Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File:                     qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier:          VfmCYePKDzx1Qmy64T/hqnEJ/zNN11DPEPh2Mig1qBQ=
Subject key identifier:   01:5C:62:81:FE:FA:9A:BA:4B:CD:0E:0E:8F:85:AA:E3:B5:5B:75:F4
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer:       /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial:       01962F3DBB248BD6ACB62BEA383E1DBA3525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number:          0B77
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: PIFbvqZsTCVITsXCVJp94hRSd40.roa (hash: cQLvhNHJgfoGCqvXulMMhioH9SATxRMjiGUXlSo7XxA=)
                          2: oHZuZKLdIqX9TZjhMfxVImyzxr8.roa (hash: 3RagyetzMFETxC4N1pLRK9iNlu+vVXTBppJLVU5AMlY=)
                          3: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: IZ/JeEpDmbi123KqeyxehCmbHWBzNZh5v5vfis1R1Us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:24:8b:d6:ac:b6:2b:ea:38:3e:1d:ba:35:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=015c6281fefa9aba4bcd0e0e8f85aae3b55b75f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:eb:9c:bb:40:24:35:66:ae:4e:20:cf:98:
                    91:7b:c0:1a:89:87:b1:04:af:24:2c:45:be:17:ec:
                    ee:e0:58:22:8e:18:07:d8:8b:a1:b4:38:31:57:05:
                    de:48:7b:2c:a6:95:91:08:30:a2:a7:86:c3:35:d1:
                    91:9e:22:7d:17:cf:82:7a:d4:8d:03:b0:ac:f9:a1:
                    08:07:b7:2b:76:9a:67:dc:ae:65:e4:70:45:22:6d:
                    01:d7:4b:60:b4:ba:29:b1:e0:4c:a3:5d:24:e9:ef:
                    48:d0:ec:6a:47:31:30:58:88:56:64:d9:ce:ce:2c:
                    4c:7d:d0:e5:0a:28:d2:16:1d:c2:09:ed:56:84:c8:
                    c5:ef:5d:91:30:7e:08:00:ad:a5:20:96:23:94:63:
                    3c:3b:62:4d:39:c5:4e:fb:52:12:49:86:a0:1f:50:
                    26:63:3a:ec:a5:9c:0b:5d:01:78:b4:de:0b:6e:07:
                    3b:0f:37:94:45:7d:4c:dc:4c:ac:08:d1:61:bc:29:
                    1a:18:32:ba:ee:11:85:d7:d8:20:43:c7:ff:3f:83:
                    4f:bc:9e:4c:2a:d0:f3:c0:56:a0:e7:33:ca:e2:cf:
                    12:2b:42:6f:12:de:7f:76:c6:21:a1:60:fc:93:a4:
                    db:b6:6c:b6:31:4a:f3:b7:27:44:8b:74:a8:79:f8:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5C:62:81:FE:FA:9A:BA:4B:CD:0E:0E:8F:85:AA:E3:B5:5B:75:F4
            X509v3 Authority Key Identifier:
                keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b1:96:73:9a:09:99:a2:4f:e6:63:e5:4c:61:a6:21:f7:09:
         eb:d3:44:64:ab:71:46:6f:fe:82:36:70:d0:b2:3b:bc:69:ac:
         4a:37:ea:e4:08:8c:a2:c4:56:33:5a:ff:a0:25:b2:c4:fc:ed:
         2f:8f:57:d8:47:58:cd:80:07:a5:ac:ec:45:20:10:ae:9b:4b:
         dc:80:fb:62:86:49:25:5b:30:ef:73:3c:6c:45:c7:18:66:82:
         23:ea:69:b8:ac:3c:3f:c6:91:07:50:9c:2a:63:db:b8:b7:52:
         5d:1c:e6:12:af:9b:dd:06:ff:8b:39:3b:6a:25:b8:33:eb:ad:
         0a:45:76:2a:cc:e7:ae:b5:b6:ce:e7:68:2c:5d:e8:65:99:f9:
         d2:78:d2:08:b6:b8:07:34:4b:1a:57:e9:b3:0d:7f:9c:4a:34:
         27:3a:c5:35:41:53:7d:f6:12:10:28:e0:d7:11:91:17:e9:73:
         f8:94:dc:3e:a9:1a:09:bf:94:b2:bc:ca:d3:57:d1:e2:c6:18:
         96:e5:79:ec:99:fd:78:86:04:33:24:18:e1:39:c3:d6:90:c3:
         96:c3:e8:c3:7b:7d:fc:46:a2:c5:c0:05:b7:bb:05:a0:0a:ec:
         c1:91:40:e6:d7:93:d7:47:1a:1b:f8:46:65:22:21:35:15:76:
         18:a1:ec:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbski9astivqOD4dujUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1
YzZkZmUwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
EygwMTVjNjI4MWZlZmE5YWJhNGJjZDBlMGU4Zjg1YWFlM2I1NWI3NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI/rnLtAJDVmrk4gz5iRe8AaiYex
BK8kLEW+F+zu4FgijhgH2IuhtDgxVwXeSHssppWRCDCip4bDNdGRniJ9F8+CetSN
A7Cs+aEIB7crdppn3K5l5HBFIm0B10tgtLopseBMo10k6e9I0OxqRzEwWIhWZNnO
zixMfdDlCijSFh3CCe1WhMjF712RMH4IAK2lIJYjlGM8O2JNOcVO+1ISSYagH1Am
YzrspZwLXQF4tN4Lbgc7DzeURX1M3EysCNFhvCkaGDK67hGF19ggQ8f/P4NPvJ5M
KtDzwFag5zPK4s8SK0JvEt5/dsYhoWD8k6Tbtmy2MUrztydEi3SoefhsQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFcYoH++pq6S80ODo+FquO1W3X0MB8GA1UdIwQY
MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt
ZjhhZmZlZjExMmQ4LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4
LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrGWc5oJ
maJP5mPlTGGmIfcJ69NEZKtxRm/+gjZw0LI7vGmsSjfq5AiMosRWM1r/oCWyxPzt
L49X2EdYzYAHpazsRSAQrptL3ID7YoZJJVsw73M8bEXHGGaCI+ppuKw8P8aRB1Cc
KmPbuLdSXRzmEq+b3Qb/izk7aiW4M+utCkV2KsznrrW2zudoLF3oZZn50njSCLa4
BzRLGlfpsw1/nEo0JzrFNUFTffYSECjg1xGRF+lz+JTcPqkaCb+UsrzK01fR4sYY
luV57Jn9eIYEMyQY4TnD1pDDlsPow3t9/EaixcAFt7sFoArswZFA5teT10caG/hG
ZSIhNRV2GKHsow==
-----END CERTIFICATE-----