Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File:                     qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier:          XA4kBLbRltNsGh+gPDgNqV94LRs/othkLjNZaBLZByw=
Subject key identifier:   87:B9:1D:C4:CF:81:94:06:D7:60:FD:7E:31:C8:DF:7E:F0:44:28:22
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer:       /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial:       01962F3D91BE5B1CFED6EE5AC84F05DE33C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number:          09CD
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: rfXG603vNeqPTkDxQAu3PGkZ1nCXulDoDAeen74qulk=)
                          2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:91:be:5b:1c:fe:d6:ee:5a:c8:4f:05:de:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=87b91dc4cf819406d760fd7e31c8df7ef0442822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:41:25:3c:0f:b8:18:82:5f:59:63:b5:44:
                    a2:fe:5f:f8:1e:95:4a:2f:75:01:e6:df:48:5d:c7:
                    32:f4:1e:c9:fa:e5:1a:c5:b2:e7:40:40:cd:ec:6d:
                    f7:5a:23:57:c7:75:14:43:de:c1:8f:18:bc:38:0a:
                    60:15:2b:f7:96:d2:b0:67:62:c4:82:d0:68:c5:1b:
                    dd:91:19:48:85:e5:a1:6e:7f:58:1a:1f:a9:2b:cc:
                    e2:b9:5c:f5:69:9d:1c:ef:7b:19:6d:1e:ab:e7:71:
                    59:3f:4a:9f:2f:1d:82:72:cd:3e:65:72:82:6f:ed:
                    5d:f2:ec:a3:96:66:21:e3:73:aa:60:db:29:35:eb:
                    fd:db:de:7a:8a:47:87:4a:0e:73:da:3a:25:95:10:
                    0a:26:5f:72:86:2f:e5:d8:6d:1f:bc:ca:8a:c9:13:
                    2d:89:2a:76:25:e1:57:2e:59:04:9c:42:0c:3c:bc:
                    8f:99:1d:af:57:8d:f5:fc:88:9b:9e:e8:b7:31:ee:
                    66:0b:8c:c3:d3:f2:18:74:6f:7a:59:da:30:20:8b:
                    59:3e:a1:b4:7c:ff:f2:7b:c7:a0:d5:5c:a9:e6:9c:
                    f3:5b:31:59:ac:65:5d:c6:eb:ea:f7:6f:28:17:e7:
                    64:e3:e0:6a:d5:0c:cd:56:60:53:0b:40:cf:f8:6b:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:1D:C4:CF:81:94:06:D7:60:FD:7E:31:C8:DF:7E:F0:44:28:22
            X509v3 Authority Key Identifier:
                keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:54:9a:be:72:98:1a:99:e1:3a:49:b4:47:84:94:27:8b:a6:
         13:1b:52:b3:d2:c9:5b:58:56:be:d6:b0:2a:05:be:f7:d5:b1:
         67:4b:e9:fa:f3:21:e2:11:53:bd:f6:c4:f0:fb:7c:e5:33:87:
         d0:03:22:db:11:a7:46:55:65:eb:57:51:f7:ed:23:ee:a3:86:
         87:2a:09:e7:49:88:a3:12:73:da:25:85:f6:c7:22:a9:d6:28:
         23:1a:81:c8:d1:67:0f:9e:8a:67:ac:29:d6:51:9b:7b:13:a1:
         60:aa:c7:71:e2:50:7e:76:c3:ec:df:39:22:f7:b9:0f:fd:e7:
         cb:ea:3c:13:4d:ed:d3:15:cb:2e:95:50:54:24:99:27:22:5c:
         df:13:60:66:57:4f:7c:6f:b0:b8:f2:30:f4:8f:40:1a:1f:85:
         59:1d:a3:4f:60:d7:4e:fc:4f:43:75:71:b0:d6:48:56:ad:a1:
         ea:85:15:fe:36:18:7e:b9:c6:55:bf:fb:9b:95:86:15:36:b0:
         c6:b7:0b:77:c2:74:e5:4f:ef:ec:71:ee:34:4a:a5:25:c6:73:
         9e:04:4c:94:df:da:19:7a:b6:9a:db:df:b4:20:22:a0:fd:fe:
         1e:56:9a:3f:00:ef:bf:4e:8c:1e:32:38:ab:74:34:0e:8d:32:
         c9:07:f8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZG+Wxz+1u5ayE8F3jPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3
Nzc1ODEwHhcNMjUwNDEzMTMwMTI2WhcNMjUwNDE0MTMwMTI2WjAzMTEwLwYDVQQD
Eyg4N2I5MWRjNGNmODE5NDA2ZDc2MGZkN2UzMWM4ZGY3ZWYwNDQyODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGhBJTwPuBiCX1ljtUSi/l/4HpVK
L3UB5t9IXccy9B7J+uUaxbLnQEDN7G33WiNXx3UUQ97Bjxi8OApgFSv3ltKwZ2LE
gtBoxRvdkRlIheWhbn9YGh+pK8ziuVz1aZ0c73sZbR6r53FZP0qfLx2Ccs0+ZXKC
b+1d8uyjlmYh43OqYNspNev92956ikeHSg5z2jollRAKJl9yhi/l2G0fvMqKyRMt
iSp2JeFXLlkEnEIMPLyPmR2vV431/Iibnui3Me5mC4zD0/IYdG96WdowIItZPqG0
fP/ye8eg1Vyp5pzzWzFZrGVdxuvq928oF+dk4+Bq1QzNVmBTC0DP+Gt7gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe5HcTPgZQG12D9fjHI337wRCgiMB8GA1UdIwQY
MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et
NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm
LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVSavnKY
GpnhOkm0R4SUJ4umExtSs9LJW1hWvtawKgW+99WxZ0vp+vMh4hFTvfbE8Pt85TOH
0AMi2xGnRlVl61dR9+0j7qOGhyoJ50mIoxJz2iWF9sciqdYoIxqByNFnD56KZ6wp
1lGbexOhYKrHceJQfnbD7N85Ive5D/3ny+o8E03t0xXLLpVQVCSZJyJc3xNgZldP
fG+wuPIw9I9AGh+FWR2jT2DXTvxPQ3VxsNZIVq2h6oUV/jYYfrnGVb/7m5WGFTaw
xrcLd8J05U/v7HHuNEqlJcZzngRMlN/aGXq2mtvftCAioP3+HlaaPwDvv06MHjI4
q3Q0Do0yyQf4VA==
-----END CERTIFICATE-----