Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File:                     qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier:          NuD/CpmBSl4waf9Mncw8bnRptihesi6JJCl+zkdGCRg=
Subject key identifier:   FC:39:D1:04:B8:EF:67:26:B7:E2:90:27:CB:67:96:97:84:FF:8D:13
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer:       /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial:       0194BCA993A8D1A374B631F2465C21190527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:17 +0000
Files and hashes:         1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=)
                          2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: 5ZV1mldYR1SYonkYhj+Hq7PaI79y1ijzjH3Zcb9ETqk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:93:a8:d1:a3:74:b6:31:f2:46:5c:21:19:05:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
        Validity
            Not Before: Jan 31 14:00:17 2025 GMT
            Not After : Feb  1 14:00:17 2025 GMT
        Subject: CN=fc39d104b8ef6726b7e29027cb67969784ff8d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:46:9c:30:75:a7:b3:af:6d:bc:37:a1:0b:
                    20:84:48:fd:2c:7f:d4:e0:fa:cf:b1:a0:49:fb:da:
                    66:52:80:5f:e7:13:cb:41:31:4e:17:10:f5:a0:4f:
                    17:9f:62:f4:a7:7a:a4:11:4c:f7:54:92:31:99:a1:
                    8f:f7:db:12:1d:f9:f8:69:93:81:78:20:0b:38:78:
                    93:78:04:73:e5:24:cf:9b:e5:d4:eb:35:6c:2b:72:
                    07:a4:e6:76:20:94:61:0f:e6:81:aa:fb:d7:71:d5:
                    41:8f:4b:3f:25:22:37:10:5e:8b:0c:ca:c5:5b:ac:
                    a7:d6:82:6c:17:b0:6b:db:df:0b:77:18:a6:33:c8:
                    67:dc:6b:8b:79:49:8c:46:50:b1:5e:d4:a3:2b:88:
                    4c:ad:ec:15:7a:f6:c0:bb:71:94:a5:57:47:31:b3:
                    50:f0:cf:c5:19:4e:9a:92:ad:e1:cd:4e:22:19:63:
                    67:a0:05:04:0e:63:b6:96:6f:69:3f:1a:c9:4c:77:
                    4d:06:c2:c0:04:8c:43:48:d1:e7:4a:6e:87:2f:b3:
                    51:bc:65:d9:94:e7:dd:af:03:ed:1d:68:9b:c7:a8:
                    dc:31:20:c4:fc:83:81:8b:39:96:ef:45:4f:19:b7:
                    56:c7:af:1f:ce:52:29:f5:e6:63:1c:74:c5:6c:93:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:D1:04:B8:EF:67:26:B7:E2:90:27:CB:67:96:97:84:FF:8D:13
            X509v3 Authority Key Identifier:
                keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8b:9a:37:41:f5:4c:37:6e:8d:0d:2a:ad:b1:d8:05:24:5c:
         b7:ba:18:e2:19:15:00:c6:ef:f0:07:d0:3c:d5:2b:90:bc:b1:
         0d:f7:92:75:2d:04:75:8d:7f:cf:3c:ac:a0:49:48:69:cc:28:
         10:f0:c0:02:7e:e2:38:20:67:b9:71:05:0b:6d:1b:70:86:ca:
         9c:a2:1e:1a:eb:25:e1:7a:9e:0c:76:63:01:41:c5:26:fb:33:
         d5:16:d1:79:df:17:5c:7a:4f:45:88:b0:de:e8:b1:21:8a:50:
         fa:4e:9c:a7:54:26:56:06:dc:58:14:43:de:6e:30:5d:c6:14:
         72:ab:18:94:99:56:b1:cb:b5:e7:84:aa:ec:d4:e5:ee:3d:98:
         ea:32:db:c2:59:73:4c:bb:a4:d2:52:14:8e:13:1c:f7:05:74:
         a9:9e:d8:fc:fa:10:0d:9e:c9:91:49:5a:85:bb:3a:f4:d5:a8:
         e6:89:ef:df:3c:77:c9:d9:f7:cf:1b:ac:8c:66:11:9a:39:a4:
         71:f9:3d:df:d1:30:7e:e9:e2:b0:54:79:2c:2e:06:13:7f:e1:
         b0:5f:e5:cb:01:58:7f:58:b2:8b:8f:26:44:05:3c:cd:b8:3d:
         7c:df:08:c5:0b:16:1a:63:86:04:55:29:02:3e:e8:00:a8:6d:
         13:8c:d2:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZOo0aN0tjHyRlwhGQUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmE0NWE2MmM1ZTg1MGFiOWM4NzI2YTU5YTliZmE5OTJk
MzcxYjIwHhcNMjUwMTMxMTQwMDE3WhcNMjUwMjAxMTQwMDE3WjAzMTEwLwYDVQQD
EyhmYzM5ZDEwNGI4ZWY2NzI2YjdlMjkwMjdjYjY3OTY5Nzg0ZmY4ZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl25GnDB1p7Ovbbw3oQsghEj9LH/U
4PrPsaBJ+9pmUoBf5xPLQTFOFxD1oE8Xn2L0p3qkEUz3VJIxmaGP99sSHfn4aZOB
eCALOHiTeARz5STPm+XU6zVsK3IHpOZ2IJRhD+aBqvvXcdVBj0s/JSI3EF6LDMrF
W6yn1oJsF7Br298LdximM8hn3GuLeUmMRlCxXtSjK4hMrewVevbAu3GUpVdHMbNQ
8M/FGU6akq3hzU4iGWNnoAUEDmO2lm9pPxrJTHdNBsLABIxDSNHnSm6HL7NRvGXZ
lOfdrwPtHWibx6jcMSDE/IOBizmW70VPGbdWx68fzlIp9eZjHHTFbJNrvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPw50QS472cmt+KQJ8tnlpeE/40TMB8GA1UdIwQY
MBaAFKr6RaYsXoUKuchyalmpv6mS03GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEt
MmIzZGRiY2I3MjM4LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEtMmIzZGRiY2I3MjM4
LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4uaN0H1
TDdujQ0qrbHYBSRct7oY4hkVAMbv8AfQPNUrkLyxDfeSdS0EdY1/zzysoElIacwo
EPDAAn7iOCBnuXEFC20bcIbKnKIeGusl4XqeDHZjAUHFJvsz1RbRed8XXHpPRYiw
3uixIYpQ+k6cp1QmVgbcWBRD3m4wXcYUcqsYlJlWscu154Sq7NTl7j2Y6jLbwllz
TLuk0lIUjhMc9wV0qZ7Y/PoQDZ7JkUlahbs69NWo5onv3zx3ydn3zxusjGYRmjmk
cfk939EwfunisFR5LC4GE3/hsF/lywFYf1iyi48mRAU8zbg9fN8IxQsWGmOGBFUp
Aj7oAKhtE4zSbA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:03 2025 by rpki-client