Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7113eb-0375-46db-81e0-8707010461e0/1/QKlobMJhYJfHPkKsdB4dB5gN-rU.mft
File:                     QKlobMJhYJfHPkKsdB4dB5gN-rU.mft (raw, json)
Hash identifier:          TwVxVmyDb+JgVWre4MFSfc4GRbSsdRG9MTm4lVr49PM=
Subject key identifier:   64:B3:92:BA:43:BC:AD:B0:1B:AA:A6:43:BE:69:AA:B4:2B:8F:69:6F
Authority key identifier: 40:A9:68:6C:C2:61:60:97:C7:3E:42:AC:74:1E:1D:07:98:0D:FA:B5
Certificate issuer:       /CN=40a9686cc2616097c73e42ac741e1d07980dfab5
Certificate serial:       0192AE85BFA2E89D6058E93EE68DB7FEE3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QKlobMJhYJfHPkKsdB4dB5gN-rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7113eb-0375-46db-81e0-8707010461e0/1/QKlobMJhYJfHPkKsdB4dB5gN-rU.mft
Manifest number:          0743
Signing time:             Mon 21 Oct 2024 10:00:53 +0000
Manifest this update:     Mon 21 Oct 2024 10:00:53 +0000
Manifest next update:     Tue 22 Oct 2024 10:00:53 +0000
Files and hashes:         1: QKlobMJhYJfHPkKsdB4dB5gN-rU.crl (hash: ctkI0lXZOAa6FVM83baTk0wnDR7n72zbS0WXMktlme8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:85:bf:a2:e8:9d:60:58:e9:3e:e6:8d:b7:fe:e3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40a9686cc2616097c73e42ac741e1d07980dfab5
        Validity
            Not Before: Oct 21 10:00:53 2024 GMT
            Not After : Oct 22 10:00:53 2024 GMT
        Subject: CN=64b392ba43bcadb01baaa643be69aab42b8f696f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:54:0a:c4:44:a1:1e:d7:34:ae:da:1d:7e:
                    92:33:41:ac:e7:83:70:bb:37:25:cc:48:4a:39:84:
                    7a:98:d3:51:95:81:85:56:84:3f:85:41:0a:b1:53:
                    fc:0f:ab:44:a0:fb:e1:8d:23:40:a6:76:df:51:85:
                    b0:9d:f5:9c:b4:a2:58:b2:5f:29:65:73:30:16:dc:
                    5c:6b:b8:6c:d2:f6:35:84:47:c6:db:a2:f2:cd:40:
                    cd:f5:11:90:40:bf:e8:54:b9:ae:a6:84:76:35:3c:
                    74:d0:92:08:2f:13:d8:a8:76:49:68:bd:bb:7c:e4:
                    61:4f:5a:69:b5:5b:0e:fa:0c:de:cb:df:89:a6:5b:
                    8a:cb:5a:22:2e:bb:dd:0f:50:ad:66:d4:1d:34:00:
                    68:d0:b8:38:8b:13:8a:3b:34:ea:53:fd:3e:2a:82:
                    8d:5f:1c:d9:36:83:da:16:28:3d:65:9f:30:0b:c3:
                    29:5f:89:8e:6b:34:c6:b2:b1:9f:79:9d:5a:3b:d4:
                    ee:20:f0:48:5c:36:6d:92:75:37:36:9f:32:7d:8d:
                    68:d9:49:29:3f:64:df:bf:79:7e:b9:fd:2f:9a:bd:
                    eb:c6:bc:08:2f:91:0b:7e:82:0b:8e:3c:11:5a:57:
                    72:31:32:ea:71:50:38:d1:31:a0:db:17:9d:7e:c7:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B3:92:BA:43:BC:AD:B0:1B:AA:A6:43:BE:69:AA:B4:2B:8F:69:6F
            X509v3 Authority Key Identifier:
