Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
File:                     QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft (raw, json)
Hash identifier:          CMbLOStWWQsRziC1lf+LYfVkl1DbLp3DKHpu/i+DI0s=
Subject key identifier:   79:55:D7:FA:D2:B1:07:F2:19:E8:17:76:BE:1B:B3:9D:1D:08:5B:CC
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Certificate issuer:       /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial:       01962F06A06DD1D0E4CEE122BE97B1995FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
Manifest number:          1506
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 0lMFcdtNp26YfQNn5iPba6FXABM.roa (hash: qwNKo6mD7mKcqzNSQWlJycWA8l92Zl/i3CclTpihme0=)
                          2: 1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa (hash: GLjRp44S9t7k9/gNlz4F+5PxTttEffZtUX3wedwaMj4=)
                          3: AffVDnLnSLh0V7EinGng8G5nPjQ.roa (hash: hYx/BpJDcyTVNDkPP1YvXND6zbbHVisFIC82719FbiA=)
                          4: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl (hash: EHStxugiMUf/Wfrsk3Qxqkpp+iY/DIv6fB5wGkBKKio=)
                          5: X6B3yM6JPuRoNiHbz1ZaIgfYnuw.roa (hash: arcjlfWRdddSSndOkjcyUSHuh1XDl/Fc5uW5b/PuIbI=)
                          6: ml8HfpgZooz4Fs5VNgkwYze5t_M.roa (hash: KgRvypNeE4qoLntupCEeIzNpWhk2E20WSo1RiDNCO2U=)
                          7: ngnhG7uE9YHHo9YXMg4zT5zGeQk.roa (hash: a+4S0fbb+Q4assLZ0oTVcSUfUQDBn8eYYqxTad0XqL0=)
                          8: oI0m6JBhMDS_eEyHOtg7vo158Js.roa (hash: l4BG5WDsCRX9NtPnj37JkO0LvM0tJm7+HRwBv6mDOds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:6d:d1:d0:e4:ce:e1:22:be:97:b1:99:5f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=7955d7fad2b107f219e81776be1bb39d1d085bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:03:76:f9:ff:ee:c0:11:e8:e4:8f:ee:58:
                    f1:b4:d8:70:60:9a:3f:bd:65:80:d3:d8:e2:73:95:
                    f3:c4:35:c9:ee:91:e6:35:80:b1:2f:09:f1:b7:24:
                    d6:db:08:1d:6d:4a:61:c0:5f:af:87:47:ba:0f:96:
                    c2:f2:20:c6:17:b3:0e:fb:bc:82:0c:f9:92:90:72:
                    79:cc:e5:2a:54:e1:33:71:05:ad:65:1e:b9:dc:b9:
                    29:f4:33:c4:1d:c2:1b:b2:64:ae:c8:a5:2b:f7:ae:
                    c0:6d:aa:3c:2a:b7:d7:0b:06:53:ca:57:84:a2:c1:
                    b9:bf:73:73:83:b6:0d:62:f4:77:2c:84:b3:cc:d1:
                    86:ed:5b:10:28:85:2d:b9:d9:70:83:17:5c:f7:c1:
                    5a:cd:5a:96:77:73:3e:f7:eb:ed:b2:33:6b:e2:59:
                    1f:b1:40:cb:f5:b9:8b:80:84:bd:67:fd:a9:10:a3:
                    00:41:83:39:15:86:3b:cc:fa:8a:ad:b3:fa:2b:c7:
                    f5:83:bb:38:86:fc:fb:7c:c2:d2:bd:5d:c4:d7:97:
