Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File:                     qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier:          6hTUim9o4UsHxBIMREvOWtWRUaKnWf0exSPWJvwZHi0=
Subject key identifier:   98:FA:41:D0:6C:3C:2B:C5:85:82:CC:A4:40:76:2E:71:B0:C0:07:E5
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer:       /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial:       0194BBCEBBDDE750D2AFFB82B70CF6071D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number:          043B
Signing time:             Fri 31 Jan 2025 10:01:15 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:15 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:15 +0000
Files and hashes:         1: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: hYgFX9X5wi79HATQYkrYuAMETldXCN0POGlMzjebr2Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:bb:dd:e7:50:d2:af:fb:82:b7:0c:f6:07:1d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
        Validity
            Not Before: Jan 31 10:01:15 2025 GMT
            Not After : Feb  1 10:01:15 2025 GMT
        Subject: CN=98fa41d06c3c2bc58582cca440762e71b0c007e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:28:e1:c1:6f:82:a3:05:c2:7a:eb:d1:61:
                    85:00:12:75:4c:84:4e:07:75:a5:2c:c7:1a:50:54:
                    64:2d:06:fb:d0:fc:d7:d0:6d:bb:1f:55:94:25:f6:
                    3d:a4:02:0d:ea:b7:2e:c7:77:fe:26:b2:bd:94:f3:
                    12:86:ae:54:b1:88:20:68:60:08:97:7e:3f:36:18:
                    db:62:25:f9:c8:c0:8e:1f:7a:62:e3:2f:e3:39:e9:
                    ff:cd:65:93:6b:fc:04:80:d5:8d:35:89:ec:eb:4c:
                    74:7c:61:a1:65:0b:bb:97:ab:24:9b:2d:72:4e:b9:
                    fa:de:dd:d0:10:9e:12:a7:67:75:18:17:2e:1f:83:
                    e2:3d:64:b8:d6:ec:9c:b7:f4:c3:8b:19:cd:5b:c7:
                    76:3b:17:ea:15:a6:8e:4b:b1:15:a0:ca:5a:22:33:
                    ed:39:8d:7c:6f:a8:06:d3:27:38:cc:26:11:d0:98:
                    b9:fb:39:f9:60:cc:50:dc:2e:9f:3c:df:f1:e8:88:
                    f0:53:b8:59:13:f6:69:a2:5a:55:7e:dd:ee:5a:08:
                    fb:be:28:36:00:95:f5:f5:b5:10:88:a6:df:48:92:
                    8f:65:3d:fb:d0:f8:8f:34:fd:8e:b9:99:d7:71:0c:
                    e5:9f:4b:13:cf:0c:cf:f3:6e:ce:b7:98:dd:08:89:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FA:41:D0:6C:3C:2B:C5:85:82:CC:A4:40:76:2E:71:B0:C0:07:E5
            X509v3 Authority Key Identifier:
                keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:ad:bf:71:f3:9d:3c:10:79:69:f4:89:2b:2f:f0:ea:46:
         29:72:54:84:6d:66:0a:8c:a8:34:54:2f:c4:d7:ca:9b:60:ca:
         0d:f3:d6:6a:84:f9:b5:25:db:01:6c:16:0c:be:c2:a4:72:96:
         b8:e0:1f:da:a8:ba:ec:9c:b5:f8:5d:86:8c:73:28:6f:35:b2:
         4d:a3:86:8b:3f:43:e0:ab:4d:07:8b:df:b9:94:e8:76:d1:47:
         0c:88:8d:53:ba:be:92:b6:71:1e:49:52:56:83:3f:b6:ba:32:
         c8:b6:f9:fb:1f:1c:f7:25:0b:42:31:b5:3c:6f:56:a1:02:e3:
         98:22:1c:c2:04:de:6b:1a:d6:9b:3e:35:0c:0d:de:55:5c:fd:
         01:76:0a:bf:b0:a6:00:05:c4:b1:f5:c9:54:73:da:a0:f9:b0:
         38:d2:4e:44:05:3c:52:08:44:8b:e6:20:4b:a4:16:21:4c:44:
         f3:fb:90:15:c2:16:92:74:e6:23:cd:05:9f:0f:da:49:76:22:
         47:65:41:2e:cc:31:e2:c0:47:c5:8d:b1:fc:dc:5c:66:6d:2c:
         ba:60:f2:9d:e2:c6:f6:d5:8d:96:36:8a:d3:fd:ad:94:1e:90:
         08:69:ac:b1:78:e0:8f:30:fd:03:41:5c:45:e6:72:ab:2b:55:
         b6:b7:19:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrvd51DSr/uCtwz2Bx1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMjdmNTEyYjBhMTAyNjVkZjJiMzQ2ZjE0M2E2NDVjMzgy
NzQyYmUwHhcNMjUwMTMxMTAwMTE1WhcNMjUwMjAxMTAwMTE1WjAzMTEwLwYDVQQD
Eyg5OGZhNDFkMDZjM2MyYmM1ODU4MmNjYTQ0MDc2MmU3MWIwYzAwN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DYo4cFvgqMFwnrr0WGFABJ1TIRO
B3WlLMcaUFRkLQb70PzX0G27H1WUJfY9pAIN6rcux3f+JrK9lPMShq5UsYggaGAI
l34/NhjbYiX5yMCOH3pi4y/jOen/zWWTa/wEgNWNNYns60x0fGGhZQu7l6skmy1y
Trn63t3QEJ4Sp2d1GBcuH4PiPWS41uyct/TDixnNW8d2OxfqFaaOS7EVoMpaIjPt
OY18b6gG0yc4zCYR0Ji5+zn5YMxQ3C6fPN/x6IjwU7hZE/ZpolpVft3uWgj7vig2
AJX19bUQiKbfSJKPZT370PiPNP2OuZnXcQzln0sTzwzP827Ot5jdCIlUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj6QdBsPCvFhYLMpEB2LnGwwAflMB8GA1UdIwQY
MBaAFKon9RKwoQJl3ys0bxQ6ZFw4J0K+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAt
ZmI3ZmJiMWM1OGZlLzEvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAtZmI3ZmJiMWM1OGZl
LzEvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbWtv3Hz
nTwQeWn0iSsv8OpGKXJUhG1mCoyoNFQvxNfKm2DKDfPWaoT5tSXbAWwWDL7CpHKW
uOAf2qi67Jy1+F2GjHMobzWyTaOGiz9D4KtNB4vfuZTodtFHDIiNU7q+krZxHklS
VoM/troyyLb5+x8c9yULQjG1PG9WoQLjmCIcwgTeaxrWmz41DA3eVVz9AXYKv7Cm
AAXEsfXJVHPaoPmwONJORAU8UghEi+YgS6QWIUxE8/uQFcIWknTmI80Fnw/aSXYi
R2VBLswx4sBHxY2x/NxcZm0sumDyneLG9tWNljaK0/2tlB6QCGmssXjgjzD9A0Fc
ReZyqytVtrcZDQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:33 2025 by rpki-client