                keyid:40:A9:68:6C:C2:61:60:97:C7:3E:42:AC:74:1E:1D:07:98:0D:FA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKlobMJhYJfHPkKsdB4dB5gN-rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7113eb-0375-46db-81e0-8707010461e0/1/QKlobMJhYJfHPkKsdB4dB5gN-rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7113eb-0375-46db-81e0-8707010461e0/1/QKlobMJhYJfHPkKsdB4dB5gN-rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:90:61:b2:9d:cf:87:2b:32:3b:79:22:36:ed:cb:0e:51:a9:
         88:1c:e1:96:ae:6f:3a:a3:64:b5:5a:a8:54:f0:e5:07:7e:fe:
         7d:53:aa:47:97:66:86:01:94:34:4d:d9:ef:ad:0b:a4:bf:18:
         58:58:bd:69:49:06:c3:d7:9b:5a:62:16:0c:87:60:a8:86:cb:
         24:49:35:63:14:97:14:71:88:7c:d9:f1:03:2d:d4:20:c9:e0:
         5b:b6:75:6e:87:3f:97:e1:8a:2e:a6:d5:80:64:44:11:34:fa:
         92:51:c7:d0:86:bb:78:58:52:bc:58:28:be:4c:4c:0b:4c:a3:
         1d:9c:65:51:b1:59:81:0e:f6:41:e4:99:2e:b7:2d:4f:a0:5e:
         7f:4d:b4:ad:24:2d:75:a8:5c:f2:55:4f:ef:ee:68:19:b2:be:
         cc:39:c3:2b:24:42:d9:a1:b1:cf:d9:7c:6d:2c:58:60:7b:16:
         63:40:ad:63:c2:ee:19:7e:b7:65:06:1b:a4:cf:75:29:1a:66:
         31:66:9b:c5:b3:8b:42:1d:ab:2c:95:6e:8b:d4:1c:62:85:00:
         1e:8d:34:7a:c9:e6:90:f0:99:05:6c:fa:0f:96:86:06:43:8b:
         f9:7f:e6:04:e9:3a:dc:85:e2:d5:7d:31:08:b2:88:55:76:c1:
         39:7e:6c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKuhb+i6J1gWOk+5o23/uO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTk2ODZjYzI2MTYwOTdjNzNlNDJhYzc0MWUxZDA3OTgw
ZGZhYjUwHhcNMjQxMDIxMTAwMDUzWhcNMjQxMDIyMTAwMDUzWjAzMTEwLwYDVQQD
Eyg2NGIzOTJiYTQzYmNhZGIwMWJhYWE2NDNiZTY5YWFiNDJiOGY2OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo9UCsREoR7XNK7aHX6SM0Gs54Nw
uzclzEhKOYR6mNNRlYGFVoQ/hUEKsVP8D6tEoPvhjSNApnbfUYWwnfWctKJYsl8p
ZXMwFtxca7hs0vY1hEfG26LyzUDN9RGQQL/oVLmupoR2NTx00JIILxPYqHZJaL27
fORhT1pptVsO+gzey9+JpluKy1oiLrvdD1CtZtQdNABo0Lg4ixOKOzTqU/0+KoKN
XxzZNoPaFig9ZZ8wC8MpX4mOazTGsrGfeZ1aO9TuIPBIXDZtknU3Np8yfY1o2Ukp
P2Tfv3l+uf0vmr3rxrwIL5ELfoILjjwRWldyMTLqcVA40TGg2xedfscWKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSzkrpDvK2wG6qmQ75pqrQrj2lvMB8GA1UdIwQY
MBaAFECpaGzCYWCXxz5CrHQeHQeYDfq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtsb2JNSmhZSmZIUGtLc2RCNGRCNWdOLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTEzZWItMDM3NS00NmRiLTgxZTAt
ODcwNzAxMDQ2MWUwLzEvUUtsb2JNSmhZSmZIUGtLc2RCNGRCNWdOLXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MTEzZWItMDM3NS00NmRiLTgxZTAtODcwNzAxMDQ2MWUw
LzEvUUtsb2JNSmhZSmZIUGtLc2RCNGRCNWdOLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZBhsp3P
hysyO3kiNu3LDlGpiBzhlq5vOqNktVqoVPDlB37+fVOqR5dmhgGUNE3Z760LpL8Y
WFi9aUkGw9ebWmIWDIdgqIbLJEk1YxSXFHGIfNnxAy3UIMngW7Z1boc/l+GKLqbV
gGREETT6klHH0Ia7eFhSvFgovkxMC0yjHZxlUbFZgQ72QeSZLrctT6Bef020rSQt
dahc8lVP7+5oGbK+zDnDKyRC2aGxz9l8bSxYYHsWY0CtY8LuGX63ZQYbpM91KRpm
MWabxbOLQh2rLJVui9QcYoUAHo00esnmkPCZBWz6D5aGBkOL+X/mBOk63IXi1X0x
CLKIVXbBOX5sOQ==
-----END CERTIFICATE-----