Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File:                     QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier:          l+J/wLfXd02ebvgzwF8F50Zfqyn8Yi9zzHVpCs0YkD0=
Subject key identifier:   5F:5D:C7:80:57:94:7A:A6:35:FB:AD:75:DD:B6:9A:4E:5E:22:F8:4D
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer:       /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial:       01962E9905EA3E2BB9338E89A2A6BE1FAC6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number:          095F
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: thv3xpZ0yvTJ3kKCQnYBRZvs/t9nsp+JJWWcDbIqCUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:05:ea:3e:2b:b9:33:8e:89:a2:a6:be:1f:ac:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=5f5dc78057947aa635fbad75ddb69a4e5e22f84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:9b:24:cb:3b:1d:fb:59:d1:f4:c3:6d:e3:
                    3e:85:a9:5b:80:d0:47:64:b9:e9:79:19:ca:52:79:
                    b0:15:4c:b9:e2:12:d7:08:09:95:3e:90:ca:dc:b4:
                    81:4f:4a:d0:b3:96:ca:dd:cb:eb:a3:35:59:33:da:
                    2a:06:ff:9a:c9:4a:bd:fa:94:68:5d:bd:62:35:13:
                    fa:5f:52:10:6b:51:3b:3c:66:ac:a9:6a:cd:f4:72:
                    df:75:6e:7d:e9:d6:0e:8e:06:d5:0e:d9:b0:a5:db:
                    3c:bd:83:86:16:bf:74:51:db:2c:a9:7e:0b:bc:a3:
                    90:a5:1e:24:1e:2e:9b:47:61:46:ea:82:6b:f7:6d:
                    d8:4c:85:60:2d:97:74:78:f5:5f:1c:81:81:7e:72:
                    cc:f0:5b:38:96:02:4e:83:0f:16:33:36:fa:a9:47:
                    fb:6f:3d:7a:48:fb:37:2c:69:2d:7e:f8:cf:87:c4:
                    d4:48:87:56:53:ec:0f:7f:08:dc:69:df:30:be:b1:
                    89:ff:1b:75:d4:6b:d3:cc:e9:3b:d7:86:bf:88:e0:
                    54:64:ab:7f:40:cf:dd:48:bd:98:78:7a:b6:77:dc:
                    f8:3c:44:8d:8d:0a:ee:cf:54:e7:6b:46:7b:1c:39:
                    f5:a2:6f:d8:d7:80:cf:72:06:6d:0b:60:eb:0e:05:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5D:C7:80:57:94:7A:A6:35:FB:AD:75:DD:B6:9A:4E:5E:22:F8:4D
            X509v3 Authority Key Identifier:
                keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5f:13:cd:04:46:7b:4a:c4:ce:8b:5a:6c:2e:22:b3:03:5c:
         ab:35:70:db:49:ce:46:b7:82:da:b3:f0:af:27:ce:83:9d:d0:
         c7:2d:53:aa:88:03:06:30:f1:5a:39:06:1f:52:fb:02:8c:df:
         b2:7d:f8:c6:39:9a:5e:58:17:05:84:a0:89:08:35:46:f8:d4:
         72:42:ce:a7:ab:e3:4c:5d:7c:15:4f:d0:04:e1:9f:a7:96:e7:
         a7:72:c8:3d:b4:ba:f5:ad:7c:42:33:6b:cc:2b:73:52:92:f9:
         95:d2:37:e3:0c:39:37:04:82:4b:96:c7:d5:79:b8:3b:c2:f4:
         08:b6:60:69:4b:b5:c9:0a:5e:fe:4b:b2:d5:ac:73:9c:ff:17:
         90:a9:a9:cc:0f:83:9d:90:c3:50:a0:c3:4c:b9:d9:fa:cd:b3:
         b6:7b:f8:76:d7:0a:51:fd:c4:60:64:f1:61:77:e8:56:a2:d5:
         7a:aa:34:02:80:43:a2:e9:13:9b:bf:4d:51:d2:9c:7c:02:f8:
         18:c0:8d:ec:7d:15:90:ed:37:1c:71:e7:de:99:d6:c1:2e:02:
         ce:d1:e5:1f:ee:e0:25:80:b1:1c:99:fd:94:c7:90:9d:fe:da:
         0b:c6:5c:8c:c0:21:d7:88:bc:45:b7:ca:e3:39:e0:a7:d9:9d:
         ba:89:74:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQXqPiu5M46Joqa+H6xvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWEwNDdjNDQ2MTdmY2ZiMjljZDU3MmY3YWQ4NzQ3ZDBi
OTMyNmIwHhcNMjUwNDEzMTAwMTQyWhcNMjUwNDE0MTAwMTQyWjAzMTEwLwYDVQQD
Eyg1ZjVkYzc4MDU3OTQ3YWE2MzVmYmFkNzVkZGI2OWE0ZTVlMjJmODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsCbJMs7HftZ0fTDbeM+halbgNBH
ZLnpeRnKUnmwFUy54hLXCAmVPpDK3LSBT0rQs5bK3cvrozVZM9oqBv+ayUq9+pRo
Xb1iNRP6X1IQa1E7PGasqWrN9HLfdW596dYOjgbVDtmwpds8vYOGFr90UdssqX4L
vKOQpR4kHi6bR2FG6oJr923YTIVgLZd0ePVfHIGBfnLM8Fs4lgJOgw8WMzb6qUf7
bz16SPs3LGktfvjPh8TUSIdWU+wPfwjcad8wvrGJ/xt11GvTzOk714a/iOBUZKt/
QM/dSL2YeHq2d9z4PESNjQruz1Tna0Z7HDn1om/Y14DPcgZtC2DrDgVTiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9dx4BXlHqmNfutdd22mk5eIvhNMB8GA1UdIwQY
MBaAFEKaBHxEYX/PspzVcveth0fQuTJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMt
NzdlNjFlZWE2YTY0LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMtNzdlNjFlZWE2YTY0
LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl8TzQRG
e0rEzotabC4iswNcqzVw20nORreC2rPwryfOg53Qxy1TqogDBjDxWjkGH1L7Aozf
sn34xjmaXlgXBYSgiQg1RvjUckLOp6vjTF18FU/QBOGfp5bnp3LIPbS69a18QjNr
zCtzUpL5ldI34ww5NwSCS5bH1Xm4O8L0CLZgaUu1yQpe/kuy1axznP8XkKmpzA+D
nZDDUKDDTLnZ+s2ztnv4dtcKUf3EYGTxYXfoVqLVeqo0AoBDoukTm79NUdKcfAL4
GMCN7H0VkO03HHHn3pnWwS4CztHlH+7gJYCxHJn9lMeQnf7aC8ZcjMAh14i8RbfK
4zngp9mduol0bQ==
-----END CERTIFICATE-----