Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File:                     QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier:          +eMVsJk1dTluHDFz+uKcVJXNMgTHAaxrtg+qV0YQw5M=
Subject key identifier:   C6:06:9B:CD:A0:CE:66:8C:8C:06:07:E2:1C:9D:7A:DC:83:43:3F:E6
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer:       /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial:       01962E2AD396120E32276D214CBC9B515DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number:          0D46
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: 5jtuw5ajsD76ZLNmIkDIcXzjkgtXleyRHIbw21meJUw=)
                          2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d3:96:12:0e:32:27:6d:21:4c:bc:9b:51:5d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=c6069bcda0ce668c8c0607e21c9d7adc83433fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:6a:da:c5:de:51:bb:8a:53:49:86:08:90:
                    a0:c1:3e:aa:33:30:f5:dd:23:20:31:b3:d0:47:21:
                    d7:6c:8a:69:4a:b1:3a:14:45:05:6d:71:7e:02:df:
                    b0:f1:2d:c6:ad:34:8c:64:4f:9b:b8:51:43:d2:8b:
                    09:d1:f4:de:1f:3d:f1:5e:b3:dd:ac:4a:5d:01:4e:
                    3d:37:17:69:fc:40:15:5f:66:7b:ff:4a:c8:d9:72:
                    29:cc:a6:31:b0:b0:a2:ed:70:f4:5b:c5:6b:96:70:
                    52:98:41:c6:2a:39:1f:08:64:8c:5d:4e:f2:f3:4a:
                    57:f9:e5:76:df:60:30:a9:8f:45:66:3c:fe:67:f9:
                    63:08:6a:4b:3f:2d:1b:67:19:97:d2:01:c1:7d:e2:
                    c2:77:cd:b9:e6:f8:e4:ab:7c:e6:d4:5d:2e:03:9f:
                    13:7d:ed:84:ae:48:40:89:05:7f:2a:13:94:7d:1e:
                    e1:e4:46:cd:e6:4f:18:09:fe:f5:7d:e3:37:61:85:
                    70:09:2d:07:50:08:8c:5b:7b:ac:e4:7d:65:b6:20:
                    73:f9:b1:96:90:6f:ec:79:48:6d:58:d5:a6:70:21:
                    cc:8b:79:cf:75:07:78:d8:00:8c:7d:54:87:71:fc:
                    7b:5b:4e:e4:24:a3:3f:a9:c4:0b:e2:71:aa:27:f8:
                    13:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:06:9B:CD:A0:CE:66:8C:8C:06:07:E2:1C:9D:7A:DC:83:43:3F:E6
            X509v3 Authority Key Identifier:
                keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:94:19:84:5b:3f:20:f9:d9:c9:c2:c1:50:16:1a:33:14:d1:
         c5:a1:1b:d0:31:6e:e1:73:e5:4b:84:5e:50:6e:62:e2:8c:48:
         bd:9d:4b:d1:81:30:c2:02:5a:48:47:9d:db:79:03:0d:8a:42:
         9a:47:72:d2:79:d8:c7:b7:47:dd:7e:fa:51:bc:de:63:46:f4:
         87:04:ba:12:23:08:cc:9e:d4:7f:7c:72:9c:51:fc:66:78:02:
         96:94:51:40:5e:74:eb:03:e2:3c:28:ea:f3:d4:a1:07:d2:ab:
         a1:4d:7f:11:f2:4e:8c:1c:c5:8f:06:25:07:13:e8:5d:d1:14:
         dc:af:4b:a0:72:9f:91:67:0b:65:b3:af:84:30:63:fd:66:b3:
         9a:41:66:d3:85:02:4c:4a:d5:c6:ff:11:a1:00:a0:5a:17:f6:
         ff:33:90:7e:dd:a8:df:37:d3:9b:08:c7:04:f0:9c:45:ef:48:
         f7:08:41:88:1c:34:67:06:0a:9e:0b:0a:61:63:b3:d5:a8:cd:
         d0:57:67:62:c9:91:55:4f:93:25:9d:9d:e9:74:40:74:8d:73:
         b0:9d:31:60:61:4a:cb:8b:e2:0c:ca:3d:33:f7:84:0e:53:0a:
         39:e6:b4:5f:74:46:14:1f:5d:2c:a5:53:cd:1d:47:ac:9e:4f:
         02:d6:14:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtOWEg4yJ20hTLybUV3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMzAxNzc1YjNmZGZmMDRhMjI3ZDZkODU5YzAxYjZkNjMz
YTRmMGIwHhcNMjUwNDEzMDgwMTIwWhcNMjUwNDE0MDgwMTIwWjAzMTEwLwYDVQQD
EyhjNjA2OWJjZGEwY2U2NjhjOGMwNjA3ZTIxYzlkN2FkYzgzNDMzZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1pq2sXeUbuKU0mGCJCgwT6qMzD1
3SMgMbPQRyHXbIppSrE6FEUFbXF+At+w8S3GrTSMZE+buFFD0osJ0fTeHz3xXrPd
rEpdAU49Nxdp/EAVX2Z7/0rI2XIpzKYxsLCi7XD0W8VrlnBSmEHGKjkfCGSMXU7y
80pX+eV232AwqY9FZjz+Z/ljCGpLPy0bZxmX0gHBfeLCd8255vjkq3zm1F0uA58T
fe2ErkhAiQV/KhOUfR7h5EbN5k8YCf71feM3YYVwCS0HUAiMW3us5H1ltiBz+bGW
kG/seUhtWNWmcCHMi3nPdQd42ACMfVSHcfx7W07kJKM/qcQL4nGqJ/gT2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYGm82gzmaMjAYH4hydetyDQz/mMB8GA1UdIwQY
MBaAFEMwF3Wz/f8EoifW2FnAG21jOk8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEt
MmNkMDA5MTBiY2I3LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEtMmNkMDA5MTBiY2I3
LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5QZhFs/
IPnZycLBUBYaMxTRxaEb0DFu4XPlS4ReUG5i4oxIvZ1L0YEwwgJaSEed23kDDYpC
mkdy0nnYx7dH3X76UbzeY0b0hwS6EiMIzJ7Uf3xynFH8ZngClpRRQF506wPiPCjq
89ShB9KroU1/EfJOjBzFjwYlBxPoXdEU3K9LoHKfkWcLZbOvhDBj/WazmkFm04UC
TErVxv8RoQCgWhf2/zOQft2o3zfTmwjHBPCcRe9I9whBiBw0ZwYKngsKYWOz1ajN
0FdnYsmRVU+TJZ2d6XRAdI1zsJ0xYGFKy4viDMo9M/eEDlMKOea0X3RGFB9dLKVT
zR1HrJ5PAtYU/Q==
-----END CERTIFICATE-----