Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File:                     QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier:          53LLPx4REk379LsaNdOzfmgDk02QeakBwemtqHzQGao=
Subject key identifier:   21:EE:40:8D:86:DF:86:49:3F:CC:88:CC:7D:3F:4C:A7:9C:C3:15:9E
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer:       /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial:       01962E985E51DB2C1F9EA2E58AE03080D482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number:          064F
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: g94Omri5MUmanTqPewf96og23hXk40kv4t1n4hM1CFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:5e:51:db:2c:1f:9e:a2:e5:8a:e0:30:80:d4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=21ee408d86df86493fcc88cc7d3f4ca79cc3159e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:52:89:01:63:b4:1d:8e:6d:a7:1a:95:bb:
                    ed:ce:3e:68:d7:ef:0a:f0:a2:a1:e1:ca:81:d9:fa:
                    45:31:d9:5d:0e:d7:aa:a0:c1:ac:64:88:f0:4b:dd:
                    a3:2a:62:da:b6:35:50:cb:51:89:98:e5:9c:9e:21:
                    c5:a8:f2:12:76:e8:f2:03:87:00:8e:4e:da:08:d6:
                    ec:b3:79:b0:91:3a:4f:33:53:4c:a7:56:f2:07:f4:
                    68:d3:bc:93:20:39:ac:77:a4:f8:5e:61:b2:8a:23:
                    a7:2c:75:1c:9c:ba:2b:59:54:50:5a:a2:89:4f:ea:
                    b3:41:88:35:32:33:27:74:a0:0d:97:ef:6e:fb:bf:
                    c9:b3:7d:99:49:64:dd:d5:76:ba:a0:b6:2c:82:56:
                    c3:ed:cd:8b:f8:e0:ef:cd:c0:53:0a:5b:d0:01:bf:
                    e1:c8:47:d1:cc:1e:89:1f:23:50:17:e8:81:e4:86:
                    db:b2:a4:0b:79:f2:2a:2f:df:f0:94:47:6a:9a:ee:
                    ac:03:7a:e4:04:b8:c8:14:b0:77:5a:b1:89:1c:69:
                    60:94:ae:40:7c:9a:1e:f6:02:77:bb:34:7c:fc:98:
                    38:73:64:94:55:26:8a:95:29:ec:42:d1:5d:f6:7e:
                    6f:00:54:84:e9:0f:31:29:46:e6:d5:5e:4f:8d:92:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EE:40:8D:86:DF:86:49:3F:CC:88:CC:7D:3F:4C:A7:9C:C3:15:9E
            X509v3 Authority Key Identifier:
                keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:3e:59:28:8e:56:c9:12:ed:bd:95:ad:ed:98:9d:1f:4c:
         5d:e3:5f:84:69:ec:23:d5:16:a3:24:f6:b2:4b:fb:72:81:4d:
         1b:ac:ae:81:8e:4c:57:dc:41:2c:f2:93:62:79:23:11:2c:bd:
         41:6b:2f:96:64:5f:5d:a0:34:26:3b:c0:14:58:a2:57:a0:ca:
         67:14:b6:cc:71:36:92:41:ce:e9:98:75:7d:fb:4d:d1:eb:80:
         1c:cf:86:dd:9d:f4:45:32:aa:2f:f4:c7:d9:e9:15:29:ad:46:
         22:f2:68:73:39:00:fd:ea:3f:7d:78:39:03:ed:3a:d0:0d:22:
         4c:6c:39:90:16:19:06:73:e8:b2:37:5a:b8:f0:04:a9:87:c2:
         94:0e:92:ab:0e:59:5e:01:d2:19:8d:c0:ee:5f:22:6f:22:53:
         68:2a:19:1f:4a:39:85:df:e7:28:7c:ed:d2:cb:fc:07:0a:ab:
         76:9e:95:16:26:c0:86:bc:e2:f0:8a:15:0a:f1:f6:5b:58:e6:
         38:6d:08:7c:8f:d8:15:85:6c:02:7b:0a:c9:fd:91:46:a0:7c:
         07:cc:6e:18:fd:40:28:14:6b:a1:fb:83:d0:9c:cb:b6:6e:29:
         53:18:e0:e5:cd:c8:27:f9:4f:f0:b7:7e:3a:b6:fa:a5:61:b2:
         7a:f6:07:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumF5R2ywfnqLliuAwgNSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYmZkMjZmMGIyZDEzNjk5YzM1NmVjMzhiOTZjNmE4MjVk
MjFiNmEwHhcNMjUwNDEzMTAwMDU5WhcNMjUwNDE0MTAwMDU5WjAzMTEwLwYDVQQD
EygyMWVlNDA4ZDg2ZGY4NjQ5M2ZjYzg4Y2M3ZDNmNGNhNzljYzMxNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6lSiQFjtB2Obacalbvtzj5o1+8K
8KKh4cqB2fpFMdldDteqoMGsZIjwS92jKmLatjVQy1GJmOWcniHFqPISdujyA4cA
jk7aCNbss3mwkTpPM1NMp1byB/Ro07yTIDmsd6T4XmGyiiOnLHUcnLorWVRQWqKJ
T+qzQYg1MjMndKANl+9u+7/Js32ZSWTd1Xa6oLYsglbD7c2L+ODvzcBTClvQAb/h
yEfRzB6JHyNQF+iB5IbbsqQLefIqL9/wlEdqmu6sA3rkBLjIFLB3WrGJHGlglK5A
fJoe9gJ3uzR8/Jg4c2SUVSaKlSnsQtFd9n5vAFSE6Q8xKUbm1V5PjZLmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHuQI2G34ZJP8yIzH0/TKecwxWeMB8GA1UdIwQY
MBaAFEC/0m8LLRNpnDVuw4uWxqgl0htqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDIt
NTA5M2M1MmUwMmNlLzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDItNTA5M2M1MmUwMmNl
LzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/8+WSiO
VskS7b2Vre2YnR9MXeNfhGnsI9UWoyT2skv7coFNG6yugY5MV9xBLPKTYnkjESy9
QWsvlmRfXaA0JjvAFFiiV6DKZxS2zHE2kkHO6Zh1fftN0euAHM+G3Z30RTKqL/TH
2ekVKa1GIvJoczkA/eo/fXg5A+060A0iTGw5kBYZBnPosjdauPAEqYfClA6Sqw5Z
XgHSGY3A7l8ibyJTaCoZH0o5hd/nKHzt0sv8Bwqrdp6VFibAhrzi8IoVCvH2W1jm
OG0IfI/YFYVsAnsKyf2RRqB8B8xuGP1AKBRrofuD0JzLtm4pUxjg5c3IJ/lP8Ld+
Orb6pWGyevYHeQ==
-----END CERTIFICATE-----