Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File:                     Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier:          EYN0dKBNZuC7GPhkf4bMlrHDYrZ3/VssQscK+sSO+B8=
Subject key identifier:   B4:D5:0B:21:44:56:0E:BB:EA:20:9F:1B:AE:FF:13:BB:74:37:A6:BC
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer:       /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial:       0194BD4E8E8A22074858233696C641BEA942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number:          13B2
Signing time:             Fri 31 Jan 2025 17:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:29 +0000
Files and hashes:         1: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: 2M3lPBoadEMJnol8HuC8EJIm78mnG30f1gJX3jE0Mgg=)
                          2: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
                          3: bZ5J52pVLl-6uKTwRoOHwGvZ3Hc.roa (hash: rVKunseZCmdpcu+oMxJ04a4WmetL+hyg+hbTV8sbFBI=)
                          4: taRiNUzpRWqCUbYYFgjb2BkA5tU.roa (hash: UcnFuzWOLcGiH2KaCA2k9veSyP3lyzIVfkpqSiHwKhE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:8e:8a:22:07:48:58:23:36:96:c6:41:be:a9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
        Validity
            Not Before: Jan 31 17:00:29 2025 GMT
            Not After : Feb  1 17:00:29 2025 GMT
        Subject: CN=b4d50b2144560ebbea209f1baeff13bb7437a6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:fc:5e:34:00:3b:b5:b1:15:24:e7:ab:7e:
                    0c:24:f1:64:3b:c6:90:dc:3c:9b:bd:fd:98:d4:d0:
                    1c:66:45:c9:cb:1e:a7:11:56:f8:0d:fa:a9:52:eb:
                    e8:0a:b3:0d:9f:78:84:31:c5:d9:b7:49:0f:b5:91:
                    32:c1:e4:43:56:6f:a6:f3:d0:ee:94:37:04:af:d3:
                    04:2e:56:ee:55:f2:86:c3:be:ad:83:62:55:fa:f4:
                    f6:49:4f:54:90:0f:7c:d5:08:75:fb:dd:10:49:54:
                    53:4a:17:9b:e6:a8:68:c5:d0:79:d8:d0:c5:e4:fd:
                    13:28:ed:5b:4e:76:29:d8:f8:77:c7:71:43:00:b1:
                    c1:d7:be:bb:a1:2e:f5:17:19:9c:b9:e7:b8:a3:37:
                    79:22:41:67:e7:f4:92:a0:a8:da:97:17:a3:11:72:
                    7e:6c:b4:ee:3e:13:bb:af:21:a8:39:85:9d:73:a2:
                    cb:e6:fe:62:33:11:40:40:a2:4f:5a:ec:59:32:6c:
                    82:b8:f9:ea:a5:d2:da:9a:69:de:65:bf:2b:b2:33:
                    9d:0f:14:38:d8:7a:aa:0e:8d:f6:fc:6d:0c:14:c1:
                    61:9e:4e:8d:2e:a5:07:da:df:0e:d7:7d:b0:83:41:
                    19:7b:f9:73:33:b4:59:0d:59:ec:43:80:cf:8d:0f:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:0B:21:44:56:0E:BB:EA:20:9F:1B:AE:FF:13:BB:74:37:A6:BC
            X509v3 Authority Key Identifier:
                keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:a0:90:a3:f3:79:75:2a:aa:03:6d:ca:2e:7f:37:70:5d:
         e2:b3:6b:fb:e6:62:67:bf:e9:29:f2:e5:16:08:89:94:58:b1:
         dc:fe:f3:ff:ef:24:84:ff:15:91:8f:7c:57:e6:3d:cc:b5:c1:
         d9:4b:b5:e8:5b:61:68:33:02:fb:57:c9:5e:35:ea:a6:40:93:
         bd:6d:1a:7e:80:85:d4:01:83:74:fe:d6:98:09:6f:12:6f:bc:
         44:a9:fb:18:aa:f8:5a:9a:ad:c6:99:c9:ab:93:05:7b:54:4f:
         93:0d:57:0c:75:14:61:b9:95:29:c6:73:19:26:81:53:34:c7:
         cd:18:5b:b5:dc:ea:70:21:08:1a:a5:df:f4:e5:48:3d:7f:43:
         01:99:c4:0a:cb:25:98:91:b9:cd:7b:5c:46:1f:6c:33:62:85:
         de:da:8c:a6:31:38:a2:8c:c9:07:bb:86:1b:c4:ae:8e:b5:a5:
         7d:99:1f:e2:b9:9a:65:68:ee:5b:c2:97:d2:99:b3:70:5b:b3:
         7f:03:78:46:7b:e0:00:68:22:eb:39:ba:6e:2d:e3:e9:83:0b:
         81:6b:68:26:e8:13:4e:01:b7:07:2b:ef:56:82:85:cc:87:5b:
         84:1b:cf:c9:21:44:19:b6:af:c1:32:c4:d5:15:10:0f:52:42:
         06:a7:34:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9To6KIgdIWCM2lsZBvqlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjUwMTMxMTcwMDI5WhcNMjUwMjAxMTcwMDI5WjAzMTEwLwYDVQQD
EyhiNGQ1MGIyMTQ0NTYwZWJiZWEyMDlmMWJhZWZmMTNiYjc0MzdhNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs38XjQAO7WxFSTnq34MJPFkO8aQ
3Dybvf2Y1NAcZkXJyx6nEVb4DfqpUuvoCrMNn3iEMcXZt0kPtZEyweRDVm+m89Du
lDcEr9MELlbuVfKGw76tg2JV+vT2SU9UkA981Qh1+90QSVRTSheb5qhoxdB52NDF
5P0TKO1bTnYp2Ph3x3FDALHB1767oS71Fxmcuee4ozd5IkFn5/SSoKjalxejEXJ+
bLTuPhO7ryGoOYWdc6LL5v5iMxFAQKJPWuxZMmyCuPnqpdLammneZb8rsjOdDxQ4
2HqqDo32/G0MFMFhnk6NLqUH2t8O132wg0EZe/lzM7RZDVnsQ4DPjQ9JdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTVCyFEVg676iCfG67/E7t0N6a8MB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcagkKPz
eXUqqgNtyi5/N3Bd4rNr++ZiZ7/pKfLlFgiJlFix3P7z/+8khP8VkY98V+Y9zLXB
2Uu16FthaDMC+1fJXjXqpkCTvW0afoCF1AGDdP7WmAlvEm+8RKn7GKr4WpqtxpnJ
q5MFe1RPkw1XDHUUYbmVKcZzGSaBUzTHzRhbtdzqcCEIGqXf9OVIPX9DAZnECssl
mJG5zXtcRh9sM2KF3tqMpjE4oozJB7uGG8SujrWlfZkf4rmaZWjuW8KX0pmzcFuz
fwN4RnvgAGgi6zm6bi3j6YMLgWtoJugTTgG3ByvvVoKFzIdbhBvPySFEGbavwTLE
1RUQD1JCBqc0Yg==
-----END CERTIFICATE-----