Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File:                     qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier:          PeVufQLT1rwxpl3Hc8qh8ahiAgl5iV88NXn4h6f5DHk=
Subject key identifier:   FF:FD:61:33:24:80:FB:7C:13:42:ED:84:A4:65:05:6C:B3:54:22:A7
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer:       /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial:       01962F063F4DF3E410AE5BA4430A8644AFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number:          07A0
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: Ln1C_YgxE2WGWgP1KdQJY5Zikas.roa (hash: 3EUFd8IxwHmwZnC3ljBW7KIOpmaBqqwxBLml7yaPCxE=)
                          2: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: SUoHpFKIp74Sl8v5m3Bm8NGV7bJ/yVEz4nAPUdiuDG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:4d:f3:e4:10:ae:5b:a4:43:0a:86:44:af:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=fffd61332480fb7c1342ed84a465056cb35422a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:8c:09:82:d3:db:ee:94:c1:ff:7e:65:a1:
                    03:27:f4:b3:75:75:88:82:95:d7:fb:c3:bf:3a:01:
                    4f:dd:f7:c7:c4:02:df:bd:37:1d:db:07:e9:dc:e0:
                    30:21:22:9a:db:91:d4:26:36:db:c4:ce:ef:a3:d6:
                    57:0c:95:f2:1b:36:20:96:45:b5:cc:09:35:6d:67:
                    d7:5a:a9:fa:e8:3a:99:bc:ce:d7:33:e0:d1:11:0d:
                    61:c8:e0:b3:ab:74:48:1a:7d:43:a5:e2:f3:b5:bc:
                    d5:d3:b2:26:62:b4:dd:1d:08:8c:73:b1:e4:d3:9f:
                    f7:74:9c:5d:49:e1:d6:82:58:ab:4b:c8:c4:d8:4e:
                    c6:77:50:fb:87:a0:bd:68:c4:19:0b:ab:c3:55:b9:
                    55:15:91:b9:80:ff:3c:3e:80:37:3a:4e:5d:a4:29:
                    8f:e4:fc:41:43:4d:b1:b9:3a:a8:23:7d:c6:57:6f:
                    af:61:84:fc:40:f1:7c:69:df:78:a8:9a:c3:71:29:
                    de:da:c6:c9:3d:17:39:47:e2:2a:7d:8a:db:34:1a:
                    0c:2f:c5:79:2e:ff:b0:15:d9:16:45:c8:15:de:06:
                    7b:dd:63:42:d8:2b:ac:fe:bf:3e:04:b0:ea:29:e1:
                    e1:80:d0:16:eb:b7:0a:d5:51:23:03:ac:c1:a1:47:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:61:33:24:80:FB:7C:13:42:ED:84:A4:65:05:6C:B3:54:22:A7
            X509v3 Authority Key Identifier:
                keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:91:94:78:cb:8e:62:47:0d:7d:d3:35:07:c6:0d:18:9d:df:
         60:fb:16:83:6a:71:36:92:15:08:d5:70:6f:7b:c3:02:89:ea:
         4c:c8:d9:55:b2:bc:be:36:38:a5:72:ec:c8:83:c5:a4:f4:c9:
         23:3b:06:af:86:de:82:10:9c:b8:cf:7e:23:33:c0:24:5e:5c:
         1e:62:23:bd:bf:8d:35:b8:9a:29:ce:1b:38:ec:c5:1f:5d:4d:
         5b:a6:85:3a:00:3e:58:f8:d2:92:a5:ae:e5:7e:02:f5:8a:36:
         70:c8:ea:37:1e:dc:92:77:58:2a:54:88:0e:96:34:a6:13:58:
         e8:6c:c3:3e:b5:34:50:16:65:ec:72:22:ec:45:8f:13:56:ce:
         5e:d3:e0:02:38:20:0e:a9:32:fe:91:e7:e1:5a:8f:4a:59:f1:
         11:67:78:2f:53:c2:d9:86:a8:92:3c:04:bf:5c:17:41:78:62:
         9f:b3:f9:51:d4:14:69:96:50:9d:df:8d:0e:dc:f0:ae:86:f0:
         3c:f4:aa:98:73:04:c6:cf:5e:41:ca:0c:6e:e1:1b:f6:84:a4:
         75:f7:70:9c:1b:9f:04:5a:19:b8:28:37:a2:42:a9:69:11:f3:
         e7:80:e2:77:66:10:d5:1d:a6:4c:e4:d7:20:16:4b:e4:0c:42:
         26:03:16:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBj9N8+QQrlukQwqGRK/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NjhhZGYxMjBhNzRhNWQxMDgwOWNmZDNjYjY4MTRmYzg5
YjFmNDYwHhcNMjUwNDEzMTIwMTAwWhcNMjUwNDE0MTIwMTAwWjAzMTEwLwYDVQQD
EyhmZmZkNjEzMzI0ODBmYjdjMTM0MmVkODRhNDY1MDU2Y2IzNTQyMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgGMCYLT2+6Uwf9+ZaEDJ/SzdXWI
gpXX+8O/OgFP3ffHxALfvTcd2wfp3OAwISKa25HUJjbbxM7vo9ZXDJXyGzYglkW1
zAk1bWfXWqn66DqZvM7XM+DREQ1hyOCzq3RIGn1DpeLztbzV07ImYrTdHQiMc7Hk
05/3dJxdSeHWglirS8jE2E7Gd1D7h6C9aMQZC6vDVblVFZG5gP88PoA3Ok5dpCmP
5PxBQ02xuTqoI33GV2+vYYT8QPF8ad94qJrDcSne2sbJPRc5R+IqfYrbNBoML8V5
Lv+wFdkWRcgV3gZ73WNC2Cus/r8+BLDqKeHhgNAW67cK1VEjA6zBoUfJRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/9YTMkgPt8E0LthKRlBWyzVCKnMB8GA1UdIwQY
MBaAFKlorfEgp0pdEICc/Ty2gU/Imx9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2It
ODBjZTQ1ODYxMjM5LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2ItODBjZTQ1ODYxMjM5
LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJGUeMuO
YkcNfdM1B8YNGJ3fYPsWg2pxNpIVCNVwb3vDAonqTMjZVbK8vjY4pXLsyIPFpPTJ
IzsGr4beghCcuM9+IzPAJF5cHmIjvb+NNbiaKc4bOOzFH11NW6aFOgA+WPjSkqWu
5X4C9Yo2cMjqNx7ckndYKlSIDpY0phNY6GzDPrU0UBZl7HIi7EWPE1bOXtPgAjgg
Dqky/pHn4VqPSlnxEWd4L1PC2YaokjwEv1wXQXhin7P5UdQUaZZQnd+NDtzwrobw
PPSqmHMExs9eQcoMbuEb9oSkdfdwnBufBFoZuCg3okKpaRHz54Did2YQ1R2mTOTX
IBZL5AxCJgMWQA==
-----END CERTIFICATE-----