Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File:                     Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier:          8oScJTLWsbpTg/GBUSzPVBxXuhbVAmr3bedfHBwcKmw=
Subject key identifier:   17:2E:EE:89:F3:9B:27:C8:F4:4F:EC:E5:AC:B5:70:0D:AF:8E:15:CE
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer:       /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial:       01962F069C2677B805C599BB8F8FA7E5C12B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number:          1240
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: JDKccpeMueR8aZ6wGZ3xgjwUm6A2q/2jLte4xdG22cQ=)
                          2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
                          3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
                          4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9c:26:77:b8:05:c5:99:bb:8f:8f:a7:e5:c1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=172eee89f39b27c8f44fece5acb5700daf8e15ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:84:0c:f1:ec:a7:6a:b9:cf:2b:42:32:89:
                    66:5f:61:7b:3f:99:b2:ad:ce:e2:fe:5b:bf:8a:06:
                    24:c4:c5:71:7e:df:7c:f2:b3:52:e8:42:6d:86:1b:
                    9b:d3:d2:51:0a:25:47:03:88:ff:42:f3:de:fa:33:
                    b3:5d:a8:83:43:c0:1b:9c:81:1a:1f:d9:27:b0:b6:
                    a9:6d:f9:55:ee:e7:af:fe:7d:62:be:38:87:3a:ef:
                    0c:b8:b1:22:04:11:1d:be:8e:b3:fa:44:3a:c7:9b:
                    bc:13:05:5e:c4:5c:72:0f:95:76:f9:83:7c:3c:bd:
                    cb:af:f6:45:26:7c:66:86:30:41:d1:b4:aa:ff:67:
                    6e:bc:14:a3:fb:07:03:12:66:07:67:f0:5e:7d:d3:
                    26:2e:e7:47:e5:0a:7e:33:44:fe:2b:5d:c7:11:a6:
                    3b:e4:8a:19:be:4c:a0:30:ca:cc:6d:2c:57:29:7c:
                    c4:28:b8:1f:6c:c8:dd:f9:20:9b:0f:87:6a:02:1f:
                    26:58:2c:03:72:a8:c3:69:40:b1:28:39:7c:8e:ab:
                    c1:5e:e4:fa:5a:ea:db:ea:e0:de:ef:4c:2f:c0:0d:
                    97:ff:24:85:73:bc:ef:46:84:ed:87:aa:11:cc:62:
                    b6:1f:d7:c1:ff:bc:a6:1a:c0:5b:47:cd:4b:65:d0:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2E:EE:89:F3:9B:27:C8:F4:4F:EC:E5:AC:B5:70:0D:AF:8E:15:CE
            X509v3 Authority Key Identifier:
                keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2f:aa:3c:85:b0:ba:8c:0c:4f:d8:ad:ea:9c:09:08:5f:65:
         41:32:7a:f1:5f:ab:44:a9:2b:a4:54:82:b9:3a:ba:15:2a:a5:
         8c:01:0b:a9:2a:64:ce:fa:84:32:bc:06:8d:72:c0:19:97:ec:
         83:82:d5:77:f4:a8:d6:f0:f6:29:62:17:6d:33:f8:3f:af:4d:
         03:45:49:7c:89:34:f2:f2:88:f5:1b:20:25:87:41:e4:39:94:
         54:83:39:d7:bf:3c:0c:f7:f8:da:e0:61:bb:7b:51:e0:18:99:
         ab:78:c2:4a:4f:94:21:0d:b7:d6:ee:e0:77:bc:fd:c6:68:a3:
         0c:96:b9:78:19:4d:9c:d5:9f:e0:66:2b:9a:a3:8a:1e:28:69:
         3f:92:ac:4d:a8:02:1f:a7:98:a7:62:1d:a0:50:b8:a8:47:33:
         23:8e:ea:0d:30:30:03:cb:89:bb:11:a9:33:5c:1f:85:44:7d:
         e6:14:99:de:7a:15:13:48:8b:64:a4:ca:01:cd:9b:86:49:e6:
         fd:af:b7:33:77:94:60:15:29:ad:5d:37:6c:81:55:b7:a0:af:
         ed:02:b9:8a:ad:76:12:88:2a:6b:69:76:77:1b:7e:f7:bb:f2:
         52:3b:84:4c:07:95:4a:ea:7c:c3:26:5a:9c:6b:80:00:5b:0a:
         ef:83:b5:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpwmd7gFxZm7j4+n5cErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3
MTJjNzIwHhcNMjUwNDEzMTIwMTI0WhcNMjUwNDE0MTIwMTI0WjAzMTEwLwYDVQQD
EygxNzJlZWU4OWYzOWIyN2M4ZjQ0ZmVjZTVhY2I1NzAwZGFmOGUxNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTmEDPHsp2q5zytCMolmX2F7P5my
rc7i/lu/igYkxMVxft988rNS6EJthhub09JRCiVHA4j/QvPe+jOzXaiDQ8AbnIEa
H9knsLapbflV7uev/n1ivjiHOu8MuLEiBBEdvo6z+kQ6x5u8EwVexFxyD5V2+YN8
PL3Lr/ZFJnxmhjBB0bSq/2duvBSj+wcDEmYHZ/BefdMmLudH5Qp+M0T+K13HEaY7
5IoZvkygMMrMbSxXKXzEKLgfbMjd+SCbD4dqAh8mWCwDcqjDaUCxKDl8jqvBXuT6
Wurb6uDe70wvwA2X/ySFc7zvRoTth6oRzGK2H9fB/7ymGsBbR81LZdDLwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcu7onzmyfI9E/s5ay1cA2vjhXOMB8GA1UdIwQY
MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt
MDFiYjVmZDUzNGY1LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAtMDFiYjVmZDUzNGY1
LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuS+qPIWw
uowMT9it6pwJCF9lQTJ68V+rRKkrpFSCuTq6FSqljAELqSpkzvqEMrwGjXLAGZfs
g4LVd/So1vD2KWIXbTP4P69NA0VJfIk08vKI9RsgJYdB5DmUVIM51788DPf42uBh
u3tR4BiZq3jCSk+UIQ231u7gd7z9xmijDJa5eBlNnNWf4GYrmqOKHihpP5KsTagC
H6eYp2IdoFC4qEczI47qDTAwA8uJuxGpM1wfhUR95hSZ3noVE0iLZKTKAc2bhknm
/a+3M3eUYBUprV03bIFVt6Cv7QK5iq12Eogqa2l2dxt+97vyUjuETAeVSup8wyZa
nGuAAFsK74O1eg==
-----END CERTIFICATE-----