Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          wbExBoCrFbJJ7EG+atL4U3aP3xN61A4RwStmXZ3Yie4=
Subject key identifier:   6A:F9:98:0E:DB:D8:8C:9F:68:16:6A:88:A0:BC:C9:32:07:CD:E1:99
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       01962E617C5B4901B37D8215F42C9589676A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          0574
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 1-llihL5lyA2GQR2PsGqhLCANktk.roa (hash: mzRJaHFcotS/RWlzVy4qgPbMvteqzba1lDARW973GdY=)
                          2: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
                          3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: 3mY5/0Z3kPV6EP7ubGqtPLsW367wsjEBQIHVyIU77lM=)
                          5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7c:5b:49:01:b3:7d:82:15:f4:2c:95:89:67:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=6af9980edbd88c9f68166a88a0bcc93207cde199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:55:6e:35:85:4f:ca:8e:01:55:73:3e:6d:
                    aa:24:92:aa:bb:91:6f:c1:21:ab:1d:f2:39:e0:5d:
                    83:c2:8e:27:a9:d4:d0:f0:de:94:5c:2f:57:da:ba:
                    bc:ca:2b:df:72:bb:ea:7d:83:51:30:0d:a7:44:fb:
                    39:1d:d7:d7:f8:0d:c7:f5:45:a9:8b:57:a0:9d:5c:
                    52:3f:a4:27:d3:7a:57:41:90:aa:0d:84:f5:85:53:
                    bd:3f:cd:b9:fd:12:d5:35:3c:1e:cc:37:26:9b:49:
                    21:62:44:99:df:5a:74:e1:60:a7:61:72:a5:3a:29:
                    ce:43:96:6e:9c:e6:95:ba:5f:c9:06:5b:6f:d2:10:
                    15:97:d8:62:0f:17:09:57:f1:15:1b:f2:48:3e:59:
                    43:fd:c4:bc:25:1c:de:fe:66:94:3e:13:c8:2c:af:
                    a1:c8:9c:7d:e5:3d:87:74:72:49:15:66:fe:3b:07:
                    c3:fe:6b:0d:74:15:00:f3:32:4b:0e:97:b0:0d:5d:
                    5e:af:0d:55:ec:e5:e7:0e:4b:72:7c:a6:88:d6:fc:
                    5e:13:5d:09:7f:be:63:6c:33:40:71:2d:71:4a:3a:
                    ff:a9:d9:84:02:17:26:10:d1:a6:5f:c0:4c:d2:53:
                    76:5d:84:0a:93:77:5d:85:f6:17:a5:0f:34:c1:ff:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:98:0E:DB:D8:8C:9F:68:16:6A:88:A0:BC:C9:32:07:CD:E1:99
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:54:1b:75:70:3d:6c:46:ec:8f:5d:6e:bb:df:46:70:da:b1:
         31:c2:e1:b5:29:44:b4:24:f5:43:3d:e8:5e:16:ae:c2:d5:32:
         e8:2d:10:d1:35:b5:25:ed:a1:06:b0:cb:c8:c3:00:a0:ac:bf:
         27:63:da:44:ab:12:d7:15:3f:11:01:49:38:4b:22:98:be:4b:
         c1:66:57:48:bf:83:ba:40:f2:9b:f0:11:6c:70:16:91:28:cc:
         8e:1f:ea:fe:83:26:bc:b7:69:6b:71:4a:de:68:f1:fb:63:de:
         d1:6b:00:f7:4a:22:be:fb:34:0a:7b:cd:31:e9:da:33:7c:8b:
         74:46:3e:25:0c:10:56:ff:25:a5:78:e9:aa:09:10:d6:c4:63:
         40:eb:6a:65:a9:4c:cb:9c:2f:30:46:e6:ec:01:f7:d1:84:0b:
         29:a1:67:3d:4e:c3:02:47:84:fa:c6:49:5a:ff:23:59:d4:ad:
         79:6b:ad:c6:ab:bb:ad:e5:68:a9:a5:ed:b0:19:e0:a4:2f:97:
         f7:01:04:30:f1:4f:91:31:2c:c3:9a:c4:e1:ce:3e:61:e4:5a:
         b9:7a:94:95:34:3c:e1:98:a8:62:8e:6e:33:bd:8e:35:32:d7:
         e1:d2:b3:12:a1:f9:04:53:2c:36:2d:1d:ee:53:51:2b:16:dc:
         c9:70:74:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXxbSQGzfYIV9CyViWdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTQ5MThmYzdmZGZiNzNiYmE4Y2Y1OGQ0Y2I1ZmU0NDlj
ZjgzZjYwHhcNMjUwNDEzMDkwMTAyWhcNMjUwNDE0MDkwMTAyWjAzMTEwLwYDVQQD
Eyg2YWY5OTgwZWRiZDg4YzlmNjgxNjZhODhhMGJjYzkzMjA3Y2RlMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxatVbjWFT8qOAVVzPm2qJJKqu5Fv
wSGrHfI54F2Dwo4nqdTQ8N6UXC9X2rq8yivfcrvqfYNRMA2nRPs5HdfX+A3H9UWp
i1egnVxSP6Qn03pXQZCqDYT1hVO9P825/RLVNTwezDcmm0khYkSZ31p04WCnYXKl
OinOQ5ZunOaVul/JBltv0hAVl9hiDxcJV/EVG/JIPllD/cS8JRze/maUPhPILK+h
yJx95T2HdHJJFWb+OwfD/msNdBUA8zJLDpewDV1erw1V7OXnDktyfKaI1vxeE10J
f75jbDNAcS1xSjr/qdmEAhcmENGmX8BM0lN2XYQKk3ddhfYXpQ80wf8kPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr5mA7b2IyfaBZqiKC8yTIHzeGZMB8GA1UdIwQY
MBaAFKjkkY/H/ftzu6jPWNTLX+RJz4P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMt
MDE1ZWE1MDE5NTIwLzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMtMDE1ZWE1MDE5NTIw
LzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFQbdXA9
bEbsj11uu99GcNqxMcLhtSlEtCT1Qz3oXhauwtUy6C0Q0TW1Je2hBrDLyMMAoKy/
J2PaRKsS1xU/EQFJOEsimL5LwWZXSL+DukDym/ARbHAWkSjMjh/q/oMmvLdpa3FK
3mjx+2Pe0WsA90oivvs0CnvNMenaM3yLdEY+JQwQVv8lpXjpqgkQ1sRjQOtqZalM
y5wvMEbm7AH30YQLKaFnPU7DAkeE+sZJWv8jWdSteWutxqu7reVoqaXtsBngpC+X
9wEEMPFPkTEsw5rE4c4+YeRauXqUlTQ84ZioYo5uM72ONTLX4dKzEqH5BFMsNi0d
7lNRKxbcyXB0+Q==
-----END CERTIFICATE-----