Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
File:                     QCzcwN4_54S70vviah2BZWpGfSI.mft (raw, json)
Hash identifier:          +kvNJjR6W7EYGyRXdq8buGmcT55JZnBADOdZJ7wDTto=
Subject key identifier:   16:D1:8F:0F:81:A3:5E:22:5E:5F:B5:35:7E:DB:47:AC:B8:44:EC:72
Authority key identifier: 40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
Certificate issuer:       /CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Certificate serial:       01962E98CD783699B4BB09B78A7F2A13DD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
Manifest number:          075C
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: QCzcwN4_54S70vviah2BZWpGfSI.crl (hash: zE23Vj0rfbyUOvwxHJZDpOSphP2EfkKrhMybWgVLZFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:78:36:99:b4:bb:09:b7:8a:7f:2a:13:dd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=16d18f0f81a35e225e5fb5357edb47acb844ec72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:8b:e7:be:8d:9f:e4:e3:20:17:64:42:24:
                    ab:a4:58:ca:fc:52:73:2a:05:1d:5b:4f:d5:9d:63:
                    65:62:8c:2e:4a:29:fa:1a:8e:68:82:c7:f1:18:a7:
                    6a:84:94:5a:db:97:5a:5f:40:d1:23:51:64:ff:06:
                    0b:04:15:08:cb:a5:24:13:b9:36:5a:4b:03:51:3c:
                    06:48:b2:4a:02:ce:e3:bc:f0:91:7f:04:24:f0:a6:
                    96:7f:6c:1a:37:f8:76:71:db:67:4c:a7:54:04:59:
                    28:b9:bf:a2:92:ac:b5:a6:5b:e4:6d:05:a0:e2:69:
                    55:70:56:94:e4:00:e2:8a:cc:7e:88:33:38:de:16:
                    67:0a:ae:c5:82:97:72:18:67:5c:26:7d:fb:80:3c:
                    88:b7:25:17:20:99:b3:7c:52:36:e1:3b:9f:62:b8:
                    06:2c:41:4f:4b:c9:a3:5c:69:a2:14:77:2f:0d:1d:
                    c5:29:e3:d5:c4:c4:26:57:4e:0d:3c:1f:d6:2c:26:
                    cd:cd:8c:3f:4d:41:56:22:97:d9:43:d4:0a:f5:4b:
                    6a:78:05:62:7e:42:7c:93:83:41:3b:c8:9e:e6:97:
                    53:44:4a:b8:0b:1c:1e:f8:a4:8c:e2:09:df:d2:65:
                    d6:24:8c:24:0d:cd:54:87:9b:f9:c0:58:4e:67:57:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D1:8F:0F:81:A3:5E:22:5E:5F:B5:35:7E:DB:47:AC:B8:44:EC:72
            X509v3 Authority Key Identifier:
                keyid:40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:94:ba:89:e4:0b:0e:7e:8c:46:b9:69:fb:dd:db:79:5d:d4:
         ce:1a:9e:55:34:38:f2:25:82:6f:6f:31:18:44:9a:6a:d9:bc:
         4e:ab:e2:6f:d5:02:2c:7d:f0:4c:07:aa:03:e4:c0:f3:89:be:
         8a:13:05:cc:e9:99:19:a8:87:90:a9:bc:6b:60:6f:70:59:dc:
         50:24:28:7c:54:fd:5b:8e:16:31:09:0b:34:73:30:12:2d:64:
         bd:87:55:62:1b:74:ac:d1:04:d5:32:fd:fb:a5:d7:15:4c:f4:
         6e:c3:60:45:7c:1b:e3:76:1f:c8:d9:48:b9:20:00:06:88:67:
         bd:e0:11:3c:00:77:7b:85:40:72:fd:65:4a:19:b6:44:19:47:
         55:6e:40:82:6d:0b:61:33:24:bd:19:89:7d:f4:c5:d8:77:6a:
         47:d9:91:cc:72:cf:83:bd:d2:bc:be:5a:bd:cd:e4:ba:a9:a7:
         19:1e:6f:25:d6:14:4b:46:b1:b2:d3:a4:03:e3:87:52:fa:8d:
         d7:6e:59:1c:c8:fa:d1:c1:86:db:c1:65:6a:8d:cd:e9:4c:ac:
         39:d1:07:6e:81:5b:22:60:fc:e5:fc:cb:b9:80:cd:a4:ac:2a:
         55:27:30:90:f8:90:5d:00:43:6a:1d:f2:4b:06:5e:70:ae:b8:
         91:d1:c2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumM14Npm0uwm3in8qE90OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmNkY2MwZGUzZmU3ODRiYmQyZmJlMjZhMWQ4MTY1NmE0
NjdkMjIwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
EygxNmQxOGYwZjgxYTM1ZTIyNWU1ZmI1MzU3ZWRiNDdhY2I4NDRlYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt2L576Nn+TjIBdkQiSrpFjK/FJz
KgUdW0/VnWNlYowuSin6Go5ogsfxGKdqhJRa25daX0DRI1Fk/wYLBBUIy6UkE7k2
WksDUTwGSLJKAs7jvPCRfwQk8KaWf2waN/h2cdtnTKdUBFkoub+ikqy1plvkbQWg
4mlVcFaU5ADiisx+iDM43hZnCq7FgpdyGGdcJn37gDyItyUXIJmzfFI24TufYrgG
LEFPS8mjXGmiFHcvDR3FKePVxMQmV04NPB/WLCbNzYw/TUFWIpfZQ9QK9UtqeAVi
fkJ8k4NBO8ie5pdTREq4Cxwe+KSM4gnf0mXWJIwkDc1Uh5v5wFhOZ1ezHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbRjw+Bo14iXl+1NX7bR6y4ROxyMB8GA1UdIwQY
MBaAFEAs3MDeP+eEu9L74modgWVqRn0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUt
ODY0ZGFjYTZjZmRmLzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUtODY0ZGFjYTZjZmRm
LzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZS6ieQL
Dn6MRrlp+93beV3UzhqeVTQ48iWCb28xGESaatm8Tqvib9UCLH3wTAeqA+TA84m+
ihMFzOmZGaiHkKm8a2BvcFncUCQofFT9W44WMQkLNHMwEi1kvYdVYht0rNEE1TL9
+6XXFUz0bsNgRXwb43YfyNlIuSAABohnveARPAB3e4VAcv1lShm2RBlHVW5Agm0L
YTMkvRmJffTF2HdqR9mRzHLPg73SvL5avc3kuqmnGR5vJdYUS0axstOkA+OHUvqN
125ZHMj60cGG28Flao3N6UysOdEHboFbImD85fzLuYDNpKwqVScwkPiQXQBDah3y
SwZecK64kdHCUQ==
-----END CERTIFICATE-----