Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/QA_hcqDH4zxDzKruOh70LNAJ6R4.mft
File:                     QA_hcqDH4zxDzKruOh70LNAJ6R4.mft (raw, json)
Hash identifier:          J9UuRuQ6YiP/8ndDQ+lY3JN3MX7+lQ6Yl5N84sBSAhM=
Subject key identifier:   26:3E:EC:0A:E8:18:71:74:21:48:CA:F2:96:FF:7C:B5:80:72:E3:A7
Authority key identifier: 40:0F:E1:72:A0:C7:E3:3C:43:CC:AA:EE:3A:1E:F4:2C:D0:09:E9:1E
Certificate issuer:       /CN=400fe172a0c7e33c43ccaaee3a1ef42cd009e91e
Certificate serial:       01932642D4C905372330AF5BC4DC43192278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA_hcqDH4zxDzKruOh70LNAJ6R4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/QA_hcqDH4zxDzKruOh70LNAJ6R4.mft
Manifest number:          0C48
Signing time:             Wed 13 Nov 2024 16:02:14 +0000
Manifest this update:     Wed 13 Nov 2024 16:02:14 +0000
Manifest next update:     Thu 14 Nov 2024 16:02:14 +0000
Files and hashes:         1: CqJtTcr4maRXWDNwyH_pUyMGEww.roa (hash: aIxSp7okMpJ98DbFnh/fqP9cC6nCQyAyiWL2Ipf3gjI=)
                          2: QA_hcqDH4zxDzKruOh70LNAJ6R4.crl (hash: Om2BI3Kwr3wdufuKEtqOZOGKOxgeLYLFmNXx4W7Jj6A=)
                          3: e7KxXM4CUdFisrufTCe13N5dbqg.roa (hash: 2UPk0u1ZmM1tzhGlfNN9kDVpVAFExMD2zlnLwbgx8DU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:42:d4:c9:05:37:23:30:af:5b:c4:dc:43:19:22:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400fe172a0c7e33c43ccaaee3a1ef42cd009e91e
        Validity
            Not Before: Nov 13 16:02:14 2024 GMT
            Not After : Nov 14 16:02:14 2024 GMT
        Subject: CN=263eec0ae81871742148caf296ff7cb58072e3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:0a:4c:6c:ac:d3:c8:00:e4:77:82:1f:16:
                    c2:d1:27:e1:73:b7:4f:b8:52:94:8b:5c:b8:a2:85:
                    8e:7b:c0:25:97:34:49:ab:23:98:fc:39:1d:c4:26:
                    a3:04:2c:56:c9:d5:43:eb:0f:06:a2:11:1b:db:c2:
                    20:91:87:21:e3:88:81:27:90:d9:23:31:6c:66:eb:
                    4c:34:c1:f1:79:d5:64:b5:ec:5f:7d:2f:84:c2:2f:
                    2f:eb:85:66:ab:21:f6:8a:eb:34:93:6c:2a:8e:81:
                    5c:0e:33:a3:e6:ad:3e:4e:7f:63:e5:79:77:9f:5b:
                    97:f2:fd:d0:4d:ed:9a:33:c6:88:a6:5c:18:34:b3:
                    db:f5:80:02:af:f9:a9:fb:19:58:af:3a:90:b3:bf:
                    d2:0d:57:3f:49:98:d7:cd:a7:c0:87:8d:e7:80:cd:
                    47:9d:ab:ea:a2:52:38:29:38:f8:94:af:76:bf:8f:
                    a7:0a:79:1c:93:3f:70:71:a0:b7:ba:99:2f:a6:75:
                    de:be:1d:66:45:37:dc:57:d5:c3:d1:65:cc:79:e6:
                    70:41:b1:22:cc:a6:02:d4:28:79:d3:33:aa:31:7a:
                    a5:f2:60:f3:f2:60:b6:9b:7a:68:99:e5:23:e6:5e:
                    c2:a4:a7:0f:7b:a6:ae:73:8f:c0:c7:e7:ae:af:c7:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3E:EC:0A:E8:18:71:74:21:48:CA:F2:96:FF:7C:B5:80:72:E3:A7
            X509v3 Authority Key Identifier:
                keyid:40:0F:E1:72:A0:C7:E3:3C:43:CC:AA:EE:3A:1E:F4:2C:D0:09:E9:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA_hcqDH4zxDzKruOh70LNAJ6R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/QA_hcqDH4zxDzKruOh70LNAJ6R4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/QA_hcqDH4zxDzKruOh70LNAJ6R4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:57:30:18:40:cb:04:ee:90:5b:10:9f:83:27:29:dd:5c:
         40:d4:e2:7e:37:41:4a:34:32:a5:ba:0d:b8:d3:d1:3b:0a:38:
         f5:dd:e0:07:20:23:8e:d8:ea:f3:1e:f3:cd:c4:ee:e1:09:ea:
         78:18:d7:a7:f7:24:d4:2f:bd:b8:fc:ec:79:70:c9:17:66:90:
         ff:f6:a6:7d:03:54:07:f5:24:48:50:0a:6e:ed:92:d1:fe:04:
         3d:5f:51:a8:a2:82:13:c3:a3:74:75:77:54:55:8a:60:17:f4:
         62:11:7c:83:2f:0c:ce:5c:c1:41:6e:5c:04:90:f3:7a:1c:3d:
         12:2a:ff:05:58:c4:17:b2:0f:1d:fa:df:f3:11:8b:2b:b0:88:
         89:bf:33:f6:a8:17:cd:87:19:0c:1a:4a:10:7a:26:1c:d5:8a:
         b2:eb:02:6d:45:20:29:c4:4f:0f:b4:64:8a:e2:71:76:a3:f8:
         f6:78:12:b0:49:01:2f:2d:f2:30:d1:32:93:47:ad:a8:9e:fc:
         e4:43:e5:56:16:a9:eb:f3:51:46:92:7f:a0:49:de:cc:54:10:
         9e:3c:5f:89:19:4a:fc:c0:70:3d:54:dc:7c:58:b6:50:eb:44:
         ae:cc:6c:43:0e:f1:12:12:6f:11:ae:21:a7:ee:f7:82:26:88:
         bb:ee:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:16:08 2024 by rpki-client on console.sobornost.net