Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
File:                     quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json)
Hash identifier:          B9zhDnZQyMLhygu9+dOmbpN4PcHAZhw8AQsy66IvoVE=
Subject key identifier:   D2:32:72:57:2A:82:11:F8:3A:2B:FC:AC:51:A5:65:AC:27:70:8D:D6
Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
Certificate issuer:       /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Certificate serial:       01962F7436FA0B7D9554AC2637515AE8B126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
Manifest number:          04B8
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: 5x6316IDy/lvT0WjayBUt22bOx12n00xOlLBCzw+wMk=)
                          2: uYoqxUmmvNO7Wii7YVSG5anWzrY.roa (hash: aA074fRdJxXnyU4wE12JFVrrch97b4B8/lsvIbEFtt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:36:fa:0b:7d:95:54:ac:26:37:51:5a:e8:b1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=d23272572a8211f83a2bfcac51a565ac27708dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:b0:ec:f4:30:f6:a1:19:2e:b8:0a:d8:8f:
                    5d:4a:aa:9d:2f:d7:61:39:d3:b3:c5:e0:04:55:cb:
                    34:be:22:01:49:f3:3a:55:9c:e4:4c:1e:50:2e:82:
                    7a:70:58:6f:89:aa:a3:dc:9b:85:45:b0:e4:47:52:
                    72:d3:63:44:a0:79:91:0f:6a:0a:07:99:cf:01:a1:
                    f4:aa:d5:4e:a7:9e:bc:c6:2b:de:f5:da:99:4f:2f:
                    19:e8:00:2b:e5:c9:fe:ba:2f:3c:d0:b1:d6:a7:13:
                    a6:cc:dd:bb:fd:88:18:bb:21:eb:6f:b0:c2:97:c5:
                    3d:6a:7e:31:07:a3:8f:3a:79:22:49:b7:42:33:86:
                    4a:db:bf:2e:90:28:31:b9:2b:a7:6c:cb:54:2d:1e:
                    ca:e3:00:9f:bc:c8:95:9c:d1:5d:ce:73:da:7b:49:
                    ee:92:50:2e:cf:72:83:fa:1c:d3:bb:6b:11:42:de:
                    c4:a2:cf:b9:2f:e4:ce:e7:cd:5c:dc:94:f3:b2:ad:
                    67:85:65:54:9e:7c:a5:d2:01:7e:94:f0:76:6c:b1:
                    29:fd:85:a4:17:8e:6f:a2:4d:b6:68:60:b7:eb:f5:
                    1f:62:e0:e7:bf:df:2b:4f:29:82:67:98:66:29:78:
                    c8:1f:e9:f2:80:f1:7b:4d:50:7f:6f:18:3f:7d:f0:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:32:72:57:2A:82:11:F8:3A:2B:FC:AC:51:A5:65:AC:27:70:8D:D6
            X509v3 Authority Key Identifier:
                keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:d4:eb:e7:be:41:78:f8:e1:d6:c9:18:14:2d:a6:4b:31:
         27:a8:ec:40:c6:63:d9:6f:27:37:26:34:5a:70:2e:b8:51:45:
         3c:cf:d1:4f:f6:3c:c9:49:77:45:a7:92:22:16:d9:40:39:a8:
         f2:0d:6c:20:34:5a:23:5e:06:da:7a:50:1e:cb:0a:6c:78:4f:
         36:4f:ed:94:52:0c:6a:be:e0:3a:45:1b:70:40:29:0f:d5:32:
         08:f4:91:52:51:2f:e1:12:c3:5b:83:75:99:ba:7b:4e:6d:c6:
         ee:59:db:cd:b9:d2:88:cc:69:8b:84:d3:2b:f4:ed:81:b9:b7:
         af:64:c1:f8:1f:19:7f:fa:51:3e:c9:ea:6e:9e:8a:36:5b:08:
         0e:1b:c8:06:70:30:67:45:fb:08:07:4f:a8:27:c9:e5:0e:10:
         ea:d1:97:62:5f:c4:24:8b:ce:1e:16:d7:47:70:1a:2c:7b:34:
         4f:fc:b5:76:2e:ea:b0:76:af:cb:70:fe:7f:b2:47:86:8d:63:
         e9:61:91:4e:ec:9c:cd:cb:b8:1f:ab:b5:56:e4:68:15:21:21:
         1a:30:32:72:9d:b8:31:81:a2:7b:8b:35:17:75:12:6c:a7:f3:
         9d:a6:0d:0c:5c:6e:f5:a2:fc:76:78:cc:79:bf:1b:45:1c:ea:
         53:b8:32:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDb6C32VVKwmN1Fa6LEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTZhYjA0N2JjNzMyOTZjOTcxNWJjYmFlYWUyZTkxODMx
NmI3OGEwHhcNMjUwNDEzMTQwMTA3WhcNMjUwNDE0MTQwMTA3WjAzMTEwLwYDVQQD
EyhkMjMyNzI1NzJhODIxMWY4M2EyYmZjYWM1MWE1NjVhYzI3NzA4ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNCw7PQw9qEZLrgK2I9dSqqdL9dh
OdOzxeAEVcs0viIBSfM6VZzkTB5QLoJ6cFhviaqj3JuFRbDkR1Jy02NEoHmRD2oK
B5nPAaH0qtVOp568xive9dqZTy8Z6AAr5cn+ui880LHWpxOmzN27/YgYuyHrb7DC
l8U9an4xB6OPOnkiSbdCM4ZK278ukCgxuSunbMtULR7K4wCfvMiVnNFdznPae0nu
klAuz3KD+hzTu2sRQt7Eos+5L+TO581c3JTzsq1nhWVUnnyl0gF+lPB2bLEp/YWk
F45vok22aGC36/UfYuDnv98rTymCZ5hmKXjIH+nygPF7TVB/bxg/ffA09QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIyclcqghH4Oiv8rFGlZawncI3WMB8GA1UdIwQY
MBaAFKrmqwR7xzKWyXFby66uLpGDFreKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWIt
MmI1MDY5M2RiZjk1LzEvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWItMmI1MDY5M2RiZjk1
LzEvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgfU6+e+
QXj44dbJGBQtpksxJ6jsQMZj2W8nNyY0WnAuuFFFPM/RT/Y8yUl3RaeSIhbZQDmo
8g1sIDRaI14G2npQHssKbHhPNk/tlFIMar7gOkUbcEApD9UyCPSRUlEv4RLDW4N1
mbp7Tm3G7lnbzbnSiMxpi4TTK/Ttgbm3r2TB+B8Zf/pRPsnqbp6KNlsIDhvIBnAw
Z0X7CAdPqCfJ5Q4Q6tGXYl/EJIvOHhbXR3AaLHs0T/y1di7qsHavy3D+f7JHho1j
6WGRTuyczcu4H6u1VuRoFSEhGjAycp24MYGie4s1F3USbKfznaYNDFxu9aL8dnjM
eb8bRRzqU7gyww==
-----END CERTIFICATE-----