Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File:                     Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier:          nWb4hxEcQWe9hh3Aclt9XAcQVIUGqfgxM8zGQE519SY=
Subject key identifier:   6B:5E:65:6E:CB:08:AF:D1:22:2B:64:09:85:22:E5:A8:C9:0F:69:03
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer:       /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial:       01962F7453829FE0D84C112F93593A181EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number:          1481
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: PbM/pcZlvciMy16uwSIzr83CWheAZxeqFV8kw03itaQ=)
                          2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
                          3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:82:9f:e0:d8:4c:11:2f:93:59:3a:18:1e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=6b5e656ecb08afd1222b64098522e5a8c90f6903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:95:26:34:8d:f1:eb:c7:d2:93:4a:fa:3a:74:
                    39:44:bb:b4:2b:4c:fa:93:b7:16:d0:f0:5a:e7:b4:
                    c1:48:a6:7a:6b:14:05:7b:e9:50:b7:7c:c3:1b:95:
                    c3:40:ce:eb:9d:74:96:5b:aa:d2:66:11:d2:94:ca:
                    fa:82:06:ca:4f:05:62:76:b2:f8:98:14:e2:51:b5:
                    76:62:ff:ae:3a:58:89:c4:23:a1:a6:d3:d1:10:75:
                    f6:ba:78:2d:2d:1f:e6:81:97:98:72:f6:b7:97:70:
                    4b:58:71:5d:f6:a9:17:c3:19:53:83:13:4a:7e:e8:
                    68:0e:51:10:27:cd:40:c1:10:4f:91:eb:e4:06:4c:
                    eb:b1:e1:fa:12:4c:54:5c:25:7c:a5:08:5a:42:19:
                    3b:23:c2:e1:3c:4b:74:8f:a7:d0:02:53:16:70:a5:
                    49:d8:a3:71:7a:59:aa:52:15:6b:a3:be:8a:f8:f9:
                    30:d0:ee:b9:68:f2:96:1d:9b:b2:5f:e5:e3:57:67:
                    69:ab:f7:82:97:ac:4b:44:89:2b:08:4f:8a:7c:b5:
                    1a:b4:94:08:e4:f3:1b:c4:0c:a2:b7:0f:97:bb:6e:
                    ab:b3:34:2e:b0:3e:90:91:27:69:d2:a9:cb:b0:2b:
                    f2:fb:c2:9f:35:23:0d:a8:07:2b:03:36:0b:f4:f7:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5E:65:6E:CB:08:AF:D1:22:2B:64:09:85:22:E5:A8:C9:0F:69:03
            X509v3 Authority Key Identifier:
                keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:76:50:6f:3c:20:2a:65:5a:4d:ee:4f:3f:d3:58:85:36:08:
         93:eb:05:fe:7f:a7:99:fb:07:59:60:3b:f4:eb:62:eb:bd:f3:
         58:86:dc:fa:dd:60:ba:6e:2b:c4:51:4e:7f:74:8a:2c:34:0e:
         ed:d3:fc:52:9d:82:85:63:85:f6:8c:65:5f:f6:37:0e:d8:82:
         23:9a:29:85:e2:df:1e:0d:cd:47:75:1d:b5:c1:c6:fb:0a:cd:
         8c:01:5b:b3:9c:48:e9:55:07:d9:08:58:aa:6a:6f:c1:7b:26:
         d4:5b:57:81:a7:80:4d:5e:7e:e5:ba:6b:79:4f:b6:4a:14:c0:
         c0:27:19:d1:af:e1:13:36:93:83:86:9c:38:bc:88:a6:09:67:
         ca:ae:ad:51:68:cc:48:95:12:66:01:d0:ee:cb:5d:2e:ec:8b:
         77:a4:9c:2b:f3:7c:a1:ed:eb:01:96:8c:a7:3d:c2:67:42:bc:
         73:34:06:0a:9d:64:a7:22:59:26:33:6b:12:8b:ba:61:f9:d2:
         e6:c0:81:14:ad:a9:52:67:0c:9d:d3:b3:24:ce:91:c3:b5:15:
         d7:d7:be:77:dc:be:fb:6a:cc:c0:03:fa:b2:79:38:9c:8e:e3:
         b3:df:9f:56:a4:53:8b:ef:9b:a2:32:61:1c:96:3f:81:a6:68:
         73:15:53:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFOCn+DYTBEvk1k6GB6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWJmNDM3NWYxN2EwMzU3MDE5NjkwMzAxZjk0MTkzMjRm
ZjdkNDQwHhcNMjUwNDEzMTQwMTE0WhcNMjUwNDE0MTQwMTE0WjAzMTEwLwYDVQQD
Eyg2YjVlNjU2ZWNiMDhhZmQxMjIyYjY0MDk4NTIyZTVhOGM5MGY2OTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JUmNI3x68fSk0r6OnQ5RLu0K0z6
k7cW0PBa57TBSKZ6axQFe+lQt3zDG5XDQM7rnXSWW6rSZhHSlMr6ggbKTwVidrL4
mBTiUbV2Yv+uOliJxCOhptPREHX2ungtLR/mgZeYcva3l3BLWHFd9qkXwxlTgxNK
fuhoDlEQJ81AwRBPkevkBkzrseH6EkxUXCV8pQhaQhk7I8LhPEt0j6fQAlMWcKVJ
2KNxelmqUhVro76K+Pkw0O65aPKWHZuyX+XjV2dpq/eCl6xLRIkrCE+KfLUatJQI
5PMbxAyitw+Xu26rszQusD6QkSdp0qnLsCvy+8KfNSMNqAcrAzYL9PdkcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGteZW7LCK/RIitkCYUi5ajJD2kDMB8GA1UdIwQY
MBaAFEJb9DdfF6A1cBlpAwH5QZMk/31EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQt
ZjBlZDhmZTgyYjk3LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQtZjBlZDhmZTgyYjk3
LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXZQbzwg
KmVaTe5PP9NYhTYIk+sF/n+nmfsHWWA79Oti673zWIbc+t1gum4rxFFOf3SKLDQO
7dP8Up2ChWOF9oxlX/Y3DtiCI5opheLfHg3NR3UdtcHG+wrNjAFbs5xI6VUH2QhY
qmpvwXsm1FtXgaeATV5+5bpreU+2ShTAwCcZ0a/hEzaTg4acOLyIpglnyq6tUWjM
SJUSZgHQ7stdLuyLd6ScK/N8oe3rAZaMpz3CZ0K8czQGCp1kpyJZJjNrEou6YfnS
5sCBFK2pUmcMndOzJM6Rw7UV19e+d9y++2rMwAP6snk4nI7js9+fVqRTi++bojJh
HJY/gaZocxVTOg==
-----END CERTIFICATE-----