Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File:                     QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier:          R0EDhJueIqLJnzni9vZKfk6bR8d4H8hTV+zxZ1e8kVs=
Subject key identifier:   26:F0:4F:38:92:2C:FA:F2:F2:0C:45:1B:C4:5D:D3:23:59:B6:33:5A
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer:       /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial:       01962E986BE74A130E822258BE5F875C6319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: 9gp2J+wH3z2A2vq4Xnk87g35Gyuuh4/5NwvPksAElxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6b:e7:4a:13:0e:82:22:58:be:5f:87:5c:63:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=26f04f38922cfaf2f20c451bc45dd32359b6335a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:a2:2b:0d:cf:d2:86:5c:8d:e3:86:c3:7a:
                    1e:bb:1e:b2:71:8e:64:a0:43:2c:05:d8:7e:9c:76:
                    e3:7a:cd:24:34:cc:29:c7:c5:3c:1e:3e:dd:9b:98:
                    37:13:fd:f6:ab:17:fe:99:34:ea:a4:d7:13:b6:b7:
                    3f:0c:2c:75:bb:d3:57:84:67:18:a2:52:bc:33:96:
                    66:bb:20:96:53:48:1c:34:fc:28:b6:87:38:06:0e:
                    19:9b:1a:df:5d:4f:b5:45:78:93:36:9f:c1:fe:1c:
                    f7:01:83:5b:10:5b:7f:b1:5d:a4:10:6e:a9:5f:e9:
                    f2:72:2a:bd:26:2e:8a:88:2f:61:05:5b:d5:98:01:
                    58:36:f6:e7:0e:b7:69:a8:0c:a4:1b:00:3c:33:a8:
                    2d:03:c7:64:ca:ae:64:2f:78:df:72:d0:0f:1c:09:
                    93:45:48:56:59:51:51:10:e2:ad:87:1f:ac:17:19:
                    c3:37:2d:95:c2:76:58:eb:8b:cf:61:a9:3a:0c:71:
                    76:98:f0:94:8d:5f:26:14:b5:0f:ad:21:8e:ce:bb:
                    29:dc:d9:71:7a:59:95:ca:b7:2b:a5:fb:eb:42:71:
                    22:af:93:8e:07:32:ba:e0:8d:de:c1:44:79:2d:71:
                    3b:9b:79:8c:b0:7c:78:e1:f4:20:a3:54:0b:fa:6e:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F0:4F:38:92:2C:FA:F2:F2:0C:45:1B:C4:5D:D3:23:59:B6:33:5A
            X509v3 Authority Key Identifier:
                keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:b7:eb:e8:7b:dd:0e:57:24:b9:95:d8:9b:9f:c0:e2:f5:
         0f:b0:58:48:1a:38:f3:af:db:37:04:5f:91:6e:74:78:28:8e:
         33:8b:56:db:4c:c1:74:e5:ee:ff:ae:67:09:e9:08:1e:e3:4f:
         5e:2a:1f:50:64:47:cc:8e:8b:78:8f:cf:5d:e9:35:d6:8a:f0:
         f9:48:e5:67:78:e1:9f:56:57:23:cc:47:be:93:7c:63:48:18:
         ca:5a:9a:fe:cc:66:c2:97:d0:99:e0:95:3f:59:41:7c:f2:48:
         0d:69:7b:1b:69:93:a8:10:26:4d:e8:bc:c7:b6:81:ea:18:32:
         40:2f:81:25:ca:63:ed:0f:b9:f4:fe:a1:0c:26:8f:41:7f:5b:
         82:14:83:9a:02:dd:e1:54:e7:dd:a4:1a:0a:21:6e:bb:46:20:
         ca:bb:6c:01:be:fd:a7:77:9e:f1:93:f3:16:de:f2:ac:1d:bf:
         b6:5e:2f:5a:93:1f:b7:ed:49:2c:84:f2:6c:69:0f:56:e8:f9:
         75:7b:e9:cb:af:37:6b:73:61:fa:f6:51:d6:48:9e:8d:51:d9:
         6f:eb:12:2e:61:f8:1d:85:b6:76:16:8f:a0:c8:d6:79:bb:96:
         b8:41:ff:45:e2:0d:5b:6a:c1:32:b0:c4:9a:4e:d6:2b:bf:f1:
         51:31:7c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumGvnShMOgiJYvl+HXGMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxN2VkNDFmMGFkZmRmMTlhNzE2MTRlMzkwNGMwZjA4NDk5
NzkyNTAwHhcNMjUwNDEzMTAwMTAyWhcNMjUwNDE0MTAwMTAyWjAzMTEwLwYDVQQD
EygyNmYwNGYzODkyMmNmYWYyZjIwYzQ1MWJjNDVkZDMyMzU5YjYzMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVKiKw3P0oZcjeOGw3oeux6ycY5k
oEMsBdh+nHbjes0kNMwpx8U8Hj7dm5g3E/32qxf+mTTqpNcTtrc/DCx1u9NXhGcY
olK8M5ZmuyCWU0gcNPwotoc4Bg4ZmxrfXU+1RXiTNp/B/hz3AYNbEFt/sV2kEG6p
X+nyciq9Ji6KiC9hBVvVmAFYNvbnDrdpqAykGwA8M6gtA8dkyq5kL3jfctAPHAmT
RUhWWVFREOKthx+sFxnDNy2VwnZY64vPYak6DHF2mPCUjV8mFLUPrSGOzrsp3Nlx
elmVyrcrpfvrQnEir5OOBzK64I3ewUR5LXE7m3mMsHx44fQgo1QL+m4akwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbwTziSLPry8gxFG8Rd0yNZtjNaMB8GA1UdIwQY
MBaAFEF+1B8K398ZpxYU45BMDwhJl5JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEt
NmVhODkxZThjZmM3LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEtNmVhODkxZThjZmM3
LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7G36+h7
3Q5XJLmV2JufwOL1D7BYSBo486/bNwRfkW50eCiOM4tW20zBdOXu/65nCekIHuNP
XiofUGRHzI6LeI/PXek11orw+UjlZ3jhn1ZXI8xHvpN8Y0gYylqa/sxmwpfQmeCV
P1lBfPJIDWl7G2mTqBAmTei8x7aB6hgyQC+BJcpj7Q+59P6hDCaPQX9bghSDmgLd
4VTn3aQaCiFuu0YgyrtsAb79p3ee8ZPzFt7yrB2/tl4vWpMft+1JLITybGkPVuj5
dXvpy683a3Nh+vZR1kiejVHZb+sSLmH4HYW2dhaPoMjWebuWuEH/ReINW2rBMrDE
mk7WK7/xUTF8og==
-----END CERTIFICATE-----