9:a0:
                    5f:21:27:5e:8f:b7:94:97:a1:34:8f:ad:90:82:e9:
                    df:c4:e8:d0:cd:d2:7a:a4:1a:7a:1a:d0:f5:10:dd:
                    53:16:7f:8f:cf:dc:e5:48:7b:d1:6e:00:a7:27:6b:
                    ee:84:d6:75:b0:0f:91:c4:9c:db:e0:8b:17:e5:b1:
                    b6:5d:3e:c2:cf:f8:06:c2:d9:04:05:f8:ac:24:89:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:92:7B:F1:E6:F6:C0:5E:32:89:24:D6:AE:D2:2A:A5:27:05:85:42
            X509v3 Authority Key Identifier:
                keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:31:04:f8:3f:83:aa:ec:ee:05:e4:13:a8:20:bd:fb:ce:b4:
         e3:57:fd:9e:ef:62:7f:36:94:eb:7e:0a:3a:47:17:da:a8:d9:
         ce:9c:e6:af:ee:87:70:bf:e4:d8:a9:ac:08:55:89:f8:b2:80:
         a4:5a:49:6b:58:db:3c:76:1e:7d:2b:c5:c5:bb:ae:e4:3a:2b:
         c4:e9:bd:c3:70:32:dd:e7:68:a6:68:9c:33:de:3e:e9:6a:56:
         24:0f:2f:6e:42:fd:81:70:47:8f:84:ae:42:f3:7b:28:24:0e:
         a5:18:8c:fd:97:a7:8b:a1:d9:bb:9f:fd:9d:17:d9:78:f8:c9:
         4c:68:5e:08:f0:79:a0:e8:3b:00:64:af:86:ca:36:7e:d0:9a:
         57:6b:8c:9a:d6:cc:5b:3a:d9:2b:5b:03:d7:c8:60:e7:75:49:
         a1:a8:a0:bd:6f:74:c2:b3:3c:8d:f4:77:5e:8a:ca:97:5e:c1:
         f0:1f:5d:e4:22:28:c8:45:47:0d:9a:94:3d:51:e8:10:b7:c2:
         2c:01:d6:60:92:7d:56:d2:9e:8d:36:99:4e:32:18:06:d8:8b:
         e0:42:17:c6:21:f1:4a:95:a0:05:5d:da:83:a1:15:83:12:d6:
         cb:30:c8:a2:3e:ee:8c:74:e3:1f:14:a0:79:3e:b9:5b:47:ab:
         c4:3e:cb:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9Z47ekuYdksBqMSRxSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz
NzRlZDgwHhcNMjUwNDEzMTEwMTM0WhcNMjUwNDE0MTEwMTM0WjAzMTEwLwYDVQQD
Eyg2MjkyN2JmMWU2ZjZjMDVlMzI4OTI0ZDZhZWQyMmFhNTI3MDU4NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG3XutAkm/mQaT9v5ofzWdDr7Jzk
gPrDspeAXm5d8DM7jsnSqh3PUIdsPKE/h7sXKmgLz/p+/iUPxs2pFrV1QKYwIdXk
6QOf2NhjyLede0zjTsog/GJkaKuBjf+Z6qyQQyyMSR1LC0ffZ0fMjLUodpeGOnmj
tUH7Rzl7NXjh14teicbHgbomy9jMYdsnmGeKPbZ+LMcjnu0GsHQmwkzQr+AQi9wh
9dJC7fz7tHQM1qElyaBfISdej7eUl6E0j62QgunfxOjQzdJ6pBp6GtD1EN1TFn+P
z9zlSHvRbgCnJ2vuhNZ1sA+RxJzb4IsX5bG2XT7Cz/gGwtkEBfisJImzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKSe/Hm9sBeMokk1q7SKqUnBYVCMB8GA1UdIwQY
MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt
NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4
LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDEE+D+D
quzuBeQTqCC9+86041f9nu9ifzaU634KOkcX2qjZzpzmr+6HcL/k2KmsCFWJ+LKA
pFpJa1jbPHYefSvFxbuu5DorxOm9w3Ay3edopmicM94+6WpWJA8vbkL9gXBHj4Su
QvN7KCQOpRiM/Zeni6HZu5/9nRfZePjJTGheCPB5oOg7AGSvhso2ftCaV2uMmtbM
WzrZK1sD18hg53VJoaigvW90wrM8jfR3XorKl17B8B9d5CIoyEVHDZqUPVHoELfC
LAHWYJJ9VtKejTaZTjIYBtiL4EIXxiHxSpWgBV3ag6EVgxLWyzDIoj7ujHTjHxSg
eT65W0erxD7LgA==
-----END CERTIFICATE-----