Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
File:                     qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json)
Hash identifier:          EnazmTAtYEe0DT9m+z29fswWF+rLoWNWIT8f06RWi7s=
Subject key identifier:   03:F8:40:F3:26:8F:33:DE:71:C3:0A:77:F9:9F:CE:37:DF:5B:6A:05
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Certificate issuer:       /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial:       01962E61F3F78135C672BFB491790DB18250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
Manifest number:          2F
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: 0q1sgdsUhF/aNRO+lXg4WDFaJ8c0sh2fVmtdxaUL5hs=)
                          2: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (hash: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:f7:81:35:c6:72:bf:b4:91:79:0d:b1:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=03f840f3268f33de71c30a77f99fce37df5b6a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:1a:84:a2:01:4b:de:67:cf:94:33:7c:64:
                    a5:f3:a3:81:c1:04:c9:03:ab:8f:dc:28:29:94:6d:
                    fd:d6:4e:3f:8f:60:71:a0:6b:b2:bd:51:b1:73:e9:
                    d9:a2:70:73:7a:cb:8a:84:59:e7:bc:ee:4f:30:9f:
                    77:d3:8e:cf:bc:b6:56:30:22:a1:6e:08:c0:88:ad:
                    fc:e3:9d:b9:ac:fb:09:b7:59:1d:34:58:e6:b3:fb:
                    ac:f0:ab:c2:cb:1b:28:c7:bc:63:ff:0d:a1:71:63:
                    a9:58:da:ca:11:6f:3b:36:a9:8d:4d:81:08:9d:4d:
                    4a:87:cb:41:fb:9c:7e:e4:be:a1:fa:0b:f3:bf:8b:
                    a3:8e:a5:02:d0:ca:08:e1:66:8b:b6:88:51:e3:1c:
                    fa:11:26:21:bc:15:ed:a7:b0:ac:0f:04:a8:45:e1:
                    2d:db:d3:14:ae:1c:92:71:b9:ab:4c:2a:71:7f:1d:
                    e5:d9:dc:98:fc:1f:c5:af:28:c7:5c:11:b8:75:c9:
                    34:3d:be:67:5a:bf:52:d9:ab:b6:5d:b5:84:91:36:
                    68:b3:2d:02:2c:8b:7d:01:97:ac:ac:4a:1e:f1:08:
                    e1:d3:fb:1f:0b:ce:fa:4b:20:4e:6d:91:cf:73:cb:
                    60:44:9d:66:98:d2:d3:78:bb:9e:2d:3f:db:5a:43:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:40:F3:26:8F:33:DE:71:C3:0A:77:F9:9F:CE:37:DF:5B:6A:05
            X509v3 Authority Key Identifier:
                keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:08:fb:47:fc:50:a6:a1:dd:d5:d6:53:64:a6:a7:7f:bd:f5:
         f8:0e:73:cd:f8:ee:f3:81:d7:5b:d6:d4:dd:7a:0e:2b:ae:40:
         31:8c:ef:5b:cf:7d:58:ec:a2:fd:28:b7:e3:24:fb:62:7a:8f:
         b6:b5:a3:dd:e4:43:93:c0:0d:f1:5c:9f:6d:63:b6:55:35:7e:
         d4:4d:5e:cb:ff:68:7a:00:82:62:27:cf:b1:15:d0:17:d4:8b:
         cc:ab:86:49:1c:5b:db:69:43:d2:de:18:af:b5:81:b4:33:c8:
         d0:e0:d4:61:b7:00:32:f2:d5:e1:18:48:5a:50:5a:d5:87:9e:
         44:c5:36:c6:3b:b6:e4:70:ab:a9:b7:55:45:33:ef:a3:ad:64:
         1b:48:6a:fc:6d:0d:7c:d4:5f:5e:1f:b8:91:96:e3:88:1a:23:
         f2:88:d7:9d:d3:cc:56:ba:b6:11:20:54:5e:46:4e:88:fe:9c:
         ec:c9:35:fb:97:af:5e:4c:3f:97:b1:fb:dd:95:0c:56:01:2d:
         65:4f:80:47:95:2b:10:2b:08:27:08:25:be:8e:ef:bd:f0:4f:
         84:11:ed:85:4f:ee:a5:e1:12:b7:ec:29:02:29:02:55:fb:64:
         4a:f9:28:f3:75:6d:3c:97:5a:0d:8b:c1:b1:31:8b:2b:77:ff:
         37:92:7d:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfP3gTXGcr+0kXkNsYJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTllMGU4OTgzZDlkZWI0MTU3MTZkNjFlOGM5MTI1MTBh
MjZjMjQwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
EygwM2Y4NDBmMzI2OGYzM2RlNzFjMzBhNzdmOTlmY2UzN2RmNWI2YTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvskahKIBS95nz5QzfGSl86OBwQTJ
A6uP3CgplG391k4/j2BxoGuyvVGxc+nZonBzesuKhFnnvO5PMJ93047PvLZWMCKh
bgjAiK384525rPsJt1kdNFjms/us8KvCyxsox7xj/w2hcWOpWNrKEW87NqmNTYEI
nU1Kh8tB+5x+5L6h+gvzv4ujjqUC0MoI4WaLtohR4xz6ESYhvBXtp7CsDwSoReEt
29MUrhyScbmrTCpxfx3l2dyY/B/FryjHXBG4dck0Pb5nWr9S2au2XbWEkTZosy0C
LIt9AZesrEoe8Qjh0/sfC876SyBObZHPc8tgRJ1mmNLTeLueLT/bWkP9zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP4QPMmjzPeccMKd/mfzjffW2oFMB8GA1UdIwQY
MBaAFKqp4OiYPZ3rQVcW1h6MkSUQomwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMt
NDUxYjk2YWZjMmIxLzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMtNDUxYjk2YWZjMmIx
LzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQj7R/xQ
pqHd1dZTZKanf731+A5zzfju84HXW9bU3XoOK65AMYzvW899WOyi/Si34yT7YnqP
trWj3eRDk8AN8VyfbWO2VTV+1E1ey/9oegCCYifPsRXQF9SLzKuGSRxb22lD0t4Y
r7WBtDPI0ODUYbcAMvLV4RhIWlBa1YeeRMU2xju25HCrqbdVRTPvo61kG0hq/G0N
fNRfXh+4kZbjiBoj8ojXndPMVrq2ESBUXkZOiP6c7Mk1+5evXkw/l7H73ZUMVgEt
ZU+AR5UrECsIJwglvo7vvfBPhBHthU/upeESt+wpAikCVftkSvko83VtPJdaDYvB
sTGLK3f/N5J9/Q==
-----END CERTIFICATE-----