Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File:                     qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier:          G5wP8/pb8hJDsVknjWWKoLcusDRIb5XW5Aadz25v6+4=
Subject key identifier:   16:0C:FA:D9:17:7F:44:7B:A0:DB:85:E9:CA:A7:F2:69:F8:04:68:F2
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer:       /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial:       01962FAB5406FE9409970BCE2EF22DEDEAEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
                          2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: l9JoD1olgpu80hcVBQ08W73Y2boaTo7+CFakdGnGPwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:54:06:fe:94:09:97:0b:ce:2e:f2:2d:ed:ea:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=160cfad9177f447ba0db85e9caa7f269f80468f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:9f:10:6c:fb:ca:08:89:e4:3c:a0:ee:91:
                    52:d1:7b:b7:05:9b:93:d5:17:a5:a2:b9:5d:d6:48:
                    de:42:7f:99:7b:c0:bc:39:56:eb:df:9b:c6:43:4d:
                    dc:2f:04:a3:f6:f5:4b:1f:d0:88:ca:1b:aa:4f:6e:
                    66:56:f7:db:e0:73:ae:47:07:7a:6a:c0:74:eb:7d:
                    e1:e9:40:68:bf:27:ac:28:f7:23:99:bf:b7:de:b8:
                    a0:75:61:ff:c2:16:8a:b0:4e:2d:63:e3:57:48:0a:
                    33:b5:22:e6:bb:94:f8:49:e9:f7:5e:7b:e1:6b:f1:
                    87:d2:0e:ee:04:8c:b9:da:45:ab:26:23:e7:53:b7:
                    46:18:9a:2b:ad:ff:f8:50:ff:3c:26:a6:43:05:01:
                    fc:18:56:45:89:40:e3:60:e9:e6:e6:b9:82:f3:cb:
                    18:d2:ac:3c:65:0c:fb:bc:6c:41:4e:39:f2:03:60:
                    f8:c2:7d:9d:be:b2:ab:c2:a7:13:06:84:55:4f:a0:
                    cd:18:c4:08:27:53:9f:c9:af:e7:86:f2:4f:6d:62:
                    2b:f5:5d:33:eb:f5:f3:97:87:42:68:11:0a:ed:cb:
                    f4:8f:55:33:53:cf:b2:8d:42:bd:b1:a7:28:fc:05:
                    2e:f3:a0:41:df:9b:bb:dd:6c:2c:e0:c5:a9:3d:26:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0C:FA:D9:17:7F:44:7B:A0:DB:85:E9:CA:A7:F2:69:F8:04:68:F2
            X509v3 Authority Key Identifier:
                keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:67:64:60:13:0c:46:37:2a:c0:78:36:cd:f9:9d:6d:2d:
         c0:b1:fa:67:10:f1:29:98:b0:f7:fa:f9:1d:11:cf:56:54:de:
         15:64:08:4c:e0:68:2e:d5:da:d6:c5:f1:47:ee:3e:71:bd:65:
         6f:29:d9:4e:e5:73:19:9e:79:3c:d3:38:e3:ca:b6:4e:ee:4d:
         42:57:f9:e1:c7:b5:23:04:06:c7:09:8e:e5:89:02:55:42:cf:
         12:9c:f6:fc:f6:39:8e:75:f9:e2:ae:28:18:76:00:24:55:94:
         36:7a:08:75:c6:1a:55:90:e0:82:3a:93:38:4e:0f:54:a2:7e:
         89:fd:7f:54:e3:e8:58:c6:37:7e:e9:e4:fd:5a:5b:ac:d9:ba:
         c9:6a:bb:15:ee:18:e8:83:47:1a:e8:bd:c0:5f:fb:af:3d:41:
         5a:ca:23:90:2c:e7:dc:27:57:90:b6:c9:4a:5d:ba:07:95:1d:
         5a:c8:8e:9c:5d:4a:9e:94:b1:cc:2c:ed:fd:a9:91:0b:23:e7:
         aa:93:76:76:90:ed:48:80:a3:0b:ef:b4:77:d0:ed:e7:8f:e9:
         2b:3b:df:9e:42:31:53:52:88:8a:f1:82:76:a7:23:22:f5:c3:
         a7:6c:af:81:0e:3c:ac:92:6a:30:ed:5a:30:56:96:23:87:e8:
         4f:d2:4b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1QG/pQJlwvOLvIt7ersMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMjJiZmZkMmQ1YTA3MGUyZWM4YTNmYzQ2ZTc5MTFhZjk2
ZmVhYWQwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
EygxNjBjZmFkOTE3N2Y0NDdiYTBkYjg1ZTljYWE3ZjI2OWY4MDQ2OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJWfEGz7ygiJ5Dyg7pFS0Xu3BZuT
1Relorld1kjeQn+Ze8C8OVbr35vGQ03cLwSj9vVLH9CIyhuqT25mVvfb4HOuRwd6
asB0633h6UBovyesKPcjmb+33rigdWH/whaKsE4tY+NXSAoztSLmu5T4Sen3Xnvh
a/GH0g7uBIy52kWrJiPnU7dGGJorrf/4UP88JqZDBQH8GFZFiUDjYOnm5rmC88sY
0qw8ZQz7vGxBTjnyA2D4wn2dvrKrwqcTBoRVT6DNGMQIJ1Ofya/nhvJPbWIr9V0z
6/Xzl4dCaBEK7cv0j1UzU8+yjUK9saco/AUu86BB35u73Wws4MWpPSbdNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYM+tkXf0R7oNuF6cqn8mn4BGjyMB8GA1UdIwQY
MBaAFKoiv/0tWgcOLsij/EbnkRr5b+qtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAt
NWM2ZTE5ZDA3MGU1LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84NzhkMGMtMjIwMC00YzI3LTk0YzAtNWM2ZTE5ZDA3MGU1
LzEvcWlLX19TMWFCdzR1eUtQOFJ1ZVJHdmx2NnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANctnZGAT
DEY3KsB4Ns35nW0twLH6ZxDxKZiw9/r5HRHPVlTeFWQITOBoLtXa1sXxR+4+cb1l
bynZTuVzGZ55PNM448q2Tu5NQlf54ce1IwQGxwmO5YkCVULPEpz2/PY5jnX54q4o
GHYAJFWUNnoIdcYaVZDggjqTOE4PVKJ+if1/VOPoWMY3funk/VpbrNm6yWq7Fe4Y
6INHGui9wF/7rz1BWsojkCzn3CdXkLbJSl26B5UdWsiOnF1KnpSxzCzt/amRCyPn
qpN2dpDtSICjC++0d9Dt54/pKzvfnkIxU1KIivGCdqcjIvXDp2yvgQ48rJJqMO1a
MFaWI4foT9JLlw==
-----END CERTIFICATE-----