Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
File:                     qQ_wEQVOz-aKitx94mit5sCCdxE.mft (raw, json)
Hash identifier:          E9aMTAwPZkBQJRovIouWojHSOuRp/ZUvACGzNAR31rg=
Subject key identifier:   A2:CD:54:AF:E2:D6:D2:74:88:16:21:64:D8:FE:88:45:4E:1F:CC:8D
Authority key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
Certificate issuer:       /CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Certificate serial:       01962E98B1C88EC42A54F0365EA7AB1B5C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: qQ_wEQVOz-aKitx94mit5sCCdxE.crl (hash: /xQB0gjbUwSCuZkpHeroTS2Mss1O/gvyZ6iCDWv2vl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:c8:8e:c4:2a:54:f0:36:5e:a7:ab:1b:5c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90ff011054ecfe68a8adc7de268ade6c0827711
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=a2cd54afe2d6d27488162164d8fe88454e1fcc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:bc:f5:51:35:ce:09:29:2b:7e:bf:47:45:
                    ff:99:5e:e6:f5:f1:82:10:67:d9:26:de:3e:b6:dd:
                    44:84:10:ed:1a:0c:68:b2:d5:d8:99:02:fa:cc:bf:
                    57:a6:76:34:f3:b5:eb:d0:0e:be:db:cf:69:f2:90:
                    3e:56:08:39:41:50:ba:fa:f1:5b:94:c9:e6:2b:08:
                    1f:b1:f3:bc:0b:ae:ea:cf:92:7f:49:9f:60:02:66:
                    e1:67:d5:e8:41:ea:2b:9b:dd:b2:cc:88:2b:77:2b:
                    e6:1c:dd:48:cb:48:70:68:cd:2f:43:a1:4c:3e:42:
                    9e:1f:89:3a:f7:1b:ac:13:ca:e2:de:da:a4:d3:39:
                    60:5c:9b:ea:21:bc:ef:e1:ba:d5:e5:4f:94:15:fa:
                    20:23:f7:68:b7:70:bc:10:93:9a:b2:07:45:6a:5f:
                    49:90:96:5f:4f:51:94:c5:59:04:3c:64:c4:4c:ab:
                    31:dc:05:40:93:96:26:98:52:6c:ed:81:22:43:5c:
                    dd:9b:0c:f0:13:1d:e4:e9:ea:9d:1b:50:07:dd:7c:
                    79:78:4f:ec:9e:14:3d:20:97:a5:5b:3a:8e:f8:cf:
                    8f:f7:f8:e0:0d:ac:a3:71:ee:f5:4b:49:bb:1d:d9:
                    fe:a8:04:6c:2d:65:ec:42:77:3f:46:16:95:8f:d4:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:54:AF:E2:D6:D2:74:88:16:21:64:D8:FE:88:45:4E:1F:CC:8D
            X509v3 Authority Key Identifier:
                keyid:A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:85:3d:f1:4e:89:ff:34:0a:9e:d4:2b:80:99:b2:0f:2c:2e:
         52:c6:fa:08:d8:31:5b:c9:7a:54:47:25:d9:28:a0:67:4e:6f:
         90:1b:e4:42:b3:8c:e8:e5:6c:8b:c2:ba:35:96:e7:77:49:b3:
         1e:32:61:63:95:ce:2a:bc:af:65:9e:95:0e:34:27:1c:02:f0:
         96:34:60:9a:09:6c:2e:97:d7:f1:db:17:27:db:04:70:73:cc:
         8f:fe:6f:40:53:5e:17:e2:eb:94:19:3f:cd:52:7e:98:77:49:
         64:56:d7:09:b1:83:0c:cb:ec:ee:f2:59:ed:4c:ff:26:e0:d8:
         26:ac:41:e6:48:86:23:fd:ad:8c:e9:7f:02:87:cc:00:73:54:
         62:23:03:2c:ef:19:89:3f:52:fb:bb:2a:f8:3c:30:55:73:ed:
         b6:72:8a:37:4b:d4:ec:2d:10:ef:62:5c:6a:2c:1c:41:d2:d5:
         7e:af:5f:35:99:b9:84:7d:6c:8d:d1:e7:49:86:9f:9d:8b:66:
         dd:ad:37:27:82:26:85:0f:a8:c5:c0:f8:7c:89:d0:2b:5c:6d:
         15:6e:c6:db:09:6b:f3:4a:12:8e:d6:63:ed:6b:3d:41:52:a8:
         cd:fe:08:5b:75:44:9f:81:2a:34:c5:e6:4d:18:44:78:27:10:
         98:8c:9d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLHIjsQqVPA2XqerG1ySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGZmMDExMDU0ZWNmZTY4YThhZGM3ZGUyNjhhZGU2YzA4
Mjc3MTEwHhcNMjUwNDEzMTAwMTIxWhcNMjUwNDE0MTAwMTIxWjAzMTEwLwYDVQQD
EyhhMmNkNTRhZmUyZDZkMjc0ODgxNjIxNjRkOGZlODg0NTRlMWZjYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUa89VE1zgkpK36/R0X/mV7m9fGC
EGfZJt4+tt1EhBDtGgxostXYmQL6zL9XpnY087Xr0A6+289p8pA+Vgg5QVC6+vFb
lMnmKwgfsfO8C67qz5J/SZ9gAmbhZ9XoQeorm92yzIgrdyvmHN1Iy0hwaM0vQ6FM
PkKeH4k69xusE8ri3tqk0zlgXJvqIbzv4brV5U+UFfogI/dot3C8EJOasgdFal9J
kJZfT1GUxVkEPGTETKsx3AVAk5YmmFJs7YEiQ1zdmwzwEx3k6eqdG1AH3Xx5eE/s
nhQ9IJelWzqO+M+P9/jgDayjce71S0m7Hdn+qARsLWXsQnc/RhaVj9RfOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLNVK/i1tJ0iBYhZNj+iEVOH8yNMB8GA1UdIwQY
MBaAFKkP8BEFTs/miorcfeJorebAgncRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFfd0VRVk96LWFLaXR4OTRtaXQ1c0NDZHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYTczYTItZjBlNi00NzZmLTgxMzMt
ZTk5Mjc3MDM3YTQzLzEvcVFfd0VRVk96LWFLaXR4OTRtaXQ1c0NDZHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iYTczYTItZjBlNi00NzZmLTgxMzMtZTk5Mjc3MDM3YTQz
LzEvcVFfd0VRVk96LWFLaXR4OTRtaXQ1c0NDZHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIU98U6J
/zQKntQrgJmyDywuUsb6CNgxW8l6VEcl2SigZ05vkBvkQrOM6OVsi8K6NZbnd0mz
HjJhY5XOKryvZZ6VDjQnHALwljRgmglsLpfX8dsXJ9sEcHPMj/5vQFNeF+LrlBk/
zVJ+mHdJZFbXCbGDDMvs7vJZ7Uz/JuDYJqxB5kiGI/2tjOl/AofMAHNUYiMDLO8Z
iT9S+7sq+DwwVXPttnKKN0vU7C0Q72JcaiwcQdLVfq9fNZm5hH1sjdHnSYafnYtm
3a03J4ImhQ+oxcD4fInQK1xtFW7G2wlr80oSjtZj7Ws9QVKozf4IW3VEn4EqNMXm
TRhEeCcQmIydww==
-----END CERTIFICATE-----