                    d5:ca:c0:04:22:1d:68:2c:37:ca:42:b3:db:06:c5:
                    2e:03:6e:96:90:2b:12:55:88:bd:e0:04:1c:8f:3c:
                    bc:27:b9:27:84:9c:a6:05:0d:30:03:f3:83:17:c5:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:55:D7:FA:D2:B1:07:F2:19:E8:17:76:BE:1B:B3:9D:1D:08:5B:CC
            X509v3 Authority Key Identifier:
                keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:37:ad:2b:46:01:a1:fa:a8:43:d5:3f:a3:fe:cd:ef:4b:d4:
         c8:9d:24:d6:36:7a:7d:5b:be:2b:c0:b9:13:60:6d:e1:69:75:
         de:c4:0b:c7:82:a3:0d:02:f0:87:cf:bf:27:d8:b5:9e:bf:31:
         3b:45:25:5c:be:d8:f8:11:1f:29:81:e3:58:f3:0f:b0:6e:cc:
         f7:28:e5:fb:0a:a0:4f:4d:8a:73:93:e2:4f:5d:37:26:4b:8c:
         04:2c:d0:40:7f:a7:73:a4:98:3e:e4:cc:7c:bb:ba:00:5a:e7:
         67:ce:3f:80:1d:eb:d1:cc:43:aa:7f:a0:25:de:96:90:ed:0b:
         8d:0d:c7:48:60:72:ee:7a:85:7f:92:b8:68:b1:fb:cd:b8:35:
         ee:bc:f6:09:83:1e:1e:51:df:27:5b:49:93:6a:86:59:56:ba:
         5e:ca:8b:d9:be:75:02:02:83:fd:78:8d:12:f7:26:0e:9f:0c:
         ff:fc:11:b3:bc:fb:bd:58:e8:89:a2:73:d9:4a:3b:0f:2e:51:
         2b:3d:2b:71:ba:ed:5e:89:91:3e:63:9f:dd:4a:36:4e:ff:20:
         92:50:4d:bf:4d:7b:85:91:25:db:0b:17:9e:9f:ea:00:83:14:
         ca:2e:ef:fd:90:23:de:c3:76:91:44:4e:3d:d5:5f:54:4c:0c:
         a8:d8:52:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqBt0dDkzuEivpexmV/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1
NThlYTkwHhcNMjUwNDEzMTIwMTI1WhcNMjUwNDE0MTIwMTI1WjAzMTEwLwYDVQQD
Eyg3OTU1ZDdmYWQyYjEwN2YyMTllODE3NzZiZTFiYjM5ZDFkMDg1YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzcDdvn/7sAR6OSP7ljxtNhwYJo/
vWWA09jic5XzxDXJ7pHmNYCxLwnxtyTW2wgdbUphwF+vh0e6D5bC8iDGF7MO+7yC
DPmSkHJ5zOUqVOEzcQWtZR653Lkp9DPEHcIbsmSuyKUr967Abao8KrfXCwZTyleE
osG5v3Nzg7YNYvR3LISzzNGG7VsQKIUtudlwgxdc98FazVqWd3M+9+vtsjNr4lkf
sUDL9bmLgIS9Z/2pEKMAQYM5FYY7zPqKrbP6K8f1g7s4hvz7fMLSvV3E15fVysAE
Ih1oLDfKQrPbBsUuA26WkCsSVYi94AQcjzy8J7knhJymBQ0wA/ODF8UlQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlV1/rSsQfyGegXdr4bs50dCFvMMB8GA1UdIwQY
MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt
ODc5MDIwNmYwZDc0LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0
LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTetK0YB
ofqoQ9U/o/7N70vUyJ0k1jZ6fVu+K8C5E2Bt4Wl13sQLx4KjDQLwh8+/J9i1nr8x
O0UlXL7Y+BEfKYHjWPMPsG7M9yjl+wqgT02Kc5PiT103JkuMBCzQQH+nc6SYPuTM
fLu6AFrnZ84/gB3r0cxDqn+gJd6WkO0LjQ3HSGBy7nqFf5K4aLH7zbg17rz2CYMe
HlHfJ1tJk2qGWVa6XsqL2b51AgKD/XiNEvcmDp8M//wRs7z7vVjoiaJz2Uo7Dy5R
Kz0rcbrtXomRPmOf3Uo2Tv8gklBNv017hZEl2wsXnp/qAIMUyi7v/ZAj3sN2kURO
PdVfVEwMqNhSKw==
-----END CERTIFICATE-----