Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File:                     qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier:          QmYVX8EdyyRJbwavBMdc38I4X9tUtfesxPxnqgc2GnU=
Subject key identifier:   DC:10:4B:3E:25:CF:A6:8F:3F:D3:31:87:15:BB:AB:95:74:BE:06:B7
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer:       /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial:       01962F0697A10EC0BB874BD399DD9EF732EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=)
                          2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: 9PxGkqBWwViEV9gafEE9M/OdyAwVU0B7fV74HjC3J7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:a1:0e:c0:bb:87:4b:d3:99:dd:9e:f7:32:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=dc104b3e25cfa68f3fd3318715bbab9574be06b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:1a:61:f7:f4:93:c4:09:81:8c:ca:46:a4:
                    99:88:9d:9a:6a:3a:aa:6b:c7:40:3b:7d:07:7d:52:
                    77:2c:e6:05:08:53:b5:44:4f:bb:47:a5:77:85:66:
                    08:cb:f4:f1:68:77:60:8c:97:a6:38:87:67:1e:d1:
                    75:e8:41:8a:e6:f9:13:c9:e6:d0:1a:5d:c8:f1:6e:
                    8e:85:f0:7c:6f:78:d8:24:05:1c:8b:70:94:5c:ee:
                    43:e7:4f:81:94:c0:bc:4c:a2:1c:98:8e:88:bb:89:
                    70:6f:7f:dc:25:a4:9f:e0:20:fb:80:e8:4e:dd:a3:
                    fe:ef:9a:2f:8b:10:2a:68:5f:6c:4f:31:49:f4:3c:
                    23:fd:3b:7e:34:3c:ef:8e:b2:56:ec:46:e3:b7:03:
                    20:5f:51:26:21:9a:d1:e8:64:23:a6:33:96:32:6c:
                    cf:19:ab:b6:93:7c:4e:a9:09:4e:4c:90:29:96:08:
                    07:0c:39:ff:17:86:7a:1c:ce:82:19:54:8a:b1:0e:
                    db:46:d0:94:df:8d:05:7e:e1:75:6c:5f:75:38:37:
                    18:7a:76:b8:58:1b:c5:d0:ba:39:10:6b:73:c7:af:
                    a9:53:1c:e6:fd:f2:1c:fd:6f:04:59:88:90:68:4a:
                    ab:25:ef:5d:67:5e:9b:03:6a:e2:25:92:96:ef:54:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:10:4B:3E:25:CF:A6:8F:3F:D3:31:87:15:BB:AB:95:74:BE:06:B7
            X509v3 Authority Key Identifier:
                keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:03:ba:d3:94:37:a1:aa:02:e5:22:d6:cf:92:67:8f:34:43:
         de:86:01:14:e9:a6:75:47:0f:15:e0:fd:df:18:5d:27:ab:bf:
         7e:81:6b:b1:bc:44:4a:1a:67:b2:5d:1c:e0:3e:be:4f:7d:9e:
         41:de:08:9a:5a:ff:c9:b3:a6:84:76:41:0a:0a:ff:d5:bc:9c:
         c6:64:cb:8d:e8:08:2d:01:5d:cc:b0:54:aa:99:05:de:74:3c:
         dd:dc:f8:57:04:f1:a9:34:83:a5:2a:eb:d3:1b:f4:2d:34:4b:
         96:56:93:14:9c:f9:1b:7e:9b:10:e8:77:2e:54:3b:d3:01:19:
         1c:e2:c2:4b:fd:56:32:ea:8b:93:0a:a0:1d:b0:1a:9d:a1:66:
         ea:32:ac:04:16:3d:88:ae:58:ff:3f:ed:86:28:05:73:43:9a:
         98:c4:02:d0:0a:7d:2d:6e:fe:4c:a4:75:71:87:b7:66:82:f9:
         c1:08:89:c0:3c:73:f8:8e:8c:1d:fd:6c:ca:e4:92:49:f9:d5:
         e8:d7:1f:1d:0b:a0:18:99:8b:2d:27:54:89:1f:a0:b1:45:7c:
         aa:b3:f1:5b:0b:fb:a1:2c:2a:b8:3a:d2:98:9b:ce:21:8f:41:
         58:3f:e9:fa:c1:bb:0d:bb:50:d7:b6:2e:d7:3c:ab:ee:21:82:
         c4:bc:d6:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpehDsC7h0vTmd2e9zLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw
MGQ2ODQwHhcNMjUwNDEzMTIwMTIyWhcNMjUwNDE0MTIwMTIyWjAzMTEwLwYDVQQD
EyhkYzEwNGIzZTI1Y2ZhNjhmM2ZkMzMxODcxNWJiYWI5NTc0YmUwNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YkaYff0k8QJgYzKRqSZiJ2aajqq
a8dAO30HfVJ3LOYFCFO1RE+7R6V3hWYIy/TxaHdgjJemOIdnHtF16EGK5vkTyebQ
Gl3I8W6OhfB8b3jYJAUci3CUXO5D50+BlMC8TKIcmI6Iu4lwb3/cJaSf4CD7gOhO
3aP+75ovixAqaF9sTzFJ9Dwj/Tt+NDzvjrJW7EbjtwMgX1EmIZrR6GQjpjOWMmzP
Gau2k3xOqQlOTJAplggHDDn/F4Z6HM6CGVSKsQ7bRtCU340FfuF1bF91ODcYena4
WBvF0Lo5EGtzx6+pUxzm/fIc/W8EWYiQaEqrJe9dZ16bA2riJZKW71TDAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwQSz4lz6aPP9MxhxW7q5V0vga3MB8GA1UdIwQY
MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt
YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4
LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAO605Q3
oaoC5SLWz5JnjzRD3oYBFOmmdUcPFeD93xhdJ6u/foFrsbxEShpnsl0c4D6+T32e
Qd4Imlr/ybOmhHZBCgr/1bycxmTLjegILQFdzLBUqpkF3nQ83dz4VwTxqTSDpSrr
0xv0LTRLllaTFJz5G36bEOh3LlQ70wEZHOLCS/1WMuqLkwqgHbAanaFm6jKsBBY9
iK5Y/z/thigFc0OamMQC0Ap9LW7+TKR1cYe3ZoL5wQiJwDxz+I6MHf1syuSSSfnV
6NcfHQugGJmLLSdUiR+gsUV8qrPxWwv7oSwquDrSmJvOIY9BWD/p+sG7DbtQ17Yu
1zyr7iGCxLzWyQ==
-----END CERTIFICATE-----