Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File:                     qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier:          8aZCNxzjg6Fs7ZmGbhCMab4yLmjNo9XsouhZIdiXRQU=
Subject key identifier:   AB:83:B0:D2:71:57:56:A6:DE:94:C6:48:86:FA:6D:79:10:B9:AF:0D
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer:       /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial:       01962E99BE07DCD47F23B33816EBE3B2BA9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number:          027D
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: aDWy8M8NSADt5KB8V0oG9ce2rFOQ46/VTlzwwbvZeX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:be:07:dc:d4:7f:23:b3:38:16:eb:e3:b2:ba:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=ab83b0d2715756a6de94c64886fa6d7910b9af0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:73:34:aa:34:e0:d5:04:bb:a5:65:6e:cd:
                    16:8a:9b:12:9b:7e:6b:1c:19:26:4e:05:06:0c:d2:
                    69:79:19:35:a8:41:fd:3a:32:66:30:c6:ed:01:85:
                    1b:e9:4f:fe:16:fc:41:b5:c0:e5:b3:23:ca:12:7f:
                    e7:e2:6d:a1:b0:1c:61:1f:d5:d0:e8:7b:64:78:54:
                    8e:5d:89:e7:01:24:7e:cc:5a:65:d1:c9:41:39:71:
                    da:7b:6c:09:98:83:56:3b:00:a1:a8:d4:49:6d:c0:
                    c5:4a:ca:43:b9:ed:67:4f:b7:d3:94:fe:e3:90:4a:
                    ab:68:24:11:29:e5:99:4e:af:46:be:c3:82:f3:89:
                    62:90:5f:f8:06:82:bc:21:65:57:e0:c1:11:8d:a2:
                    56:9b:45:5e:18:73:63:a4:e6:4d:97:65:46:b2:49:
                    6e:a2:af:f8:8e:6a:6e:17:4f:52:d0:e4:b8:17:8a:
                    ab:94:cb:20:3b:10:db:92:0e:fd:db:d4:55:fe:92:
                    75:b0:26:90:f3:6d:46:69:d6:e2:bc:36:43:2d:b9:
                    37:66:04:60:2e:87:72:e7:55:ec:fd:53:4e:e5:2f:
                    63:c8:11:6c:76:01:d9:13:0a:2b:c9:a6:b6:f1:0b:
                    e8:bc:55:93:49:e0:71:98:14:30:14:1e:e0:0c:43:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:B0:D2:71:57:56:A6:DE:94:C6:48:86:FA:6D:79:10:B9:AF:0D
            X509v3 Authority Key Identifier:
                keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:c1:04:4d:07:be:5c:48:66:8f:a1:94:79:f5:b4:6b:04:
         cf:dd:e8:93:ce:49:04:a1:c9:ad:ba:ee:4f:7a:4f:13:65:13:
         a5:93:52:83:a2:d9:b1:99:bf:05:5a:d4:b9:a3:10:98:ec:f5:
         d2:be:9d:e8:73:8a:d9:41:d0:4b:49:0d:87:28:36:65:84:79:
         ce:14:ad:ed:53:d2:67:36:a0:e0:c3:5c:a4:3c:e8:bd:17:58:
         5d:11:8d:9c:c8:e5:6f:b7:3b:fb:9a:96:8c:51:7c:48:40:2f:
         85:fb:7b:e3:49:01:09:c2:e1:f1:d8:68:50:dd:9d:59:f3:6a:
         39:84:95:0a:bf:2a:e0:31:d1:88:32:36:14:cb:d7:f9:b2:ac:
         c5:63:6c:09:46:a0:42:1e:3f:81:bd:45:24:f4:c7:24:19:98:
         f5:c0:a6:f2:0e:e8:bf:ce:01:ad:47:fe:88:b4:c6:f9:d9:1c:
         ed:64:6e:05:33:73:01:c7:55:9d:59:ae:62:fa:bd:76:6b:0b:
         ef:f4:d9:13:f6:17:51:8b:6d:18:94:e0:a6:ba:94:76:d3:97:
         fc:84:9d:a8:18:ba:b4:84:dd:6b:2a:cb:85:bf:b4:13:25:49:
         b2:2b:1c:e5:ba:04:5e:c2:37:c0:dc:10:f8:41:f2:18:7a:9a:
         fa:8c:e4:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumb4H3NR/I7M4FuvjsrqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWY0YzBhMzcyZDAxNDU1NWY3ZDRkN2M4OWNmOTk2ZjA1
MTQyZjUwHhcNMjUwNDEzMTAwMjI5WhcNMjUwNDE0MTAwMjI5WjAzMTEwLwYDVQQD
EyhhYjgzYjBkMjcxNTc1NmE2ZGU5NGM2NDg4NmZhNmQ3OTEwYjlhZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0JzNKo04NUEu6Vlbs0WipsSm35r
HBkmTgUGDNJpeRk1qEH9OjJmMMbtAYUb6U/+FvxBtcDlsyPKEn/n4m2hsBxhH9XQ
6HtkeFSOXYnnASR+zFpl0clBOXHae2wJmINWOwChqNRJbcDFSspDue1nT7fTlP7j
kEqraCQRKeWZTq9GvsOC84likF/4BoK8IWVX4MERjaJWm0VeGHNjpOZNl2VGsklu
oq/4jmpuF09S0OS4F4qrlMsgOxDbkg7929RV/pJ1sCaQ821GadbivDZDLbk3ZgRg
Lody51Xs/VNO5S9jyBFsdgHZEworyaa28QvovFWTSeBxmBQwFB7gDEOtywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuDsNJxV1am3pTGSIb6bXkQua8NMB8GA1UdIwQY
MBaAFKivTAo3LQFFVffU18ic+ZbwUUL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84YjJiYmQtYWYxMi00NmFlLWE1MGYt
ZGFiMzhmZDNjNzg2LzEvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84YjJiYmQtYWYxMi00NmFlLWE1MGYtZGFiMzhmZDNjNzg2
LzEvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeO/BBE0H
vlxIZo+hlHn1tGsEz93ok85JBKHJrbruT3pPE2UTpZNSg6LZsZm/BVrUuaMQmOz1
0r6d6HOK2UHQS0kNhyg2ZYR5zhSt7VPSZzag4MNcpDzovRdYXRGNnMjlb7c7+5qW
jFF8SEAvhft740kBCcLh8dhoUN2dWfNqOYSVCr8q4DHRiDI2FMvX+bKsxWNsCUag
Qh4/gb1FJPTHJBmY9cCm8g7ov84BrUf+iLTG+dkc7WRuBTNzAcdVnVmuYvq9dmsL
7/TZE/YXUYttGJTgprqUdtOX/ISdqBi6tITdayrLhb+0EyVJsisc5boEXsI3wNwQ
+EHyGHqa+ozk9Q==
-----END CERTIFICATE-----