Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File:                     Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier:          AAO4Jo0bfXAz5fwD2N1IJq+mO/Of3HOIweVilOD2hzk=
Subject key identifier:   C5:A3:F6:DA:96:AE:3A:09:0D:C2:F4:81:CF:01:5B:C3:AD:D6:25:74
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer:       /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial:       01962E98BB4FF0529EC77D0E1E406F70292F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: S/tBIVg9fiq+4cNblUFc0invLxDurBykqA84sXJpIQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bb:4f:f0:52:9e:c7:7d:0e:1e:40:6f:70:29:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=c5a3f6da96ae3a090dc2f481cf015bc3add62574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:32:ce:de:de:00:e1:03:5d:4e:a1:19:ba:
                    fd:9a:bc:fb:e4:e0:30:1c:d9:6e:48:7d:48:a0:59:
                    d1:63:08:3a:00:14:0e:a9:13:ab:72:40:92:88:47:
                    14:d4:15:b6:91:c7:c4:cc:06:75:d8:77:df:a2:be:
                    96:2a:ab:da:06:83:b2:8e:2e:ae:31:4b:04:e1:21:
                    0a:17:52:af:53:80:c8:6a:df:38:94:55:0a:a0:12:
                    bb:05:6d:ea:43:c7:88:3d:58:ce:27:4d:a0:ab:cf:
                    01:38:42:89:89:30:87:68:87:81:e3:1f:a1:5f:92:
                    eb:a8:d9:d9:5d:40:67:22:1d:97:ca:9c:79:9b:0a:
                    9c:e2:cd:65:0d:72:31:9f:a5:7a:84:0c:e3:83:d2:
                    bf:08:c0:51:2e:99:89:5e:3f:ee:ba:8b:2b:c2:64:
                    9e:c2:dd:98:a7:8c:91:5b:4b:96:c8:14:7a:ea:ea:
                    12:8f:70:54:f5:b5:70:c2:e5:29:73:d0:d4:6e:c7:
                    65:fd:9b:d1:e0:aa:9b:9d:79:5a:a2:75:26:d6:7e:
                    7a:25:70:c4:2b:e4:ae:37:da:76:4d:aa:b3:53:fd:
                    ca:0c:79:a9:6b:7b:a2:44:1c:99:d6:33:02:35:f7:
                    1a:1d:fa:e8:58:47:71:71:86:6f:7b:ef:dd:ad:cf:
                    aa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A3:F6:DA:96:AE:3A:09:0D:C2:F4:81:CF:01:5B:C3:AD:D6:25:74
            X509v3 Authority Key Identifier:
                keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:2b:20:e6:83:4b:8e:8f:f6:03:d3:f8:df:26:23:f6:99:
         f9:57:f7:70:2a:ab:55:84:5a:e6:28:c8:f1:99:ce:38:00:8b:
         67:5e:5b:65:33:8c:83:f0:44:36:51:f0:a2:9b:58:70:64:0d:
         a5:78:2b:09:b0:8d:85:34:ae:b3:47:ca:54:20:c8:c1:50:ad:
         67:a2:16:6f:ea:60:0d:26:96:10:f1:9a:9c:5e:07:16:ec:f7:
         1c:2f:00:93:75:40:38:7b:f9:86:f7:47:7a:b1:b2:94:4a:ad:
         85:2f:a9:c3:f3:71:ea:85:5e:cc:07:82:53:1c:cc:10:7b:cf:
         d9:d8:0f:4f:70:d5:d8:32:35:02:2f:c0:96:3f:ae:ad:57:7f:
         c8:97:53:80:82:88:ac:77:24:9b:de:76:96:75:a4:13:ef:5e:
         b0:2a:e6:fb:a7:ea:74:5b:00:8c:a9:9a:bd:50:39:2c:20:2c:
         02:51:fa:f1:f2:e7:d4:f2:e0:cf:69:47:97:0e:e9:dd:7e:8d:
         66:76:f0:db:73:0e:af:cb:49:b2:d2:0a:0e:5a:1f:7f:6b:ae:
         94:02:70:26:27:cf:31:fa:52:1d:97:b5:aa:cf:e9:a6:7b:94:
         ed:6f:8a:6d:31:f0:75:2c:49:64:c9:12:9b:49:9a:c5:cd:03:
         34:96:b5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLtP8FKex30OHkBvcCkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2
NTlhYjkwHhcNMjUwNDEzMTAwMTIzWhcNMjUwNDE0MTAwMTIzWjAzMTEwLwYDVQQD
EyhjNWEzZjZkYTk2YWUzYTA5MGRjMmY0ODFjZjAxNWJjM2FkZDYyNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooEyzt7eAOEDXU6hGbr9mrz75OAw
HNluSH1IoFnRYwg6ABQOqROrckCSiEcU1BW2kcfEzAZ12Hffor6WKqvaBoOyji6u
MUsE4SEKF1KvU4DIat84lFUKoBK7BW3qQ8eIPVjOJ02gq88BOEKJiTCHaIeB4x+h
X5LrqNnZXUBnIh2Xypx5mwqc4s1lDXIxn6V6hAzjg9K/CMBRLpmJXj/uuosrwmSe
wt2Yp4yRW0uWyBR66uoSj3BU9bVwwuUpc9DUbsdl/ZvR4KqbnXlaonUm1n56JXDE
K+SuN9p2TaqzU/3KDHmpa3uiRByZ1jMCNfcaHfroWEdxcYZve+/drc+q/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWj9tqWrjoJDcL0gc8BW8Ot1iV0MB8GA1UdIwQY
MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It
NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi
LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI0rIOaD
S46P9gPT+N8mI/aZ+Vf3cCqrVYRa5ijI8ZnOOACLZ15bZTOMg/BENlHwoptYcGQN
pXgrCbCNhTSus0fKVCDIwVCtZ6IWb+pgDSaWEPGanF4HFuz3HC8Ak3VAOHv5hvdH
erGylEqthS+pw/Nx6oVezAeCUxzMEHvP2dgPT3DV2DI1Ai/Alj+urVd/yJdTgIKI
rHckm952lnWkE+9esCrm+6fqdFsAjKmavVA5LCAsAlH68fLn1PLgz2lHlw7p3X6N
Znbw23MOr8tJstIKDloff2uulAJwJifPMfpSHZe1qs/ppnuU7W+KbTHwdSxJZMkS
m0maxc0DNJa1ZA==
-----END CERTIFICATE-----