Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File:                     QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier:          /Yd74YwN0OS1faHdxWCmRnr3AHBbr0lPyGOxeV7ks4k=
Subject key identifier:   6B:A7:40:8E:A6:7A:82:76:EA:E4:6C:90:19:93:74:F8:6B:18:16:BC
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer:       /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial:       01962E99A5BBCC644BCBAA99F6F1A1B36363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number:          0AF9
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: 3z/bm8T58GRmQUrOJnudrcguJjUbW7EryJIyRbh40Xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a5:bb:cc:64:4b:cb:aa:99:f6:f1:a1:b3:63:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=6ba7408ea67a8276eae46c90199374f86b1816bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:9a:05:14:5f:09:b0:4a:8f:0c:7c:f6:cb:
                    66:e5:05:39:a5:e8:9d:3a:11:2a:67:80:a2:a9:3b:
                    8c:69:8a:6a:70:41:68:f7:28:d2:f8:39:43:c5:d5:
                    c7:41:d9:cc:40:e7:c3:57:16:e3:dc:a4:cb:3f:e4:
                    fa:33:1f:a0:a3:d2:ab:d0:5f:5e:bb:b3:c0:28:94:
                    9a:2a:12:07:5a:7e:a4:35:d2:40:2c:cd:7e:42:42:
                    30:f2:66:f6:67:20:55:05:6d:c6:0f:ad:89:ca:79:
                    ca:73:25:74:a2:72:63:73:07:9a:2a:78:85:72:e9:
                    bc:20:64:3c:25:d4:63:3c:f6:99:c2:82:a2:2a:a5:
                    77:a8:b2:30:5a:89:0a:7d:d9:a5:08:da:97:f9:9a:
                    b2:1f:ea:fe:3e:09:27:db:8d:c4:8b:36:fb:fd:65:
                    f8:5d:10:f4:73:54:36:f1:d9:e1:46:43:71:bf:8e:
                    fc:24:21:39:92:90:b5:d9:de:dc:c8:ea:b9:ab:f8:
                    65:7f:0e:c9:c9:80:ba:09:93:08:85:b3:0d:46:c8:
                    d0:19:0e:76:88:9c:a1:f3:6a:d3:0a:5f:7f:7e:97:
                    01:b9:c2:b2:13:97:99:af:20:d0:65:9d:94:05:09:
                    ee:f4:37:5b:34:e5:ce:09:9d:53:03:37:8f:d5:c2:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A7:40:8E:A6:7A:82:76:EA:E4:6C:90:19:93:74:F8:6B:18:16:BC
            X509v3 Authority Key Identifier:
                keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:66:26:d1:f7:a9:41:ad:4a:b6:b0:21:f2:e2:63:1f:fe:ca:
         59:5e:f6:b6:ef:ab:92:15:71:13:ab:e6:bd:36:d4:ea:9f:06:
         53:40:8b:f2:85:4e:bb:22:09:8f:f1:8a:6f:2e:ac:97:17:fc:
         87:64:c8:82:de:7a:a8:0f:2e:a3:a0:09:c6:88:f3:84:a6:1a:
         62:b1:d1:06:82:c7:90:8f:60:f6:51:5d:30:7b:9b:b6:ff:23:
         6b:46:85:20:79:78:49:d2:8a:36:3f:a6:c4:71:bb:2b:0e:6b:
         39:fa:bd:c9:6b:14:81:b9:9c:ee:b0:f3:c1:76:cf:bc:3b:22:
         46:62:2c:94:be:b1:48:f6:fb:07:d7:cf:f1:2d:b6:b6:52:68:
         df:ca:f0:2c:71:bf:74:b5:0a:9d:48:6b:e3:9b:1a:ee:c6:81:
         d9:48:ef:c4:d7:b5:4b:a7:8d:2f:e1:c7:6c:c3:14:0e:0d:8b:
         d5:6b:a9:54:08:47:5d:74:02:7c:32:e7:d8:d3:51:f1:1e:89:
         1b:24:2a:cf:5f:8d:b5:b4:d0:0b:dd:e3:d8:da:3c:32:46:94:
         fe:6a:93:e4:b6:59:07:2b:ba:a6:d9:40:4d:14:9f:0e:d0:a6:
         5c:2a:ec:f6:ec:3a:73:a6:de:d6:a9:db:52:72:cb:f5:2c:c6:
         5a:28:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----