Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File:                     Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier:          jm4VMDKFSg+8JOjbTenkeaihSHnC9G4gRUmJbPOj5HE=
Subject key identifier:   70:04:16:A6:93:23:95:F7:2A:EA:6D:2E:5B:C3:9C:82:D8:55:67:3F
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer:       /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial:       01962F74AE861215B0F9EDDB99E99BB76F08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: S9hUduKuKriF7kd7pNLrKPIA81QQblhPlSO91NzpfJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ae:86:12:15:b0:f9:ed:db:99:e9:9b:b7:6f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=700416a6932395f72aea6d2e5bc39c82d855673f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:e9:7b:f6:de:f0:30:fa:b5:30:d9:6e:9e:
                    7e:fc:b8:ca:91:03:50:e0:ed:56:77:b1:e3:38:fd:
                    e0:fd:a3:b0:16:92:26:a0:08:be:03:0c:45:dc:82:
                    e7:d6:f9:2c:95:b5:5e:e7:71:94:9e:ef:7d:b2:e6:
                    e4:aa:01:47:d0:4e:5c:68:e0:90:6b:c2:0f:6e:05:
                    8f:c9:fc:5d:0a:a7:8a:c4:0b:56:67:60:4b:ce:e2:
                    32:02:34:74:0c:b8:9e:01:18:d1:a4:b7:e5:32:40:
                    f7:92:d2:66:d5:cb:d3:b1:60:1a:ed:e0:c8:1e:41:
                    92:4b:08:14:01:0a:25:7e:b3:c5:c5:54:36:ac:53:
                    33:18:3a:da:d1:1e:71:c2:21:61:dc:70:aa:49:08:
                    d4:1a:2e:b3:7b:54:0b:81:79:48:85:d1:c7:c5:74:
                    13:80:67:c5:19:29:b8:ac:f4:e4:44:93:0e:36:f2:
                    20:2d:8d:3a:f5:b8:4c:e0:a5:49:21:81:32:b2:2a:
                    00:ec:9a:77:26:b4:a0:53:96:87:6b:82:70:a2:06:
                    1b:35:6b:84:33:01:24:e8:e6:21:f6:ec:8e:25:9c:
                    89:b6:fd:b4:37:94:ef:54:f2:35:a5:3b:75:be:c5:
                    88:ca:72:38:5b:ba:0e:63:f2:43:d3:80:ae:63:cd:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:04:16:A6:93:23:95:F7:2A:EA:6D:2E:5B:C3:9C:82:D8:55:67:3F
            X509v3 Authority Key Identifier:
                keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:3a:17:a1:1a:1a:6e:2d:e2:5a:86:a6:ea:69:3b:c3:f8:
         d2:7e:0b:52:f8:45:5a:97:e4:f6:1f:56:a3:be:5b:13:ec:5f:
         da:c0:ef:2f:12:e4:9a:57:74:d5:2b:1e:39:57:b0:4b:f8:6d:
         33:43:90:6e:08:5c:a7:17:a8:3b:2e:33:fe:e6:2c:76:0d:f3:
         c4:5b:53:96:1d:99:2a:77:c1:22:44:22:01:f8:49:fe:c1:c8:
         94:d1:7c:66:02:1a:6d:2b:09:91:d6:31:3c:fa:29:1e:97:8c:
         4a:68:0a:54:b3:bd:83:fd:d8:1e:92:9f:31:a9:83:02:e1:2c:
         ed:6f:4c:fb:6b:66:f6:0b:db:18:01:02:7a:0d:ad:c8:c5:eb:
         5f:66:65:c0:34:81:80:f5:1f:cd:7c:d0:52:0a:6b:e8:e2:ba:
         81:01:28:80:b1:ab:66:63:30:0a:e8:a8:03:0e:7d:ce:ce:ec:
         b1:13:35:3b:5d:d5:15:ba:1e:ec:b3:8c:57:4c:cc:41:4d:be:
         1b:83:cb:a3:64:da:75:0a:c8:36:ee:77:d5:f8:dd:9d:31:ed:
         32:94:45:ca:00:56:fa:59:25:88:01:68:9d:53:4a:77:27:01:
         61:e3:56:5e:2c:36:74:18:ba:fa:e7:a1:c3:ad:0d:79:8b:cd:
         53:cf:97:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdK6GEhWw+e3bmembt28IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWZkNTYwZDUxMzA3N2UzMzlmYWJmZTBjY2RhOTA5NDBi
ZGQ4MTQwHhcNMjUwNDEzMTQwMTM3WhcNMjUwNDE0MTQwMTM3WjAzMTEwLwYDVQQD
Eyg3MDA0MTZhNjkzMjM5NWY3MmFlYTZkMmU1YmMzOWM4MmQ4NTU2NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGHpe/be8DD6tTDZbp5+/LjKkQNQ
4O1Wd7HjOP3g/aOwFpImoAi+AwxF3ILn1vkslbVe53GUnu99subkqgFH0E5caOCQ
a8IPbgWPyfxdCqeKxAtWZ2BLzuIyAjR0DLieARjRpLflMkD3ktJm1cvTsWAa7eDI
HkGSSwgUAQolfrPFxVQ2rFMzGDra0R5xwiFh3HCqSQjUGi6ze1QLgXlIhdHHxXQT
gGfFGSm4rPTkRJMONvIgLY069bhM4KVJIYEysioA7Jp3JrSgU5aHa4JwogYbNWuE
MwEk6OYh9uyOJZyJtv20N5TvVPI1pTt1vsWIynI4W7oOY/JD04CuY83pKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAEFqaTI5X3KuptLlvDnILYVWc/MB8GA1UdIwQY
MBaAFEKv1WDVEwd+M5+r/gzNqQlAvdgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81NDliOGItNjQ5NC00YTkyLWE5NGUt
Y2Y4Y2UyMmMzYWY3LzEvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81NDliOGItNjQ5NC00YTkyLWE5NGUtY2Y4Y2UyMmMzYWY3
LzEvUXFfVllOVVRCMzR6bjZ2LURNMnBDVUM5MkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJak6F6Ea
Gm4t4lqGpuppO8P40n4LUvhFWpfk9h9Wo75bE+xf2sDvLxLkmld01SseOVewS/ht
M0OQbghcpxeoOy4z/uYsdg3zxFtTlh2ZKnfBIkQiAfhJ/sHIlNF8ZgIabSsJkdYx
PPopHpeMSmgKVLO9g/3YHpKfMamDAuEs7W9M+2tm9gvbGAECeg2tyMXrX2ZlwDSB
gPUfzXzQUgpr6OK6gQEogLGrZmMwCuioAw59zs7ssRM1O13VFboe7LOMV0zMQU2+
G4PLo2TadQrINu531fjdnTHtMpRFygBW+lkliAFonVNKdycBYeNWXiw2dBi6+ueh
w60NeYvNU8+XDQ==
-----END CERTIFICATE-----