Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File:                     8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier:          Qb1i/I9/SK7J4sf1PCfH8MOdnFCOtKWLCqFPGCUoIUI=
Subject key identifier:   14:FC:CE:0A:B1:18:52:F1:82:BA:AB:0C:9D:9B:2A:66:2A:71:45:97
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer:       /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial:       01962E61FDD3D6533BFE2649E6DC71101F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number:          0EDA
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: 2eNNCumjR4JofRJPe8lCYukfMuAHnmwPafpWPsHsYEo=)
                          2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fd:d3:d6:53:3b:fe:26:49:e6:dc:71:10:1f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=14fcce0ab11852f182baab0c9d9b2a662a714597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:40:77:49:d9:34:7b:bd:ab:02:cb:c4:2d:a6:
                    c9:7b:57:1f:65:7f:b8:d3:df:81:af:d9:d8:9a:16:
                    61:b0:4f:d6:d0:0d:83:52:17:98:ac:e0:0f:8f:21:
                    f4:c6:5a:86:74:4f:d3:96:88:ed:68:98:60:c0:dd:
                    8e:64:6a:1b:1b:51:d9:bf:42:62:1e:89:5f:0d:ee:
                    49:0e:9a:dc:c4:df:ff:ef:2e:f4:44:14:db:26:63:
                    0a:35:de:fe:d9:9b:6c:ca:24:ab:3c:72:6d:d2:8f:
                    98:12:f8:e9:ed:9e:7f:c9:55:9b:c0:c0:b1:52:9f:
                    80:9f:0c:3a:51:8b:05:74:ce:2d:35:91:e3:87:9a:
                    9a:75:9b:12:f1:ab:4a:ea:b3:c1:3a:53:7e:36:41:
                    24:3f:5b:d5:43:cc:15:ae:39:a7:3e:d8:96:4d:b1:
                    15:24:46:56:a9:10:cb:0f:c0:eb:90:1f:ad:e9:be:
                    e5:9e:70:91:c2:90:f5:87:16:c4:b0:58:22:2d:b0:
                    a3:53:a1:74:90:95:9f:f6:9b:47:be:e1:99:6d:13:
                    11:44:f8:61:9f:c2:44:3b:77:bd:ee:b8:89:0a:39:
                    8f:f8:77:40:e2:8f:c7:0a:f7:58:e3:80:b5:03:eb:
                    f2:06:1f:45:57:50:b1:15:88:87:d5:d6:98:76:cf:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FC:CE:0A:B1:18:52:F1:82:BA:AB:0C:9D:9B:2A:66:2A:71:45:97
            X509v3 Authority Key Identifier:
                keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:89:2a:c2:48:9d:62:76:fc:ba:45:71:39:d9:4e:b1:15:13:
         f9:f6:8b:5d:4d:e3:2d:cc:17:9d:b2:4d:20:88:ae:a1:3a:f5:
         e9:ca:a7:62:5e:4d:5d:a2:70:9e:c6:6e:f5:22:d5:0b:9e:63:
         4f:de:e2:d1:52:ac:5a:fe:4f:30:be:e4:e1:47:7c:be:23:f8:
         65:f6:b2:f5:02:77:97:bb:12:52:a4:cb:a7:a1:8b:c9:9c:fe:
         39:e9:1f:d0:ea:47:8c:62:fe:25:09:12:67:56:9b:85:dd:a4:
         8a:4e:16:af:09:30:33:88:98:20:b8:2d:47:49:4e:e2:9d:68:
         91:fd:e8:c6:7d:07:c6:c5:7e:47:7c:34:08:89:b6:4e:bd:4b:
         72:41:9b:d8:d1:48:71:f1:da:a8:d6:64:b9:42:84:d5:15:3b:
         05:05:12:55:d3:64:a9:90:f2:64:d0:5c:ba:2d:42:bf:65:4c:
         32:8a:57:b5:ce:f5:d7:7d:bf:18:2a:88:be:30:33:1f:cc:78:
         f7:37:84:9c:2a:27:2d:d0:03:ea:37:d8:43:21:bb:0b:f4:1e:
         e8:b6:c1:b8:8c:33:74:f1:90:25:5d:9b:e1:0a:37:33:f2:bd:
         6b:f7:47:7e:17:10:72:e6:e6:47:b0:a9:fa:12:64:a2:cb:3e:
         85:9c:7e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYf3T1lM7/iZJ5txxEB81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi
NzJiZTUwHhcNMjUwNDEzMDkwMTM1WhcNMjUwNDE0MDkwMTM1WjAzMTEwLwYDVQQD
EygxNGZjY2UwYWIxMTg1MmYxODJiYWFiMGM5ZDliMmE2NjJhNzE0NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0B3Sdk0e72rAsvELabJe1cfZX+4
09+Br9nYmhZhsE/W0A2DUheYrOAPjyH0xlqGdE/TlojtaJhgwN2OZGobG1HZv0Ji
HolfDe5JDprcxN//7y70RBTbJmMKNd7+2ZtsyiSrPHJt0o+YEvjp7Z5/yVWbwMCx
Up+Anww6UYsFdM4tNZHjh5qadZsS8atK6rPBOlN+NkEkP1vVQ8wVrjmnPtiWTbEV
JEZWqRDLD8DrkB+t6b7lnnCRwpD1hxbEsFgiLbCjU6F0kJWf9ptHvuGZbRMRRPhh
n8JEO3e97riJCjmP+HdA4o/HCvdY44C1A+vyBh9FV1CxFYiH1daYds88QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT8zgqxGFLxgrqrDJ2bKmYqcUWXMB8GA1UdIwQY
MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct
YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm
LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYkqwkid
Ynb8ukVxOdlOsRUT+faLXU3jLcwXnbJNIIiuoTr16cqnYl5NXaJwnsZu9SLVC55j
T97i0VKsWv5PML7k4Ud8viP4Zfay9QJ3l7sSUqTLp6GLyZz+Oekf0OpHjGL+JQkS
Z1abhd2kik4WrwkwM4iYILgtR0lO4p1okf3oxn0HxsV+R3w0CIm2Tr1LckGb2NFI
cfHaqNZkuUKE1RU7BQUSVdNkqZDyZNBcui1Cv2VMMopXtc71132/GCqIvjAzH8x4
9zeEnConLdAD6jfYQyG7C/Qe6LbBuIwzdPGQJV2b4Qo3M/K9a/dHfhcQcubmR7Cp
+hJkoss+hZx+Zg==
-----END CERTIFICATE-----