Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File:                     qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier:          2jbsF9YbbteMVrx75AHa96tnqlwrCfEp1vJCfnt94Ak=
Subject key identifier:   44:F9:F8:38:49:CC:18:62:CF:89:C0:31:2B:D0:7C:8F:62:D2:BB:8D
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer:       /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial:       01962F74952AA365F0E971E5AE2CAFE70972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=)
                          2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: eVS4oV9NcQNHMb4lvhyaZ79+meNyTYoaCpKHhzWyzEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:2a:a3:65:f0:e9:71:e5:ae:2c:af:e7:09:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=44f9f83849cc1862cf89c0312bd07c8f62d2bb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:32:07:4c:7b:33:80:11:29:6a:62:67:e7:
                    da:ee:57:99:55:db:5a:2a:76:54:0d:f3:fc:9e:77:
                    ac:7a:4d:d7:ed:fd:10:50:bb:67:70:e2:e3:d6:f4:
                    b0:08:ca:a2:32:3c:e8:b4:b4:33:c4:0a:8b:bf:c2:
                    a4:ce:e9:bc:c8:6f:13:07:ea:1b:1d:da:b9:a2:53:
                    78:d2:73:cc:f2:b5:7b:07:e6:b8:08:02:2d:4b:ca:
                    b1:be:da:24:b2:64:86:bc:b1:2f:09:60:34:1e:6e:
                    8e:ab:b8:31:e3:63:33:47:ef:25:be:b4:d5:d2:13:
                    26:7f:9d:3f:1d:15:c1:60:86:7b:ba:2a:e3:34:df:
                    71:40:2c:32:1e:96:64:b8:c7:99:88:b9:31:51:d3:
                    f4:b4:f0:3b:33:6a:ec:9d:64:f6:e4:f8:85:fc:09:
                    77:24:c5:69:a3:f3:33:d8:20:c1:c1:ba:85:02:03:
                    72:12:c2:1a:cd:86:9f:bc:0e:c8:cf:cf:89:60:57:
                    84:26:3c:e8:fd:de:bc:97:4b:6a:5b:f2:bc:87:9f:
                    90:21:da:ed:cb:3c:a3:9c:53:c9:db:f3:a7:26:ad:
                    1a:a4:30:5b:7a:5e:a9:80:de:73:3b:cc:69:a7:25:
                    fd:08:4c:0b:67:b8:8c:64:e3:56:8e:b3:fc:7e:8d:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:F8:38:49:CC:18:62:CF:89:C0:31:2B:D0:7C:8F:62:D2:BB:8D
            X509v3 Authority Key Identifier:
                keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bd:3b:a7:c1:2e:73:ea:a9:3d:4e:81:b1:8f:f3:02:0d:30:
         5b:4b:42:29:bf:60:83:6c:75:eb:bf:0f:7c:7e:a6:78:1f:1c:
         b2:1b:7b:e0:f6:20:80:c9:a8:98:de:28:d0:1e:06:e2:6e:58:
         a8:fc:a0:38:82:5c:a2:2c:72:90:b1:4b:15:e8:7f:c3:0c:b5:
         f6:82:e4:e7:78:0a:00:18:5b:8f:99:0e:1d:72:ae:cd:b9:52:
         28:c4:0e:2c:70:15:00:2a:06:5b:14:ec:e9:af:43:b5:a8:be:
         db:d6:88:94:84:71:b2:dc:5b:17:e9:c1:fa:55:68:f4:3f:b7:
         a6:6e:64:7f:17:5a:b7:fe:7e:59:c4:f0:f4:7a:06:98:5e:6d:
         2a:2a:62:37:61:5c:be:6e:23:0d:39:8d:b0:08:4d:e0:a4:da:
         bd:88:58:af:2f:7d:ce:f7:0d:b1:a7:ab:ea:51:8c:52:9b:ea:
         9b:4e:86:4c:46:05:b1:29:25:76:d7:4d:dc:d9:25:e5:40:51:
         02:46:b0:ad:a0:96:45:0b:e0:73:8e:23:12:35:10:b2:47:f3:
         46:e9:e3:5f:57:9e:07:0c:62:df:e0:7c:76:53:d6:e2:5e:d5:
         b9:d5:a4:78:a1:b0:8f:07:30:d0:3b:ee:0c:55:2e:79:96:32:
         00:14:40:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJUqo2Xw6XHlriyv5wlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5
MTk2ODcwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
Eyg0NGY5ZjgzODQ5Y2MxODYyY2Y4OWMwMzEyYmQwN2M4ZjYyZDJiYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uEyB0x7M4ARKWpiZ+fa7leZVdta
KnZUDfP8nnesek3X7f0QULtncOLj1vSwCMqiMjzotLQzxAqLv8Kkzum8yG8TB+ob
Hdq5olN40nPM8rV7B+a4CAItS8qxvtoksmSGvLEvCWA0Hm6Oq7gx42MzR+8lvrTV
0hMmf50/HRXBYIZ7uirjNN9xQCwyHpZkuMeZiLkxUdP0tPA7M2rsnWT25PiF/Al3
JMVpo/Mz2CDBwbqFAgNyEsIazYafvA7Iz8+JYFeEJjzo/d68l0tqW/K8h5+QIdrt
yzyjnFPJ2/OnJq0apDBbel6pgN5zO8xppyX9CEwLZ7iMZONWjrP8fo2cNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET5+DhJzBhiz4nAMSvQfI9i0ruNMB8GA1UdIwQY
MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt
ZTQ3NTY0Y2QwYmFlLzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl
LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf707p8Eu
c+qpPU6BsY/zAg0wW0tCKb9gg2x1678PfH6meB8csht74PYggMmomN4o0B4G4m5Y
qPygOIJcoixykLFLFeh/wwy19oLk53gKABhbj5kOHXKuzblSKMQOLHAVACoGWxTs
6a9Dtai+29aIlIRxstxbF+nB+lVo9D+3pm5kfxdat/5+WcTw9HoGmF5tKipiN2Fc
vm4jDTmNsAhN4KTavYhYry99zvcNsaer6lGMUpvqm06GTEYFsSkldtdN3Nkl5UBR
AkawraCWRQvgc44jEjUQskfzRunjX1eeBwxi3+B8dlPW4l7VudWkeKGwjwcw0Dvu
DFUueZYyABRAZA==
-----END CERTIFICATE-----