Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File:                     QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier:          2TdXNgd5dAn31CcBV/hrXFM0Wpw25Wz/Z+KucHPWd3A=
Subject key identifier:   B7:3D:57:CD:E8:19:22:C8:9D:98:03:09:52:31:F8:AA:9E:FB:B7:E6
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer:       /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial:       01962F0711FA07A7590F3638B1A284EBC26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: 69QAQsdwYSTgGJJYu2+0mrtYWHBF7JWnK86hXkZC+v4=)
                          2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:11:fa:07:a7:59:0f:36:38:b1:a2:84:eb:c2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=b73d57cde81922c89d9803095231f8aa9efbb7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:ee:7e:fb:94:17:cd:65:26:2f:2a:31:ca:
                    0e:bc:d7:ef:00:18:98:c4:e4:61:10:43:44:7a:67:
                    31:64:9e:94:42:41:79:e6:73:03:05:0b:e7:da:bc:
                    77:ef:90:00:b3:10:35:fe:80:13:2b:7e:6b:40:c3:
                    84:43:55:c8:7d:7b:ee:a7:d4:7e:2c:d9:6f:05:06:
                    9b:0b:7d:6d:dc:68:15:8c:94:98:7a:5a:c0:a0:1b:
                    99:1d:89:8b:54:e7:d2:d3:8d:bc:ba:13:ec:6e:1a:
                    58:a8:de:49:88:7b:bf:c7:ce:72:15:43:0a:93:16:
                    76:fb:06:f4:fb:76:3b:9a:ff:7c:ec:89:00:ed:ff:
                    62:fe:d0:66:0c:8b:84:5a:19:a0:dd:f5:0a:50:08:
                    fb:e7:02:c0:25:17:2f:4c:b2:01:08:a8:22:dc:a6:
                    dd:c4:c9:17:b7:e6:12:c6:4e:c4:b0:a4:08:28:82:
                    7d:8a:4b:d7:23:fe:ac:57:f8:5c:02:00:4b:e5:5c:
                    3a:cc:47:9c:73:02:8f:97:64:06:65:79:3c:3a:40:
                    d2:74:d7:6d:a5:2b:02:e6:af:e6:b3:ef:3c:87:34:
                    8b:a8:42:56:da:99:8a:2e:d6:ea:31:d6:0c:54:0c:
                    96:19:91:64:53:31:a2:d7:1a:14:e0:2a:cc:43:4d:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:57:CD:E8:19:22:C8:9D:98:03:09:52:31:F8:AA:9E:FB:B7:E6
            X509v3 Authority Key Identifier:
                keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:44:78:0d:af:43:4d:d5:a0:ec:74:d9:78:eb:2e:59:12:9c:
         69:2f:c7:ea:f9:c4:3d:02:d9:a6:cb:c9:0f:06:3a:75:5e:41:
         2d:14:0f:cd:7c:d6:45:bd:ad:db:4c:b3:27:7a:e0:ec:91:d8:
         7c:f5:f9:e3:b2:58:e7:d4:69:72:6f:d8:db:ef:71:76:9b:f2:
         9d:3c:66:34:a2:5d:f9:76:46:b4:4d:87:f4:ae:99:e4:06:9c:
         85:96:74:98:00:c6:f9:ab:de:8b:ff:9e:c8:e2:43:c0:cb:29:
         64:2e:6f:fa:01:25:96:bb:e4:f3:30:a1:0a:e1:d0:7d:77:8c:
         48:d8:27:c0:25:07:5e:93:a6:e4:99:fc:f9:d7:92:ef:67:d1:
         b4:30:fa:41:2d:38:cf:e7:6f:13:92:a2:6c:ed:05:c9:c2:80:
         7d:dc:92:92:2b:6a:ca:9c:f3:c5:dc:2c:cf:19:38:e3:04:69:
         a1:fa:19:b6:4e:24:04:b8:ff:5a:96:c6:3f:0e:f3:9f:f2:25:
         3f:8e:30:c5:ba:df:df:0a:3c:d9:27:95:8f:ee:60:09:12:2d:
         11:94:91:b8:da:f4:99:fd:4f:ea:ec:8a:0f:ac:57:f2:00:33:
         ea:ca:85:43:12:b1:5a:2b:e1:2e:92:0c:39:3e:0b:87:33:40:
         eb:38:9b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxH6B6dZDzY4saKE68JtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm
NGQ1ZGMwHhcNMjUwNDEzMTIwMTU0WhcNMjUwNDE0MTIwMTU0WjAzMTEwLwYDVQQD
EyhiNzNkNTdjZGU4MTkyMmM4OWQ5ODAzMDk1MjMxZjhhYTllZmJiN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlDufvuUF81lJi8qMcoOvNfvABiY
xORhEENEemcxZJ6UQkF55nMDBQvn2rx375AAsxA1/oATK35rQMOEQ1XIfXvup9R+
LNlvBQabC31t3GgVjJSYelrAoBuZHYmLVOfS0428uhPsbhpYqN5JiHu/x85yFUMK
kxZ2+wb0+3Y7mv987IkA7f9i/tBmDIuEWhmg3fUKUAj75wLAJRcvTLIBCKgi3Kbd
xMkXt+YSxk7EsKQIKIJ9ikvXI/6sV/hcAgBL5Vw6zEeccwKPl2QGZXk8OkDSdNdt
pSsC5q/ms+88hzSLqEJW2pmKLtbqMdYMVAyWGZFkUzGi1xoU4CrMQ02t0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc9V83oGSLInZgDCVIx+Kqe+7fmMB8GA1UdIwQY
MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt
MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk
LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0R4Da9D
TdWg7HTZeOsuWRKcaS/H6vnEPQLZpsvJDwY6dV5BLRQPzXzWRb2t20yzJ3rg7JHY
fPX547JY59Rpcm/Y2+9xdpvynTxmNKJd+XZGtE2H9K6Z5AachZZ0mADG+avei/+e
yOJDwMspZC5v+gEllrvk8zChCuHQfXeMSNgnwCUHXpOm5Jn8+deS72fRtDD6QS04
z+dvE5KibO0FycKAfdySkitqypzzxdwszxk44wRpofoZtk4kBLj/WpbGPw7zn/Il
P44wxbrf3wo82SeVj+5gCRItEZSRuNr0mf1P6uyKD6xX8gAz6sqFQxKxWivhLpIM
OT4LhzNA6zibBQ==
-----END CERTIFICATE-----