Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File:                     QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier:          Eq9M2Hof5iONBsSRL0Kox3Mjf02tLPuWmrhGbenY7Q4=
Subject key identifier:   A0:C7:55:49:1A:E2:03:78:3C:B7:C5:86:EE:A8:7F:FE:DE:2A:58:12
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer:       /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial:       01962DF3A00BA9C4E23E699F49629F7DB825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number:          141A
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: W9/+I+9YGP49twVuKiIjEvPMisN9NWBRILvJjE89Azs=)
                          2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a0:0b:a9:c4:e2:3e:69:9f:49:62:9f:7d:b8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=a0c755491ae203783cb7c586eea87ffede2a5812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a0:ce:5e:9e:af:9f:86:2a:62:4a:5d:61:4d:
                    7f:c7:0a:a2:f8:71:ec:c5:09:b9:66:f0:92:74:7c:
                    c8:b3:7e:79:a8:9f:ba:c9:f4:40:4d:d3:32:1c:f8:
                    9d:7d:de:bb:ad:e5:01:16:04:23:55:23:21:0b:f0:
                    0d:97:74:48:e2:49:10:57:c6:5f:04:66:d9:5b:91:
                    ba:2f:3c:86:44:6a:30:4e:62:6c:47:7d:f9:27:df:
                    99:ae:4c:5a:ba:ef:dd:aa:31:d2:34:7d:b3:f1:43:
                    fe:4b:20:c1:a2:98:53:48:08:bd:99:42:03:a4:69:
                    39:0c:ed:6c:05:32:49:03:c6:55:5a:4c:5d:3b:92:
                    23:42:f8:66:ed:cd:9e:60:a5:5d:6a:28:7e:c2:47:
                    50:1d:e7:1a:c3:28:4d:b4:35:57:5a:42:5e:44:09:
                    0e:7b:e8:5a:19:0d:e1:4d:75:b1:0a:4d:e8:06:1a:
                    1b:46:41:cd:7f:d9:02:6b:79:1a:8b:c2:3d:58:d5:
                    bb:89:bd:25:39:f7:a8:37:97:cd:4b:72:2d:c3:bf:
                    ff:5f:e0:6e:f9:8f:2b:e5:a1:1c:7f:1a:a9:dd:94:
                    37:29:fb:aa:e9:93:65:aa:37:ff:c6:d7:6c:9d:61:
                    b8:d1:51:52:e4:e3:f2:82:d8:00:89:c0:20:f5:04:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:55:49:1A:E2:03:78:3C:B7:C5:86:EE:A8:7F:FE:DE:2A:58:12
            X509v3 Authority Key Identifier:
                keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:42:63:4b:b5:31:ac:79:8f:f0:c2:55:a1:b7:8d:9d:4d:09:
         aa:72:47:6d:41:37:f2:d9:f0:69:3e:59:5d:73:16:64:78:ca:
         9a:dc:51:aa:e6:f5:c4:16:3f:9e:36:3f:9c:52:ed:d8:fe:53:
         6c:d0:62:a2:c7:62:01:e4:7a:65:d8:62:fc:fb:04:f8:9d:40:
         07:18:74:5b:68:84:6c:78:27:2c:8f:26:1e:b7:e6:05:88:0f:
         f8:41:95:35:af:0c:ad:d3:ff:37:1e:39:63:46:92:a8:ae:40:
         8c:cf:88:05:05:41:fa:be:76:7b:57:2b:a9:ee:9f:0f:ac:90:
         c2:1c:6f:3a:47:36:a1:e0:48:21:93:81:75:b6:00:2a:07:24:
         1b:5a:0e:25:87:3e:45:a6:d5:04:85:e9:c1:ae:4b:71:e1:a9:
         65:2d:9e:b7:21:48:3b:06:00:01:ce:3a:f8:b3:07:ea:a3:d4:
         65:6c:40:95:09:61:2f:f3:a4:b4:26:64:a9:5c:e1:bc:41:35:
         40:90:ac:c2:ff:92:20:8e:7a:35:be:b3:8f:75:66:80:c2:5b:
         d1:a5:88:ef:99:59:ea:2c:8a:de:24:d1:ad:e8:65:d9:25:60:
         92:6e:70:64:f5:42:15:3c:58:c4:ef:0f:7a:e8:27:d8:5a:42:
         f8:90:93:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86ALqcTiPmmfSWKffbglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjUwNDEzMDcwMTAyWhcNMjUwNDE0MDcwMTAyWjAzMTEwLwYDVQQD
EyhhMGM3NTU0OTFhZTIwMzc4M2NiN2M1ODZlZWE4N2ZmZWRlMmE1ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKDOXp6vn4YqYkpdYU1/xwqi+HHs
xQm5ZvCSdHzIs355qJ+6yfRATdMyHPidfd67reUBFgQjVSMhC/ANl3RI4kkQV8Zf
BGbZW5G6LzyGRGowTmJsR335J9+Zrkxauu/dqjHSNH2z8UP+SyDBophTSAi9mUID
pGk5DO1sBTJJA8ZVWkxdO5IjQvhm7c2eYKVdaih+wkdQHecawyhNtDVXWkJeRAkO
e+haGQ3hTXWxCk3oBhobRkHNf9kCa3kai8I9WNW7ib0lOfeoN5fNS3Itw7//X+Bu
+Y8r5aEcfxqp3ZQ3Kfuq6ZNlqjf/xtdsnWG40VFS5OPygtgAicAg9QRLXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDHVUka4gN4PLfFhu6of/7eKlgSMB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUJjS7Ux
rHmP8MJVobeNnU0JqnJHbUE38tnwaT5ZXXMWZHjKmtxRqub1xBY/njY/nFLt2P5T
bNBiosdiAeR6Zdhi/PsE+J1ABxh0W2iEbHgnLI8mHrfmBYgP+EGVNa8MrdP/Nx45
Y0aSqK5AjM+IBQVB+r52e1crqe6fD6yQwhxvOkc2oeBIIZOBdbYAKgckG1oOJYc+
RabVBIXpwa5LceGpZS2etyFIOwYAAc46+LMH6qPUZWxAlQlhL/OktCZkqVzhvEE1
QJCswv+SII56Nb6zj3VmgMJb0aWI75lZ6iyK3iTRrehl2SVgkm5wZPVCFTxYxO8P
eugn2FpC+JCTmw==
-----END CERTIFICATE-----