Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File:                     qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier:          rzturL2cSOcEDJG8r7PUPaA57Go3rLXB2paPP28+zvs=
Subject key identifier:   34:15:7A:E9:13:06:1F:71:42:EC:A6:BB:BD:12:12:80:A9:AB:51:FF
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer:       /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial:       01962F070D8C0C5F65792F83F591C6B92730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number:          11C9
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
                          2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
                          3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
                          4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: skN5V9x0hKA0iak+uSbZ0qznZrLIPXjsGG2k+kIexck=)
                          5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0d:8c:0c:5f:65:79:2f:83:f5:91:c6:b9:27:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=34157ae913061f7142eca6bbbd121280a9ab51ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:24:74:11:78:31:fa:da:8e:90:dd:a3:d5:
                    0e:bc:17:a0:e6:66:4d:c1:4c:c2:fd:5a:23:96:e1:
                    10:96:96:25:c3:fa:9d:d8:7c:59:ee:7d:8a:59:25:
                    10:02:12:f9:db:f9:0a:e4:3d:37:61:20:36:43:d7:
                    35:c5:96:d4:f8:60:e8:c9:e9:3e:e6:69:e0:74:c6:
                    26:62:4b:81:64:1d:be:21:ba:47:a9:93:19:df:a1:
                    56:20:68:f7:80:f4:fd:a7:8c:99:8c:8e:61:f3:e9:
                    eb:7f:4b:b1:0d:08:e5:fe:b3:da:bf:cb:5a:75:61:
                    81:cc:6b:04:4f:38:8e:a8:69:25:fa:4e:97:f4:76:
                    73:aa:ab:f7:19:8f:4b:61:76:8a:74:e8:86:97:9f:
                    47:e2:f1:09:6f:89:d5:f8:73:55:f4:d3:d7:e9:b7:
                    e0:81:6b:72:8e:af:96:f6:36:46:32:4c:18:74:48:
                    fd:c7:36:24:06:e0:2f:dd:c8:16:78:82:c5:29:33:
                    42:58:53:81:a0:bb:4a:ba:87:e2:d9:7c:c7:89:c7:
                    0c:92:6a:4c:dc:8d:ef:03:6f:83:dc:16:e3:b8:6a:
                    48:f5:4e:6f:73:4a:5a:07:75:e1:b4:ec:33:02:85:
                    fe:02:6b:6d:71:c4:06:67:0b:fb:4c:2b:f5:5d:fb:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:15:7A:E9:13:06:1F:71:42:EC:A6:BB:BD:12:12:80:A9:AB:51:FF
            X509v3 Authority Key Identifier:
                keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:11:96:78:e6:2d:d6:b8:19:91:87:74:74:f8:43:3a:2a:
         e9:bf:0b:3f:e1:0e:d9:78:29:1d:ed:46:54:4e:bb:6e:f6:04:
         a1:eb:6e:57:14:7f:1c:69:62:2d:e4:f1:91:aa:38:84:b4:2c:
         9d:2f:f6:75:53:78:07:89:f3:98:88:2c:37:cd:e3:c1:55:7d:
         c3:d6:56:66:fb:20:fc:b6:51:38:7d:a7:2c:33:d7:fa:5d:be:
         98:16:f4:d0:bf:90:00:e7:aa:38:f4:95:dd:03:73:b2:24:ac:
         a5:2e:e7:10:34:29:b8:49:11:af:06:8c:66:bf:41:ac:e1:91:
         34:a5:d5:0e:eb:ef:dd:e5:2e:f6:e3:dd:44:37:de:74:36:12:
         7e:dd:39:ca:7e:30:76:cb:29:83:5d:10:6e:8e:bb:6d:bb:be:
         85:50:87:b1:a2:7c:38:cb:2f:68:ee:5f:9c:bf:92:23:6d:14:
         a7:bc:87:00:b5:ec:ba:2a:9b:64:4c:11:02:06:b7:6b:02:03:
         8c:91:04:4b:8b:df:b8:d7:3a:15:20:74:d1:e4:9a:16:58:49:
         be:cc:3b:b4:56:c2:20:b9:10:71:54:f8:3c:88:2b:7d:58:12:
         f1:a6:2c:7b:5f:c6:59:e8:9a:93:de:18:3b:c1:da:86:7e:94:
         07:ee:cd:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBw2MDF9leS+D9ZHGuScwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi
MWIwNjYwHhcNMjUwNDEzMTIwMTUzWhcNMjUwNDE0MTIwMTUzWjAzMTEwLwYDVQQD
EygzNDE1N2FlOTEzMDYxZjcxNDJlY2E2YmJiZDEyMTI4MGE5YWI1MWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKwkdBF4MfrajpDdo9UOvBeg5mZN
wUzC/VojluEQlpYlw/qd2HxZ7n2KWSUQAhL52/kK5D03YSA2Q9c1xZbU+GDoyek+
5mngdMYmYkuBZB2+IbpHqZMZ36FWIGj3gPT9p4yZjI5h8+nrf0uxDQjl/rPav8ta
dWGBzGsETziOqGkl+k6X9HZzqqv3GY9LYXaKdOiGl59H4vEJb4nV+HNV9NPX6bfg
gWtyjq+W9jZGMkwYdEj9xzYkBuAv3cgWeILFKTNCWFOBoLtKuofi2XzHiccMkmpM
3I3vA2+D3BbjuGpI9U5vc0paB3XhtOwzAoX+AmttccQGZwv7TCv1XfuJNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQVeukTBh9xQuymu70SEoCpq1H/MB8GA1UdIwQY
MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt
ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj
LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxoRlnjm
Lda4GZGHdHT4Qzoq6b8LP+EO2XgpHe1GVE67bvYEoetuVxR/HGliLeTxkao4hLQs
nS/2dVN4B4nzmIgsN83jwVV9w9ZWZvsg/LZROH2nLDPX+l2+mBb00L+QAOeqOPSV
3QNzsiSspS7nEDQpuEkRrwaMZr9BrOGRNKXVDuvv3eUu9uPdRDfedDYSft05yn4w
dsspg10Qbo67bbu+hVCHsaJ8OMsvaO5fnL+SI20Up7yHALXsuiqbZEwRAga3awID
jJEES4vfuNc6FSB00eSaFlhJvsw7tFbCILkQcVT4PIgrfVgS8aYse1/GWeiak94Y
O8Hahn6UB+7NGw==
-----END CERTIFICATE-----