Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File:                     qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier:          24Cbjah6neSbKor6g09Xd4etRRzI0zxBbzD4eox249U=
Subject key identifier:   13:50:9C:87:A8:C8:F2:EF:D6:C4:AC:C9:9D:6A:A0:1A:CA:59:17:A1
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer:       /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial:       01962FAB39EDCCD07ABF4AD8DD0869FE5071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number:          142A
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: rJyrMmm/0nwNTn5ufp7CwmlyMHZY/C53yHglDErQMYQ=)
                          2: yuW5WVwgNaxBxObKx0w_CE3bdf0.roa (hash: bxzeDx/FJJDZscd0BPoaz8SHe0rmx/Qll6/QwchRolI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:ed:cc:d0:7a:bf:4a:d8:dd:08:69:fe:50:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=13509c87a8c8f2efd6c4acc99d6aa01aca5917a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:80:33:e8:3b:d7:79:f8:db:b5:44:8e:e6:
                    8f:b7:a1:00:c7:17:bf:6d:72:ea:b4:02:89:21:a4:
                    63:be:30:74:e8:93:96:25:c4:f0:55:04:8d:cf:13:
                    90:ec:df:46:47:d1:4b:65:a2:9b:a2:5f:47:be:f6:
                    f0:5e:19:29:ad:60:c2:42:52:9c:e8:c5:63:57:7b:
                    0e:f1:ef:92:b0:a4:f8:c5:90:28:e8:1c:f0:21:9a:
                    07:ba:72:1d:d3:7b:3b:78:29:c7:35:cf:98:f4:03:
                    e5:9b:7c:df:00:06:da:e0:52:d6:43:51:cc:68:b7:
                    70:f5:e7:ba:10:2a:d4:cf:be:31:0a:5e:55:74:4b:
                    6d:05:5f:06:77:82:8d:33:72:1f:af:ff:17:d0:45:
                    a6:71:bc:db:d5:24:f9:da:91:73:15:84:51:f9:52:
                    5d:d4:56:ab:87:f7:05:84:3c:06:c9:39:73:fc:36:
                    0a:b7:66:9f:d3:85:86:2f:3d:13:53:b8:c6:5e:90:
                    14:06:4c:be:b6:7d:1e:8d:f4:9c:25:4b:de:85:42:
                    0e:ff:d2:94:32:fe:87:56:6b:b5:cd:b0:89:24:98:
                    4d:d7:55:5d:c9:9c:17:09:56:e9:91:63:75:6a:91:
                    f8:bf:7c:58:b0:03:c8:f7:6f:10:bc:58:34:44:ab:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:50:9C:87:A8:C8:F2:EF:D6:C4:AC:C9:9D:6A:A0:1A:CA:59:17:A1
            X509v3 Authority Key Identifier:
                keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a2:cc:88:e6:20:ec:80:db:a0:be:8a:9f:1d:c4:62:3e:b5:
         e0:d5:c7:35:66:93:9a:21:3f:c0:85:e1:ef:81:af:3d:ac:f0:
         c7:c8:7a:06:ed:ea:8a:60:f1:30:5a:18:68:8e:49:60:1c:c7:
         cb:49:96:48:40:d9:10:50:39:06:6b:50:ec:e2:41:bf:2b:9f:
         e7:0e:1e:94:3a:8f:da:79:9a:98:d2:8c:b5:8e:78:4d:a1:21:
         03:8c:8a:39:19:1a:99:9f:79:9f:fb:4a:f9:45:77:97:d1:db:
         2f:c5:04:de:02:a5:fb:03:d2:6b:ac:12:9b:7c:25:95:b0:6b:
         a5:ce:ce:48:8b:56:33:b1:88:52:7a:6f:f6:52:50:87:ab:b7:
         e7:e7:30:9c:96:29:7f:53:e9:36:82:ce:4a:b8:6b:52:f4:8d:
         20:c4:64:2c:25:fe:d9:f6:f8:ff:6b:dd:f6:3f:b9:fc:3f:7f:
         52:a4:e5:e9:0e:03:eb:22:e8:9c:ed:e7:fd:f5:12:8e:84:e1:
         02:b5:35:33:fb:ad:e6:2b:cd:6f:fa:30:fe:54:7d:f7:32:06:
         96:e6:32:f4:3f:7f:6c:de:db:f1:7f:46:8a:91:da:a5:96:8f:
         1a:62:5c:45:1a:93:9f:fc:32:be:29:3e:e5:12:b4:21:c9:e1:
         bd:4c:86:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzntzNB6v0rY3Qhp/lBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGQ5YWMyZWYxMWQ1NDY5Mzc1ZDZkZTZjNmJmNzIxMTI5
ZTNiNzEwHhcNMjUwNDEzMTUwMTEyWhcNMjUwNDE0MTUwMTEyWjAzMTEwLwYDVQQD
EygxMzUwOWM4N2E4YzhmMmVmZDZjNGFjYzk5ZDZhYTAxYWNhNTkxN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdmAM+g713n427VEjuaPt6EAxxe/
bXLqtAKJIaRjvjB06JOWJcTwVQSNzxOQ7N9GR9FLZaKbol9HvvbwXhkprWDCQlKc
6MVjV3sO8e+SsKT4xZAo6BzwIZoHunId03s7eCnHNc+Y9APlm3zfAAba4FLWQ1HM
aLdw9ee6ECrUz74xCl5VdEttBV8Gd4KNM3Ifr/8X0EWmcbzb1ST52pFzFYRR+VJd
1Farh/cFhDwGyTlz/DYKt2af04WGLz0TU7jGXpAUBky+tn0ejfScJUvehUIO/9KU
Mv6HVmu1zbCJJJhN11VdyZwXCVbpkWN1apH4v3xYsAPI928QvFg0RKu55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNQnIeoyPLv1sSsyZ1qoBrKWRehMB8GA1UdIwQY
MBaAFKkNmsLvEdVGk3XW3mxr9yESnjtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVEyYXd1OFIxVWFUZGRiZWJHdjNJUktlTzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81OWMyNGUtYTIxZi00NmIyLTllYTEt
YjNhNjcwN2VhZDA0LzEvcVEyYXd1OFIxVWFUZGRiZWJHdjNJUktlTzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81OWMyNGUtYTIxZi00NmIyLTllYTEtYjNhNjcwN2VhZDA0
LzEvcVEyYXd1OFIxVWFUZGRiZWJHdjNJUktlTzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6LMiOYg
7IDboL6Knx3EYj614NXHNWaTmiE/wIXh74GvPazwx8h6Bu3qimDxMFoYaI5JYBzH
y0mWSEDZEFA5BmtQ7OJBvyuf5w4elDqP2nmamNKMtY54TaEhA4yKORkamZ95n/tK
+UV3l9HbL8UE3gKl+wPSa6wSm3wllbBrpc7OSItWM7GIUnpv9lJQh6u35+cwnJYp
f1PpNoLOSrhrUvSNIMRkLCX+2fb4/2vd9j+5/D9/UqTl6Q4D6yLonO3n/fUSjoTh
ArU1M/ut5ivNb/ow/lR99zIGluYy9D9/bN7b8X9GipHapZaPGmJcRRqTn/wyvik+
5RK0IcnhvUyGSQ==
-----END CERTIFICATE-----