Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          oJ2NKpIFzaZ60NdoF8/NRzkxVy3geBgtN2qqKqctumo=
Subject key identifier:   0B:9C:D6:B1:88:1A:41:58:13:64:94:84:1F:D6:0A:F3:94:C4:0C:BD
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       01962F7440CF2EC26948B20266C3C6DA7E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          1013
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
                          2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
                          3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: FlsMD1E5eJRJvva5R1Dke5ULOum8zM3XgdHQsb36VMA=)
                          4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
                          5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:cf:2e:c2:69:48:b2:02:66:c3:c6:da:7e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=0b9cd6b1881a4158136494841fd60af394c40cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:48:29:08:f3:42:88:ec:13:9b:1e:aa:49:
                    bc:07:04:fa:68:59:ac:94:55:60:25:7f:47:99:66:
                    9b:1e:bc:27:5b:3d:1e:09:82:c4:b4:09:41:d3:9d:
                    ae:2a:b9:ae:d3:65:f0:a9:ea:08:21:4c:7b:2c:af:
                    5d:e2:c3:88:0e:75:53:c7:81:71:d3:12:62:0e:c2:
                    cd:7e:ac:d1:58:9a:8e:59:a5:83:4b:74:ac:43:54:
                    fe:41:a7:71:e4:c0:c4:ba:96:d7:55:2d:da:04:1b:
                    e0:fd:d0:b2:49:83:17:9d:65:b8:e6:c0:6c:08:8e:
                    46:22:7e:e8:26:a3:c6:f4:a5:22:28:37:f3:c8:10:
                    2d:ff:83:f4:2b:5c:71:0d:0f:d7:0e:d1:e7:ec:4d:
                    f1:7c:b8:da:75:0a:3c:97:20:a1:37:7a:40:d4:16:
                    73:e9:3a:fd:44:17:da:71:de:b9:d9:8b:46:ec:0a:
                    04:60:70:3e:24:1a:91:aa:36:7a:11:67:4e:0d:a8:
                    4e:76:92:c9:2b:98:84:f1:71:f3:63:e5:a9:0b:35:
                    31:ad:99:98:1d:2d:d7:c9:69:30:46:a4:d9:4a:8e:
                    db:3a:3c:a2:7d:c8:41:c5:be:73:25:57:8a:5a:b0:
                    a6:4d:1e:e6:74:14:b1:65:43:9b:12:32:c5:c9:b0:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:D6:B1:88:1A:41:58:13:64:94:84:1F:D6:0A:F3:94:C4:0C:BD
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:fa:30:61:1c:59:c6:47:db:ff:08:44:8d:94:60:51:19:
         ed:16:e6:78:69:bc:48:9f:66:cb:2c:6a:72:ec:10:d9:24:62:
         d2:00:1a:12:a2:c6:49:a1:3b:32:b2:66:4e:5d:93:34:fb:64:
         1b:3c:23:ea:df:6a:3b:3b:e5:05:d2:dd:2b:b4:43:e0:ff:25:
         c5:d9:f7:7b:60:ad:90:be:8a:c4:06:ee:50:a1:b8:c2:d4:28:
         a8:89:e3:f0:57:a0:f4:2d:2c:9c:b8:60:a0:fa:8b:dc:07:25:
         a5:3d:54:6c:ba:52:25:01:d5:40:89:33:b0:9e:2a:12:fe:00:
         5b:1c:0d:b7:f6:dc:15:bf:c0:c5:42:db:0e:d7:99:15:1a:1e:
         92:8a:a6:8f:36:bc:42:c0:a8:0d:34:90:0f:46:7b:6b:cf:72:
         51:e5:04:66:7c:c8:3f:a3:a8:5f:03:03:5c:51:f0:d5:c2:5e:
         e8:fe:53:5d:3b:c8:1d:07:4a:f3:89:b3:13:45:f3:06:d3:aa:
         5b:be:b9:8e:0a:42:88:6b:05:4e:1f:aa:68:d4:74:56:1f:eb:
         14:1a:8e:2d:6a:90:2f:14:4b:b0:47:72:b6:95:22:b4:58:2b:
         ed:83:a7:8d:78:6c:96:b9:5c:e5:af:4d:d8:a1:ff:d8:d8:61:
         97:41:f7:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEDPLsJpSLICZsPG2n47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3
YzMxMDYwHhcNMjUwNDEzMTQwMTA5WhcNMjUwNDE0MTQwMTA5WjAzMTEwLwYDVQQD
EygwYjljZDZiMTg4MWE0MTU4MTM2NDk0ODQxZmQ2MGFmMzk0YzQwY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn5IKQjzQojsE5seqkm8BwT6aFms
lFVgJX9HmWabHrwnWz0eCYLEtAlB052uKrmu02XwqeoIIUx7LK9d4sOIDnVTx4Fx
0xJiDsLNfqzRWJqOWaWDS3SsQ1T+Qadx5MDEupbXVS3aBBvg/dCySYMXnWW45sBs
CI5GIn7oJqPG9KUiKDfzyBAt/4P0K1xxDQ/XDtHn7E3xfLjadQo8lyChN3pA1BZz
6Tr9RBfacd652YtG7AoEYHA+JBqRqjZ6EWdODahOdpLJK5iE8XHzY+WpCzUxrZmY
HS3XyWkwRqTZSo7bOjyifchBxb5zJVeKWrCmTR7mdBSxZUObEjLFybCOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuc1rGIGkFYE2SUhB/WCvOUxAy9MB8GA1UdIwQY
MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt
MjlhYzQ1ZTJlY2ZmLzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm
LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVn6MGEc
WcZH2/8IRI2UYFEZ7RbmeGm8SJ9myyxqcuwQ2SRi0gAaEqLGSaE7MrJmTl2TNPtk
Gzwj6t9qOzvlBdLdK7RD4P8lxdn3e2CtkL6KxAbuUKG4wtQoqInj8Feg9C0snLhg
oPqL3AclpT1UbLpSJQHVQIkzsJ4qEv4AWxwNt/bcFb/AxULbDteZFRoekoqmjza8
QsCoDTSQD0Z7a89yUeUEZnzIP6OoXwMDXFHw1cJe6P5TXTvIHQdK84mzE0XzBtOq
W765jgpCiGsFTh+qaNR0Vh/rFBqOLWqQLxRLsEdytpUitFgr7YOnjXhslrlc5a9N
2KH/2Nhhl0H3uA==
-----END CERTIFICATE-----