Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
File:                     qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft (raw, json)
Hash identifier:          K9PgYSdpJ/Sv784yKW0Oou21YxtI8CGNEHsUjKzTX2U=
Subject key identifier:   25:02:7A:09:87:1A:16:B3:7A:C9:36:1B:09:C8:06:66:7B:47:25:FF
Authority key identifier: AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04
Certificate issuer:       /CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
Certificate serial:       01962E99894850860FB599F51C634189E435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
Manifest number:          0586
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl (hash: Mof17r2XIg5IQ8Y64kVXMrUeZLne8+bOKqSZpOesnSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:48:50:86:0f:b5:99:f5:1c:63:41:89:e4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=25027a09871a16b37ac9361b09c806667b4725ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:c3:3e:c4:b8:95:ee:61:7f:c9:8b:0b:35:
                    9c:fd:e6:5d:54:05:f8:70:0b:4e:7d:b7:61:cb:7e:
                    f7:b0:e9:51:e1:a7:43:a3:fa:42:5b:81:69:f6:be:
                    d4:8c:3a:2e:ef:97:a1:5e:ec:86:25:66:0c:00:5b:
                    13:88:76:bf:f9:06:e3:c4:c6:d2:1b:89:9a:2a:c3:
                    d7:6a:03:9e:a1:e2:f8:6f:55:46:d2:89:b8:d9:e3:
                    dc:c5:7e:23:e1:b0:5a:fa:0e:49:63:fa:fd:fa:69:
                    8f:29:da:6c:3c:d0:ce:0b:44:02:d4:04:fc:d6:0a:
                    fb:1c:c9:95:62:f1:1e:d3:c7:51:17:13:02:a8:3f:
                    8e:dd:99:45:72:4e:03:98:eb:5c:d0:f9:4c:15:ce:
                    2d:ad:f9:15:6f:8f:06:50:24:c4:06:4f:f7:0f:e6:
                    79:91:f7:09:c9:6b:5d:b1:cb:11:44:09:15:4c:a9:
                    43:fb:46:2d:c2:dc:90:f0:02:55:62:63:76:2a:88:
                    63:b7:e6:4e:92:0a:77:c6:3b:da:04:5b:22:38:87:
                    bb:65:3d:11:c8:82:36:45:07:a2:1f:f0:83:49:f0:
                    30:c7:0d:00:36:b7:3f:e2:09:52:d3:cc:9e:77:c3:
                    c0:0f:00:f7:09:1c:f5:f4:33:4b:43:8b:29:a9:a2:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:02:7A:09:87:1A:16:B3:7A:C9:36:1B:09:C8:06:66:7B:47:25:FF
            X509v3 Authority Key Identifier:
                keyid:AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:54:82:2a:e3:c2:5d:05:a9:29:c4:87:9a:59:40:df:1f:3f:
         22:1a:6e:d7:5d:c8:7b:f9:88:7b:34:aa:54:37:a2:d6:12:5d:
         e1:f8:af:53:dd:65:61:02:28:e7:07:96:fa:45:e6:8d:96:04:
         08:ef:a9:d2:2c:f4:7e:c8:d4:bb:91:ed:43:b4:0d:7d:ac:df:
         b5:67:6c:1a:ca:fa:23:7e:4b:13:31:91:db:48:a3:42:47:28:
         9e:97:94:1f:e4:33:c0:1b:6c:88:41:17:ad:51:4e:f9:5b:9f:
         8f:ab:7f:a4:08:f7:c0:53:1f:72:55:f2:2e:85:87:04:f3:71:
         f9:64:1a:74:95:43:62:32:dc:26:cf:75:42:b5:22:c9:97:a5:
         0b:f2:c1:d2:a7:f3:7c:2b:55:f0:54:51:2e:45:67:b3:bd:3a:
         9e:c4:a7:50:2b:9d:98:e9:09:72:6a:54:89:e4:d3:19:8b:4a:
         3e:4d:07:97:06:cb:20:d0:a2:c9:b1:f2:79:ff:f2:f9:00:59:
         b3:a9:db:91:27:b6:6b:e8:e7:2f:38:af:71:13:e7:59:1c:9b:
         05:e7:4b:77:3c:91:34:e1:60:5e:ea:a7:d5:e7:4a:f6:3e:a9:
         6f:cb:a2:38:17:3e:5f:c5:d9:2c:cf:01:ea:b5:22:9f:3d:4e:
         e0:d0:65:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYlIUIYPtZn1HGNBieQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2M2NDM1YTg1MGYwYzVlOTlhOWNlMDUxZjM0YmRiNTMy
MjJmMDQwHhcNMjUwNDEzMTAwMjE1WhcNMjUwNDE0MTAwMjE1WjAzMTEwLwYDVQQD
EygyNTAyN2EwOTg3MWExNmIzN2FjOTM2MWIwOWM4MDY2NjdiNDcyNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVnDPsS4le5hf8mLCzWc/eZdVAX4
cAtOfbdhy373sOlR4adDo/pCW4Fp9r7UjDou75ehXuyGJWYMAFsTiHa/+QbjxMbS
G4maKsPXagOeoeL4b1VG0om42ePcxX4j4bBa+g5JY/r9+mmPKdpsPNDOC0QC1AT8
1gr7HMmVYvEe08dRFxMCqD+O3ZlFck4DmOtc0PlMFc4trfkVb48GUCTEBk/3D+Z5
kfcJyWtdscsRRAkVTKlD+0YtwtyQ8AJVYmN2Kohjt+ZOkgp3xjvaBFsiOIe7ZT0R
yII2RQeiH/CDSfAwxw0ANrc/4glS08yed8PADwD3CRz19DNLQ4spqaIIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUCegmHGhazesk2GwnIBmZ7RyX/MB8GA1UdIwQY
MBaAFKp8ZDWoUPDF6Zqc4FHzS9tTIi8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW54a05haFE4TVhwbXB6Z1VmTkwyMU1pTHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDkwOTMtZmI2ZC00N2Y2LThhY2Qt
Yzc4MGVkNjEyMzY2LzEvcW54a05haFE4TVhwbXB6Z1VmTkwyMU1pTHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80ZDkwOTMtZmI2ZC00N2Y2LThhY2QtYzc4MGVkNjEyMzY2
LzEvcW54a05haFE4TVhwbXB6Z1VmTkwyMU1pTHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1SCKuPC
XQWpKcSHmllA3x8/Ihpu113Ie/mIezSqVDei1hJd4fivU91lYQIo5weW+kXmjZYE
CO+p0iz0fsjUu5HtQ7QNfazftWdsGsr6I35LEzGR20ijQkconpeUH+QzwBtsiEEX
rVFO+Vufj6t/pAj3wFMfclXyLoWHBPNx+WQadJVDYjLcJs91QrUiyZelC/LB0qfz
fCtV8FRRLkVns706nsSnUCudmOkJcmpUieTTGYtKPk0HlwbLINCiybHyef/y+QBZ
s6nbkSe2a+jnLzivcRPnWRybBedLdzyRNOFgXuqn1edK9j6pb8uiOBc+X8XZLM8B
6rUinz1O4NBlPA==
-----END CERTIFICATE-----