Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File:                     QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier:          UbxgwTesZEcjQkCUQLjxIS+upmLdEvR2gfQ8qtkviHU=
Subject key identifier:   FB:A3:73:C8:A5:E6:F2:C9:4A:D6:A3:E3:8C:0B:85:4E:B0:F0:67:77
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer:       /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial:       01962F3DC2C2C32E650F6FF0DDC43527DCCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number:          1238
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: eYOcbHGGluMu4HISVXvzi6fi7CRsrrn/CvbUdSKDKJw=)
                          2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:c2:c3:2e:65:0f:6f:f0:dd:c4:35:27:dc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=fba373c8a5e6f2c94ad6a3e38c0b854eb0f06777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:87:ef:06:2e:da:f1:57:a6:b8:2a:0f:b8:
                    7b:62:1e:11:a3:dc:79:31:4f:7d:3f:53:09:8c:63:
                    5a:42:a4:a3:62:6a:3a:e7:28:0a:e1:06:31:f4:bc:
                    eb:6f:9f:f4:50:76:a6:79:f1:92:52:06:ff:6e:d4:
                    c9:d9:d0:4b:59:35:ee:ee:95:ca:e5:11:0c:d7:45:
                    a3:f9:4c:7e:fb:88:ec:e9:53:d2:d5:e1:ff:98:bf:
                    5d:c6:71:ab:cf:19:1b:7b:fd:78:5c:0e:76:e5:bd:
                    41:ed:49:8c:85:14:64:fa:4d:67:f6:c3:63:b6:87:
                    b0:e9:16:ef:b2:fa:3a:03:0a:a1:70:80:ad:71:78:
                    1c:b3:94:9e:77:ce:e6:db:60:40:31:d3:9b:2e:58:
                    ff:5e:f3:af:95:8c:3c:2a:e4:91:fa:61:b9:d8:c7:
                    15:c8:69:0f:20:13:2f:05:9d:78:40:c2:57:c4:ff:
                    1b:d7:3a:99:2d:0b:d7:84:e3:d9:26:86:97:49:41:
                    0b:58:27:b6:64:9d:69:44:75:d3:f8:e8:ee:73:64:
                    59:cf:5b:51:39:60:9b:36:73:45:2e:ec:d4:d4:4f:
                    b1:dd:88:49:19:73:23:25:b9:b0:76:f9:f4:d8:a9:
                    b6:a9:73:46:ee:b4:d0:bf:f5:0f:5a:88:18:54:b2:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A3:73:C8:A5:E6:F2:C9:4A:D6:A3:E3:8C:0B:85:4E:B0:F0:67:77
            X509v3 Authority Key Identifier:
                keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:81:6c:b9:4b:7b:ec:8f:9a:8c:e0:9c:a5:8e:76:72:93:82:
         68:75:95:95:b5:be:c6:c3:c1:8a:83:ad:4e:a5:4c:31:f3:81:
         2f:5d:29:bd:ba:66:ff:27:b6:3f:c7:54:e7:87:fe:10:80:02:
         d9:38:67:7a:5b:81:81:2b:96:0b:1f:fe:2d:1e:66:7d:72:e5:
         f2:8c:6d:52:40:73:cc:b8:26:2d:0f:33:97:98:34:41:16:c4:
         21:93:2c:6e:b9:31:ea:f1:59:bd:17:62:d6:8e:65:29:38:bb:
         4a:6a:30:0b:13:f3:f5:5e:d5:57:ac:6f:37:42:4b:e7:ba:b2:
         76:2b:b3:43:e7:bb:83:e4:67:f9:fd:07:f7:06:4c:19:47:45:
         a8:e3:fe:b3:55:f8:1e:98:37:33:32:63:b0:18:d8:18:f8:57:
         7b:46:bd:f3:ac:2a:ac:47:14:22:b7:8e:f2:01:60:a5:10:ce:
         61:da:c6:6b:f3:c1:a2:23:b9:fb:64:9f:96:43:c1:86:06:3c:
         78:52:02:39:d8:ee:53:a4:f5:a5:b8:c6:76:0b:ec:d8:f5:0a:
         55:d2:ea:54:ec:e9:66:5d:3f:1d:ae:c5:92:bd:06:99:ad:44:
         00:27:5a:6c:c0:fc:0d:3b:1f:ef:e3:fe:11:2f:b0:9b:e9:ec:
         f4:6b:9d:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcLCwy5lD2/w3cQ1J9zLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDc5ZWE1NjJkZDNhN2QwY2YyYTZlOTc4YjZiYmYzNzhm
NzNjZTQwHhcNMjUwNDEzMTMwMTM4WhcNMjUwNDE0MTMwMTM4WjAzMTEwLwYDVQQD
EyhmYmEzNzNjOGE1ZTZmMmM5NGFkNmEzZTM4YzBiODU0ZWIwZjA2Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtweH7wYu2vFXprgqD7h7Yh4Ro9x5
MU99P1MJjGNaQqSjYmo65ygK4QYx9Lzrb5/0UHamefGSUgb/btTJ2dBLWTXu7pXK
5REM10Wj+Ux++4js6VPS1eH/mL9dxnGrzxkbe/14XA525b1B7UmMhRRk+k1n9sNj
toew6Rbvsvo6AwqhcICtcXgcs5Sed87m22BAMdObLlj/XvOvlYw8KuSR+mG52McV
yGkPIBMvBZ14QMJXxP8b1zqZLQvXhOPZJoaXSUELWCe2ZJ1pRHXT+Ojuc2RZz1tR
OWCbNnNFLuzU1E+x3YhJGXMjJbmwdvn02Km2qXNG7rTQv/UPWogYVLJ0EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPujc8il5vLJStaj44wLhU6w8Gd3MB8GA1UdIwQY
MBaAFEBHnqVi3Tp9DPKm6Xi2u/N49zzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYt
ODkzNmYwOTFmNGY0LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYtODkzNmYwOTFmNGY0
LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYFsuUt7
7I+ajOCcpY52cpOCaHWVlbW+xsPBioOtTqVMMfOBL10pvbpm/ye2P8dU54f+EIAC
2ThneluBgSuWCx/+LR5mfXLl8oxtUkBzzLgmLQ8zl5g0QRbEIZMsbrkx6vFZvRdi
1o5lKTi7SmowCxPz9V7VV6xvN0JL57qydiuzQ+e7g+Rn+f0H9wZMGUdFqOP+s1X4
Hpg3MzJjsBjYGPhXe0a986wqrEcUIreO8gFgpRDOYdrGa/PBoiO5+2SflkPBhgY8
eFICOdjuU6T1pbjGdgvs2PUKVdLqVOzpZl0/Ha7Fkr0Gma1EACdabMD8DTsf7+P+
ES+wm+ns9GudaA==
-----END CERTIFICATE-----