Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File:                     qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier:          Iz3BN4Mn7IEOzC6vH9QWhnhA0VXrRvnCmXfhEylBF60=
Subject key identifier:   4D:DE:02:8C:F8:AB:AE:EA:FD:F5:48:6D:F9:CA:95:89:61:82:92:13
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer:       /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial:       01962F069633FC51C7017E404A227324322E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number:          09EE
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: fHB+4Fq1QsPs5SqoquVmgLyQno7UhZ3HwUp61VVIJbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:96:33:fc:51:c7:01:7e:40:4a:22:73:24:32:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=4dde028cf8abaeeafdf5486df9ca958961829213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:7a:63:73:aa:26:70:4d:53:42:53:66:fb:
                    f6:18:cf:c7:1d:5a:60:9e:61:4b:91:77:23:1f:0c:
                    1e:a0:bc:c3:54:03:ea:25:8c:0e:ce:ec:04:aa:89:
                    af:3f:22:aa:49:72:54:08:a3:b7:a1:39:9a:73:e9:
                    7d:0b:56:1a:f5:fa:9f:df:8b:d7:00:0e:7b:c2:9a:
                    dd:ce:35:b7:95:b7:9f:e2:30:17:11:2e:66:7b:5b:
                    88:02:bf:59:6d:88:78:26:11:43:24:71:81:b4:c5:
                    cb:fd:12:08:6d:7a:ba:a9:9d:ab:b2:b8:db:eb:b7:
                    cb:b3:65:b7:71:c2:e8:11:6f:cf:96:20:96:60:f0:
                    d8:36:c7:b7:fd:d9:6b:1e:f2:b3:c7:8c:39:31:62:
                    37:02:e0:6d:f4:63:04:81:14:27:10:0a:96:3f:b6:
                    f7:e9:99:78:ae:a9:b4:21:8c:58:9a:d2:9f:05:ee:
                    d1:85:48:3d:78:38:29:ca:d8:4e:ca:6f:aa:36:02:
                    db:8a:1f:50:81:12:7d:be:71:65:44:dc:bd:27:91:
                    43:d0:b8:72:5b:b8:9c:c0:1d:d6:bd:34:ee:22:5f:
                    5f:a6:a9:35:e3:64:62:ed:5d:8d:45:d9:c1:7e:a2:
                    c0:7e:93:93:c1:c0:e1:0d:f9:a6:a6:8e:2a:1b:3c:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DE:02:8C:F8:AB:AE:EA:FD:F5:48:6D:F9:CA:95:89:61:82:92:13
            X509v3 Authority Key Identifier:
                keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:4f:2e:9d:96:1f:6d:3b:3c:95:ae:45:25:9b:c7:62:69:
         cf:1e:56:1e:45:92:db:15:ab:95:30:3a:95:6e:10:86:45:af:
         b2:d1:e7:dd:0f:cd:7e:5d:7e:11:b1:99:4c:fd:3e:4f:b2:8f:
         3e:b8:81:2e:49:4e:f5:23:93:c7:e5:18:fb:43:0c:51:9a:49:
         c6:b8:6e:28:b3:2e:7d:15:c5:95:a6:2d:91:12:61:28:b8:f6:
         80:4f:5b:7f:b5:33:3b:65:6a:d8:ee:99:88:31:0e:b1:36:b0:
         d4:ea:78:a8:e2:0c:f5:73:e4:a8:5c:ae:13:a2:27:d8:56:2e:
         4c:c1:dd:e1:68:ce:91:ce:25:27:72:3b:85:28:a3:98:ea:2c:
         30:e3:24:2f:47:2d:a1:83:38:68:06:e9:f1:08:e7:05:a8:fd:
         ea:3a:02:51:9c:1b:a4:33:75:7d:3a:57:a2:0c:f4:b8:20:08:
         dc:79:c8:1a:4d:84:75:75:21:95:96:c8:6b:29:7c:5c:f4:b1:
         ee:cd:ef:82:57:63:a8:43:7b:d0:9c:da:20:7e:7e:1e:dc:35:
         fd:ea:c4:ca:76:78:f8:0e:53:05:b0:d0:e5:88:8b:34:f0:bd:
         52:c8:76:b1:01:c2:00:87:21:c3:41:7c:a4:a7:f7:79:4f:90:
         a5:f6:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----