Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File:                     _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier:          BjKfG+F3/48nkDsPXyazx1avQsdbnijquEcZrff0v5I=
Subject key identifier:   19:4B:D3:E8:7E:8D:3C:94:B1:52:38:5B:30:35:82:15:8A:19:76:52
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer:       /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial:       01962DF3ADDCA006D1AB3F1DC170B1D0792D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number:          0B6A
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: y3H7FnIw/xu33SOdIrF0dXMtSnlaNNCeFuFxGsnQolU=)
                          2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ad:dc:a0:06:d1:ab:3f:1d:c1:70:b1:d0:79:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=194bd3e87e8d3c94b152385b303582158a197652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:58:38:02:1d:8a:6a:79:bf:16:8e:f6:ef:
                    e9:fd:d9:15:3a:45:70:8b:75:63:c9:51:42:84:ee:
                    d6:5d:97:85:ab:14:53:2f:20:86:b7:3d:f6:af:29:
                    d3:06:87:95:85:92:6a:d6:b5:74:e8:21:d0:c2:99:
                    9b:9e:48:e6:66:65:b3:35:c8:ed:02:b2:a1:08:2b:
                    51:fb:2f:f1:2f:75:b9:4e:e4:ef:4d:68:e2:78:71:
                    9f:56:8e:9e:21:eb:f6:dd:60:d5:53:30:29:06:86:
                    d8:cd:f2:8b:c0:ab:9e:50:4b:85:a6:46:e3:a2:9b:
                    93:2e:97:46:38:60:69:d0:5f:3c:5b:f0:fd:e3:59:
                    4a:bd:94:cc:da:10:7b:02:ff:2a:3c:85:aa:1d:0e:
                    bb:a2:aa:ef:d7:33:59:e2:bd:ec:96:21:ba:b9:0f:
                    ca:12:2a:03:9e:36:e1:c1:e8:64:ed:c1:2c:ed:61:
                    4d:e7:6e:95:c9:48:90:2e:d0:e8:85:d9:53:b5:c3:
                    bd:17:4c:19:22:b9:9b:22:55:93:24:51:1d:a8:60:
                    c1:bc:cb:e6:f4:1e:32:cf:c9:48:aa:ca:5b:7c:bb:
                    ff:b0:5f:fc:a1:6e:57:b4:ae:a8:6b:a7:71:6b:85:
                    9a:46:84:99:41:f8:0c:3b:2f:30:ed:7a:cd:73:88:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4B:D3:E8:7E:8D:3C:94:B1:52:38:5B:30:35:82:15:8A:19:76:52
            X509v3 Authority Key Identifier:
                keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:75:a9:dd:7d:ef:b8:06:51:01:86:fe:85:c2:ea:33:a3:79:
         bc:69:dc:a7:aa:e8:6b:43:ee:aa:37:11:ed:a1:33:aa:a3:e3:
         d5:07:cb:3a:38:91:3c:84:4c:70:b2:f7:9c:2e:90:8e:e2:12:
         c8:e2:2b:8c:9e:72:2d:4a:de:97:15:5e:c2:e5:07:58:34:fc:
         d4:70:9a:f5:bd:ae:6d:5a:ed:47:03:6c:d0:c9:b7:06:22:bd:
         40:81:69:96:dc:b9:34:31:d4:4b:46:7d:b8:47:d5:4d:d2:86:
         cc:7e:86:70:24:f2:32:82:68:b6:ff:90:5e:f0:90:60:b2:83:
         b5:e7:7d:82:fe:ed:ff:c0:c7:50:b8:3b:1d:6c:3c:74:b0:9d:
         20:bd:b3:d7:ce:83:c4:0d:a8:c2:cf:52:75:b6:bd:b6:f1:df:
         5e:81:30:e7:58:61:07:f5:21:77:03:a0:d4:f8:12:c2:c9:37:
         8e:19:cc:c5:54:37:f0:4e:e1:64:48:c9:ed:e1:de:34:6e:8c:
         95:61:b7:b5:fe:b3:a9:21:be:51:17:12:f0:43:e2:c0:ca:72:
         7e:79:1c:86:a2:e7:1a:e5:64:c1:a4:17:2f:e9:84:c2:9f:a8:
         96:9f:e0:0d:c5:bf:38:14:a5:89:85:dd:20:de:99:b1:49:95:
         e5:42:12:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt863coAbRqz8dwXCx0HktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMDU3NmY4NjNkZjdlMzIxYjFjYTUwNTBjZTJjMmRkMmZj
YWRiMDkwHhcNMjUwNDEzMDcwMTA2WhcNMjUwNDE0MDcwMTA2WjAzMTEwLwYDVQQD
EygxOTRiZDNlODdlOGQzYzk0YjE1MjM4NWIzMDM1ODIxNThhMTk3NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7hYOAIdimp5vxaO9u/p/dkVOkVw
i3VjyVFChO7WXZeFqxRTLyCGtz32rynTBoeVhZJq1rV06CHQwpmbnkjmZmWzNcjt
ArKhCCtR+y/xL3W5TuTvTWjieHGfVo6eIev23WDVUzApBobYzfKLwKueUEuFpkbj
opuTLpdGOGBp0F88W/D941lKvZTM2hB7Av8qPIWqHQ67oqrv1zNZ4r3sliG6uQ/K
EioDnjbhwehk7cEs7WFN526VyUiQLtDohdlTtcO9F0wZIrmbIlWTJFEdqGDBvMvm
9B4yz8lIqspbfLv/sF/8oW5XtK6oa6dxa4WaRoSZQfgMOy8w7XrNc4jvxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlL0+h+jTyUsVI4WzA1ghWKGXZSMB8GA1UdIwQY
MBaAFP0Fdvhj334yGxylBQziwt0vytsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEt
NDAxNmY2YjQ0NWEwLzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEtNDAxNmY2YjQ0NWEw
LzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnWp3X3v
uAZRAYb+hcLqM6N5vGncp6roa0PuqjcR7aEzqqPj1QfLOjiRPIRMcLL3nC6QjuIS
yOIrjJ5yLUrelxVewuUHWDT81HCa9b2ubVrtRwNs0Mm3BiK9QIFplty5NDHUS0Z9
uEfVTdKGzH6GcCTyMoJotv+QXvCQYLKDted9gv7t/8DHULg7HWw8dLCdIL2z186D
xA2ows9Sdba9tvHfXoEw51hhB/UhdwOg1PgSwsk3jhnMxVQ38E7hZEjJ7eHeNG6M
lWG3tf6zqSG+URcS8EPiwMpyfnkchqLnGuVkwaQXL+mEwp+olp/gDcW/OBSliYXd
IN6ZsUmV5UISsA==
-----END CERTIFICATE-----