Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File:                     QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier:          5bzCOKHzCN5VmJfX8N6+3Z2mIq47nZIMmFgCegS7V10=
Subject key identifier:   2A:0E:88:3B:1C:AA:B4:3D:CC:51:49:C4:C4:3E:86:ED:C8:AE:B6:DA
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer:       /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial:       01962F3D2BB5EB8D39D8ED4DB3BD0B3EB348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: eb/2pixx6oOyOTENzhsL99XCglyywx3UgAhuMv1jGuA=)
                          2: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (hash: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2b:b5:eb:8d:39:d8:ed:4d:b3:bd:0b:3e:b3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=2a0e883b1caab43dcc5149c4c43e86edc8aeb6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:fc:04:b1:22:9b:36:d9:48:fe:08:5b:05:
                    f5:78:04:23:1e:f6:ab:d9:98:26:3c:a9:e4:9c:4e:
                    e3:f4:b0:5c:f9:01:24:44:24:0f:75:0f:b4:98:42:
                    15:c6:26:46:c4:32:ac:e2:dc:01:f2:b7:e6:d1:98:
                    66:ff:e0:05:b5:70:6a:33:9a:22:25:c3:99:fb:55:
                    eb:b2:8c:85:90:4a:c8:2b:16:e7:cb:22:25:78:fa:
                    09:77:75:47:04:bb:4b:64:a3:9e:d1:8d:4d:78:8a:
                    a7:1f:ca:c1:19:16:f6:95:72:d6:48:be:7e:60:dd:
                    8a:3e:d8:f3:b3:24:9f:98:ed:82:65:15:f6:80:b3:
                    3e:06:50:22:54:61:51:ff:69:33:ac:1c:b9:b4:2c:
                    c2:2c:ef:cd:cc:2e:4f:f5:22:e0:19:98:af:16:4b:
                    bf:c7:96:3f:ae:5a:e7:e0:50:26:dd:80:54:d1:2a:
                    ae:93:e8:77:c5:16:90:e0:84:10:8a:af:dc:7f:d0:
                    0c:1f:8c:1a:c7:ee:3a:61:fc:f5:b7:d2:44:d9:1f:
                    13:b1:07:75:69:d8:1d:3a:b7:11:c9:65:47:38:ea:
                    63:04:4d:0c:63:ff:08:e3:52:57:bd:67:91:ec:6c:
                    0c:e2:ae:d5:24:c4:6d:5c:a1:2d:79:43:91:a1:cc:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0E:88:3B:1C:AA:B4:3D:CC:51:49:C4:C4:3E:86:ED:C8:AE:B6:DA
            X509v3 Authority Key Identifier:
                keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7a:2b:f2:17:1c:7a:f0:ce:02:3c:cb:cf:d9:27:80:63:6f:
         8d:68:0b:f1:d4:d4:81:54:16:95:1c:ee:2e:8b:0d:77:4e:76:
         56:07:80:95:fd:75:2a:91:3b:e2:d7:3d:4d:e3:39:ab:b8:7d:
         61:96:34:8e:ec:70:17:c3:7b:b1:b7:04:97:4f:99:1c:66:c9:
         0b:d0:5f:3f:cc:85:da:0a:36:f3:e7:28:2d:df:c1:96:1e:fc:
         c0:a7:f9:61:14:c6:61:e0:6a:34:ed:a8:52:97:55:fa:11:dc:
         50:cf:3c:dd:cc:c0:f6:60:27:4a:5f:04:c5:82:6b:1c:a4:50:
         d4:b4:4f:e3:32:84:4c:fb:90:39:5d:12:10:33:71:6f:61:e8:
         86:e9:8d:ce:bb:ab:30:4d:67:57:5a:07:6d:77:1e:02:12:9f:
         be:94:aa:ca:08:4f:38:2f:6f:8e:67:7d:9a:40:3a:60:43:99:
         f6:d8:cc:10:5d:2c:ef:a9:f1:e2:9f:7a:ee:11:5a:53:37:07:
         7f:37:f8:e8:9e:3e:c6:23:a7:e4:f3:8a:5e:2c:6b:e8:45:07:
         26:f1:c4:fe:17:aa:83:db:02:24:dc:81:c5:f6:d4:18:da:56:
         a6:a2:58:d5:6b:ba:3d:5a:fe:fe:6f:44:85:c0:b8:7c:17:15:
         a1:e2:39:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPSu164052O1Ns70LPrNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMjA3NTU5NjU0NTA5M2MwNmE2ZmNmOGZhYjU3YjE5MmU3
NzkwYWEwHhcNMjUwNDEzMTMwMDU5WhcNMjUwNDE0MTMwMDU5WjAzMTEwLwYDVQQD
EygyYTBlODgzYjFjYWFiNDNkY2M1MTQ5YzRjNDNlODZlZGM4YWViNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIX8BLEimzbZSP4IWwX1eAQjHvar
2ZgmPKnknE7j9LBc+QEkRCQPdQ+0mEIVxiZGxDKs4twB8rfm0Zhm/+AFtXBqM5oi
JcOZ+1XrsoyFkErIKxbnyyIlePoJd3VHBLtLZKOe0Y1NeIqnH8rBGRb2lXLWSL5+
YN2KPtjzsySfmO2CZRX2gLM+BlAiVGFR/2kzrBy5tCzCLO/NzC5P9SLgGZivFku/
x5Y/rlrn4FAm3YBU0Squk+h3xRaQ4IQQiq/cf9AMH4wax+46Yfz1t9JE2R8TsQd1
adgdOrcRyWVHOOpjBE0MY/8I41JXvWeR7GwM4q7VJMRtXKEteUORocyF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoOiDscqrQ9zFFJxMQ+hu3IrrbaMB8GA1UdIwQY
MBaAFEMgdVllRQk8Bqb8+Pq1exkud5CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iZGEyNDUtNTc2Yi00OTQwLWE5ZjUt
OTI3OThkYWNhZjc1LzEvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iZGEyNDUtNTc2Yi00OTQwLWE5ZjUtOTI3OThkYWNhZjc1
LzEvUXlCMVdXVkZDVHdHcHZ6NC1yVjdHUzUza0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnor8hcc
evDOAjzLz9kngGNvjWgL8dTUgVQWlRzuLosNd052VgeAlf11KpE74tc9TeM5q7h9
YZY0juxwF8N7sbcEl0+ZHGbJC9BfP8yF2go28+coLd/Blh78wKf5YRTGYeBqNO2o
UpdV+hHcUM883czA9mAnSl8ExYJrHKRQ1LRP4zKETPuQOV0SEDNxb2HohumNzrur
ME1nV1oHbXceAhKfvpSqyghPOC9vjmd9mkA6YEOZ9tjMEF0s76nx4p967hFaUzcH
fzf46J4+xiOn5POKXixr6EUHJvHE/heqg9sCJNyBxfbUGNpWpqJY1Wu6PVr+/m9E
hcC4fBcVoeI5xA==
-----END CERTIFICATE-----