Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File:                     Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier:          PvJ0eJzABPq/1djiBOsPXNfB7s46CzRUIu3w2ynLHEg=
Subject key identifier:   0C:39:2F:FF:B4:30:25:99:84:56:74:9D:05:62:C0:5C:85:01:E2:40
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer:       /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial:       01962E619031121166741E994AD663162A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=)
                          2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: dnNyTmTG+/CEFb7sc1B2VMBezdRiU6prcAe0sDO3wJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:90:31:12:11:66:74:1e:99:4a:d6:63:16:2a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=0c392fffb43025998456749d0562c05c8501e240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:3e:0e:25:64:55:78:33:8d:88:d7:5e:65:
                    80:2c:23:1c:e3:55:d5:89:c1:05:a0:12:12:87:75:
                    10:3d:e0:b2:30:9c:7f:18:70:b1:49:70:d3:0d:a6:
                    03:e3:06:06:4e:73:d7:44:29:79:34:32:48:d1:35:
                    1b:1b:68:78:0b:b7:0d:25:80:a2:0e:6d:79:bc:82:
                    e6:86:e8:bb:e3:22:93:32:b2:7f:a4:b3:da:f2:fa:
                    52:5d:9d:31:1c:a0:e1:07:83:cd:b4:85:53:8f:c5:
                    fb:0a:7a:41:14:c6:a7:b2:3f:b0:cb:1c:fa:8c:ee:
                    31:88:74:38:3a:2f:45:6b:2f:70:93:de:bb:4c:85:
                    cc:e5:5a:c7:87:4a:8b:dd:cc:4d:30:8b:8d:18:d0:
                    83:02:ff:f9:ad:c3:2f:92:3d:6a:44:2d:e2:3a:4d:
                    1f:8d:30:36:cc:12:c9:69:9f:59:3a:d1:f0:75:b3:
                    c3:85:47:c0:77:c1:05:ba:89:aa:04:8e:0b:2f:83:
                    2f:a1:61:d0:7e:fa:49:6a:8f:e9:9b:11:6e:41:f0:
                    a8:d5:c4:22:fb:9d:9e:d8:fe:2e:25:d5:6f:64:b1:
                    b6:f6:9e:fa:5d:cc:fc:38:05:fb:24:a3:30:f8:75:
                    1f:fa:7b:f2:a0:b0:40:90:00:e9:dd:fe:7f:22:d1:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:2F:FF:B4:30:25:99:84:56:74:9D:05:62:C0:5C:85:01:E2:40
            X509v3 Authority Key Identifier:
                keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:61:e2:86:83:a9:7c:70:27:81:d8:56:40:f5:93:e4:e7:6a:
         53:9d:1d:9e:70:5c:5c:fe:51:75:12:92:24:c4:4f:5d:29:e7:
         00:90:97:56:7b:39:b3:22:6b:07:27:7a:37:88:28:ad:25:4f:
         f8:8b:e9:f0:64:5f:4e:ab:12:89:d8:56:a4:52:91:81:37:8f:
         d2:d0:db:1f:db:9b:c3:7f:29:05:ec:dd:1d:91:80:9a:ae:dd:
         0a:b5:76:73:23:17:b3:d0:e5:1a:98:bc:14:87:21:3e:ab:33:
         a1:29:d4:70:67:a3:a8:94:67:b8:98:31:49:e4:fe:50:f3:15:
         8e:f1:80:39:7b:3e:af:2d:3f:f4:c9:14:53:f9:5f:82:ad:f0:
         e7:f0:e3:73:eb:35:8e:3e:da:42:df:32:06:d7:a2:3f:fe:e4:
         54:78:bc:6b:12:c4:7a:e1:2e:a1:49:cb:09:53:a3:db:dd:f5:
         83:81:50:95:0a:09:65:23:93:b9:69:05:da:d2:22:e7:07:99:
         8a:34:f4:1c:ca:b0:83:1f:f1:e6:56:f8:15:de:3b:3a:a7:a2:
         e0:93:36:68:11:e6:55:6d:23:8f:67:f6:07:69:3f:10:57:87:
         68:35:75:21:f3:b1:4e:58:11:a2:94:02:da:9e:54:63:56:a8:
         58:fd:ca:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZAxEhFmdB6ZStZjFiptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh
Y2I0NGQwHhcNMjUwNDEzMDkwMTA3WhcNMjUwNDE0MDkwMTA3WjAzMTEwLwYDVQQD
EygwYzM5MmZmZmI0MzAyNTk5ODQ1Njc0OWQwNTYyYzA1Yzg1MDFlMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycQ+DiVkVXgzjYjXXmWALCMc41XV
icEFoBISh3UQPeCyMJx/GHCxSXDTDaYD4wYGTnPXRCl5NDJI0TUbG2h4C7cNJYCi
Dm15vILmhui74yKTMrJ/pLPa8vpSXZ0xHKDhB4PNtIVTj8X7CnpBFMansj+wyxz6
jO4xiHQ4Oi9Fay9wk967TIXM5VrHh0qL3cxNMIuNGNCDAv/5rcMvkj1qRC3iOk0f
jTA2zBLJaZ9ZOtHwdbPDhUfAd8EFuomqBI4LL4MvoWHQfvpJao/pmxFuQfCo1cQi
+52e2P4uJdVvZLG29p76Xcz8OAX7JKMw+HUf+nvyoLBAkADp3f5/ItHsiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw5L/+0MCWZhFZ0nQViwFyFAeJAMB8GA1UdIwQY
MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt
MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj
LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2HihoOp
fHAngdhWQPWT5OdqU50dnnBcXP5RdRKSJMRPXSnnAJCXVns5syJrByd6N4gorSVP
+Ivp8GRfTqsSidhWpFKRgTeP0tDbH9ubw38pBezdHZGAmq7dCrV2cyMXs9DlGpi8
FIchPqszoSnUcGejqJRnuJgxSeT+UPMVjvGAOXs+ry0/9MkUU/lfgq3w5/Djc+s1
jj7aQt8yBteiP/7kVHi8axLEeuEuoUnLCVOj2931g4FQlQoJZSOTuWkF2tIi5weZ
ijT0HMqwgx/x5lb4Fd47Oqei4JM2aBHmVW0jj2f2B2k/EFeHaDV1IfOxTlgRopQC
2p5UY1aoWP3KDw==
-----END CERTIFICATE-----