Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          A38Hs+rQJBZjLQNHJMKzi6vfDNalsqx/3DFdp2bjdvM=
Subject key identifier:   28:4E:B9:40:A5:2A:94:B3:58:FC:07:42:8E:BB:F8:BE:C6:F4:16:DA
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       01962E620A6A632C9A41DB79CB86DAC98652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 09:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:39 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: kI95OqljvpuP19xNeatpCC78QL0.roa (hash: xeIJsQyiu78m/ov5MVv9GnNEdwzfiIiPyuIblum8QtY=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: Qk7f8hRmIG6/5v7iBZGdUKfa1dWsqgTtqvYtLIMCcJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0a:6a:63:2c:9a:41:db:79:cb:86:da:c9:86:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Apr 13 09:01:39 2025 GMT
            Not After : Apr 14 09:01:39 2025 GMT
        Subject: CN=284eb940a52a94b358fc07428ebbf8bec6f416da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:83:37:9a:8a:43:50:6e:d4:4e:d3:ff:ec:
                    7a:79:cc:e0:10:49:86:c1:17:90:aa:ac:12:6d:e6:
                    80:64:73:d1:07:3e:e9:b3:ba:10:d5:e2:c9:92:d0:
                    6e:59:41:dc:d0:17:20:e9:12:86:6c:f3:a3:68:14:
                    6f:c2:b9:0a:0c:ed:de:34:4c:ec:e2:cf:f9:8d:5f:
                    ec:7f:5c:7e:73:50:66:3a:87:6b:c9:7c:e8:fb:bc:
                    36:2b:1f:11:4d:7c:13:0a:52:7d:e5:d4:76:5c:6f:
                    a9:61:70:eb:90:9e:6a:05:44:44:8c:6b:3f:4a:d0:
                    29:6e:1e:45:bd:5d:81:46:de:f4:aa:7c:6b:8c:52:
                    f4:1a:77:55:92:87:8a:d2:39:55:9b:1e:ec:70:74:
                    5c:b8:9f:e7:b1:43:8c:56:c1:35:08:d9:ab:7c:71:
                    60:2d:b3:6f:30:d2:20:dc:1d:91:4b:43:69:34:95:
                    4d:30:b8:a4:c2:64:a8:b2:2c:a0:d7:f7:27:86:05:
                    ba:e6:79:5b:b9:a0:10:0b:b8:81:ac:a0:2f:9a:e6:
                    96:96:77:a4:e4:1c:8a:48:83:e7:97:ad:aa:c6:d4:
                    4f:86:e1:e3:60:22:cd:91:5b:97:04:61:05:b7:b5:
                    0a:1c:2d:1d:02:11:e9:c3:30:a2:4a:a7:7d:36:d7:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4E:B9:40:A5:2A:94:B3:58:FC:07:42:8E:BB:F8:BE:C6:F4:16:DA
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:03:bc:8c:62:27:6c:47:b1:f1:55:ad:a3:d7:20:d6:95:
         9b:28:96:6a:e1:ee:c4:bb:df:56:e3:4c:ef:ac:75:8d:0b:97:
         67:f3:f0:13:d3:b9:84:69:85:8d:9e:97:a2:d1:2f:b7:6c:99:
         4e:23:49:dd:00:89:dc:26:0e:01:6e:ed:c3:ae:04:e2:92:a7:
         1c:26:14:20:fa:47:e0:dc:2a:e2:3c:3d:97:dd:08:5f:95:66:
         b6:4e:42:5a:e3:16:db:6d:88:9d:48:8f:62:98:14:74:81:3d:
         50:85:58:bd:cb:a9:34:dd:af:30:a3:91:e4:aa:19:12:6c:44:
         04:b6:22:f5:78:45:32:c8:49:08:eb:50:30:a6:af:f2:90:23:
         a1:5c:bd:b7:06:4a:7e:d6:7a:36:78:ea:e0:94:86:50:90:9b:
         cf:6f:3e:a8:ff:63:fa:e2:cf:d3:91:01:42:8c:94:42:be:60:
         f2:36:7d:1a:95:d1:ee:f8:2c:91:a8:26:c1:a5:de:db:b3:a9:
         f3:b3:8c:2b:a8:11:68:ac:4b:1a:39:b2:16:e4:70:a3:b9:a2:
         c3:b0:27:9d:31:e5:d2:72:6f:e3:10:35:94:d0:df:cb:af:73:
         03:b9:52:9e:6d:07:97:87:c7:72:09:53:6f:ec:c3:91:b1:f8:
         ef:66:af:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgpqYyyaQdt5y4bayYZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx
Zjk2MDUwHhcNMjUwNDEzMDkwMTM5WhcNMjUwNDE0MDkwMTM5WjAzMTEwLwYDVQQD
EygyODRlYjk0MGE1MmE5NGIzNThmYzA3NDI4ZWJiZjhiZWM2ZjQxNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjODN5qKQ1Bu1E7T/+x6eczgEEmG
wReQqqwSbeaAZHPRBz7ps7oQ1eLJktBuWUHc0Bcg6RKGbPOjaBRvwrkKDO3eNEzs
4s/5jV/sf1x+c1BmOodryXzo+7w2Kx8RTXwTClJ95dR2XG+pYXDrkJ5qBUREjGs/
StApbh5FvV2BRt70qnxrjFL0GndVkoeK0jlVmx7scHRcuJ/nsUOMVsE1CNmrfHFg
LbNvMNIg3B2RS0NpNJVNMLikwmSosiyg1/cnhgW65nlbuaAQC7iBrKAvmuaWlnek
5ByKSIPnl62qxtRPhuHjYCLNkVuXBGEFt7UKHC0dAhHpwzCiSqd9NtdSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChOuUClKpSzWPwHQo67+L7G9BbaMB8GA1UdIwQY
MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt
MjM2ZTkyZmM2YTU5LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5
LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbEDvIxi
J2xHsfFVraPXINaVmyiWauHuxLvfVuNM76x1jQuXZ/PwE9O5hGmFjZ6XotEvt2yZ
TiNJ3QCJ3CYOAW7tw64E4pKnHCYUIPpH4Nwq4jw9l90IX5Vmtk5CWuMW222InUiP
YpgUdIE9UIVYvcupNN2vMKOR5KoZEmxEBLYi9XhFMshJCOtQMKav8pAjoVy9twZK
ftZ6Nnjq4JSGUJCbz28+qP9j+uLP05EBQoyUQr5g8jZ9GpXR7vgskagmwaXe27Op
87OMK6gRaKxLGjmyFuRwo7miw7AnnTHl0nJv4xA1lNDfy69zA7lSnm0Hl4fHcglT
b+zDkbH472avZQ==
-----END CERTIFICATE-----