Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File:                     q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier:          tO+RiXDLn2w8I0WHuceDTBpM+qBjNVBVXwj2cz9CmjA=
Subject key identifier:   92:0C:71:30:1D:50:4C:C4:A0:19:AA:99:AB:AC:F5:ED:CC:D9:D6:BF
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer:       /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial:       01962F3D3A9281182E4DF79B718E1EA26529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number:          0952
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa (hash: 6iS4lGatjNwdjx3TWoy83KW0n9N+x6+eWhAvA99wwRM=)
                          2: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: 8SljpXXbQoMP4PNlZ6Qxj3LZs0iXIoV7rXbG6rM0VOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3a:92:81:18:2e:4d:f7:9b:71:8e:1e:a2:65:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=920c71301d504cc4a019aa99abacf5edccd9d6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:80:7e:30:fb:9d:d3:8e:f8:3a:c5:72:66:
                    f3:29:c1:91:e6:07:14:51:8e:ca:d3:34:5e:22:d0:
                    8d:d1:b5:0a:b7:70:e6:44:92:86:85:d8:34:28:6c:
                    a7:9d:98:b7:04:cd:e4:e2:c8:4f:fb:1b:8a:3d:8a:
                    5a:8b:ca:df:9d:76:69:5b:fe:90:80:f9:b5:be:01:
                    e6:80:9b:53:48:2b:09:b7:2e:28:2f:1d:6b:d1:51:
                    49:80:65:ff:75:44:f6:ae:e4:83:69:b1:ec:9d:ef:
                    1e:ce:72:fc:91:1e:82:10:cc:84:4d:9a:a2:c9:38:
                    ec:c5:94:ec:6f:e2:97:8d:4a:d6:12:76:bd:bf:3e:
                    7f:38:c5:91:d6:99:d5:02:fe:91:54:dc:f6:83:fd:
                    69:72:7d:8a:40:ca:cd:e7:bd:4e:da:49:14:61:c1:
                    a3:9d:ec:a2:75:a7:92:f0:d5:24:c9:fd:88:78:03:
                    fc:d0:e8:1a:b7:5f:97:63:a5:f2:d2:b7:61:74:e4:
                    17:81:7a:ff:bf:a9:69:e6:e5:57:03:dd:7a:90:6e:
                    22:27:09:c2:ed:b6:b3:e5:e2:a2:57:32:50:cf:90:
                    ba:b7:55:d5:48:ee:cc:8a:02:41:78:75:18:71:27:
                    e2:85:f6:8b:16:35:fb:02:63:96:8e:da:60:96:c6:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:71:30:1D:50:4C:C4:A0:19:AA:99:AB:AC:F5:ED:CC:D9:D6:BF
            X509v3 Authority Key Identifier:
                keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:99:7e:1f:d3:9a:12:b5:7e:5d:94:13:a5:c9:b8:ff:a1:5d:
         a0:d7:1b:95:a6:3b:65:9c:18:a1:4f:91:3b:2b:ba:d9:64:bc:
         6c:99:05:88:c1:4a:e1:54:2e:db:d1:7d:ec:3c:85:27:a0:3f:
         9b:36:53:6e:68:9b:bc:43:d0:1a:ca:00:1c:90:94:0b:24:ff:
         10:e0:fe:bb:38:5a:e0:53:22:32:0a:7f:4a:9d:99:d4:5a:55:
         59:70:c6:a7:5d:ed:ef:2a:71:90:b5:36:6e:ed:f2:e5:b2:80:
         9b:2f:97:c4:f9:63:02:b6:8b:2f:95:6f:8e:0d:7a:9c:52:75:
         7a:80:86:37:89:a6:cd:a9:4f:a7:48:35:1d:9b:41:59:3f:4e:
         f0:9c:1a:b8:80:05:8f:94:b4:ce:a5:51:87:d0:5d:0e:28:e8:
         54:b6:05:64:5c:0b:50:bb:09:29:1c:f5:4b:25:1b:de:53:32:
         42:5a:e1:3e:ac:5e:1d:80:87:73:1b:1f:5e:bb:b2:81:48:61:
         e6:1b:25:29:04:d8:36:08:d7:36:3b:57:c7:87:fc:ac:70:2c:
         7e:a0:79:d6:4e:c1:14:26:48:d9:a6:df:02:3f:9f:2f:3d:fa:
         f1:5b:17:8b:92:f1:9d:82:f6:92:0f:d8:bf:cb:e8:f6:11:8f:
         e5:85:b6:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTqSgRguTfebcY4eomUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWFhYjEzNDI3YWQ4YzAwNzJhZTA4ZDliYjgwYWJjMTlk
M2Y5ODQwHhcNMjUwNDEzMTMwMTAzWhcNMjUwNDE0MTMwMTAzWjAzMTEwLwYDVQQD
Eyg5MjBjNzEzMDFkNTA0Y2M0YTAxOWFhOTlhYmFjZjVlZGNjZDlkNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7eAfjD7ndOO+DrFcmbzKcGR5gcU
UY7K0zReItCN0bUKt3DmRJKGhdg0KGynnZi3BM3k4shP+xuKPYpai8rfnXZpW/6Q
gPm1vgHmgJtTSCsJty4oLx1r0VFJgGX/dUT2ruSDabHsne8eznL8kR6CEMyETZqi
yTjsxZTsb+KXjUrWEna9vz5/OMWR1pnVAv6RVNz2g/1pcn2KQMrN571O2kkUYcGj
neyidaeS8NUkyf2IeAP80Ogat1+XY6Xy0rdhdOQXgXr/v6lp5uVXA916kG4iJwnC
7baz5eKiVzJQz5C6t1XVSO7MigJBeHUYcSfihfaLFjX7AmOWjtpglsZ9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIMcTAdUEzEoBmqmaus9e3M2da/MB8GA1UdIwQY
MBaAFKuaqxNCetjAByrgjZu4CrwZ0/mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYjk1ODItZDI3NS00OTdhLWI2MmIt
MzkyNjAzMTljN2JkLzEvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lYjk1ODItZDI3NS00OTdhLWI2MmItMzkyNjAzMTljN2Jk
LzEvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5l+H9Oa
ErV+XZQTpcm4/6FdoNcblaY7ZZwYoU+ROyu62WS8bJkFiMFK4VQu29F97DyFJ6A/
mzZTbmibvEPQGsoAHJCUCyT/EOD+uzha4FMiMgp/Sp2Z1FpVWXDGp13t7ypxkLU2
bu3y5bKAmy+XxPljAraLL5Vvjg16nFJ1eoCGN4mmzalPp0g1HZtBWT9O8JwauIAF
j5S0zqVRh9BdDijoVLYFZFwLULsJKRz1SyUb3lMyQlrhPqxeHYCHcxsfXruygUhh
5hslKQTYNgjXNjtXx4f8rHAsfqB51k7BFCZI2abfAj+fLz368VsXi5LxnYL2kg/Y
v8vo9hGP5YW2Ww==
-----END CERTIFICATE-----