Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File:                     qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier:          qXYXUZDjtWt6rO8NU63Epnlap4dA+nbhJby5rf5oba0=
Subject key identifier:   AC:FB:CB:D1:E8:3E:9C:B1:BC:01:8E:64:88:E6:4D:6F:53:F7:A9:AB
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer:       /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial:       01962F744F22B24A9A32EB41E41D54E63DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: KeS5UTHwQxCi+My8NrzdBXVFVxYCzGvxXDaVgIsq/jE=)
                          2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4f:22:b2:4a:9a:32:eb:41:e4:1d:54:e6:3d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=acfbcbd1e83e9cb1bc018e6488e64d6f53f7a9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:a2:7b:43:62:6a:71:b0:38:7b:45:87:82:
                    0b:b7:4a:fc:7e:38:ce:96:67:5c:1b:5a:77:ec:d2:
                    d3:59:e9:30:03:d2:be:78:db:62:05:78:70:ac:40:
                    8c:42:d7:0f:85:e2:00:0d:ed:bf:4e:29:6e:ac:4c:
                    01:90:6d:06:ff:c4:39:16:ed:9c:67:a2:28:2b:a5:
                    5d:2c:4f:5a:63:5b:16:13:6e:92:3d:84:0f:23:7a:
                    de:53:41:3b:44:3c:96:b3:61:ba:b4:a5:9a:bb:6f:
                    45:2d:f1:a4:85:dd:ff:a7:ff:76:0b:64:03:e6:ec:
                    91:d4:d9:7f:8f:44:d6:fd:fb:44:a1:4c:96:29:9e:
                    70:fc:d6:a6:a6:c5:50:a6:6a:6d:f2:4b:54:61:bc:
                    f8:4e:a4:70:a3:16:96:9f:c4:61:db:c0:b1:82:5a:
                    13:6a:2f:81:28:d6:d7:5f:bf:21:b2:57:20:4b:5a:
                    e2:d9:53:12:ac:39:dc:d7:51:b7:b8:bc:70:57:6b:
                    44:10:6c:61:0b:b5:57:93:0d:49:95:91:81:14:04:
                    5f:1b:4a:e0:8a:74:46:37:d1:2a:d8:53:35:2d:a4:
                    28:2f:3e:0a:b5:7d:67:c5:97:f1:75:8e:ad:59:82:
                    30:54:d9:cb:1a:fa:87:e7:2a:1b:f9:e6:48:c2:0f:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FB:CB:D1:E8:3E:9C:B1:BC:01:8E:64:88:E6:4D:6F:53:F7:A9:AB
            X509v3 Authority Key Identifier:
                keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b5:74:b5:6f:32:89:cb:6c:81:94:c1:d0:34:8b:2d:3a:8e:
         9c:0c:4c:08:a1:b1:f9:d0:0f:8d:9b:cb:91:43:28:80:70:78:
         32:8b:14:74:55:b5:ee:e6:56:0f:6a:6e:89:85:2e:cd:6b:d9:
         31:c9:12:bb:ca:0a:f1:d8:0d:81:84:80:29:e9:62:5e:cd:9f:
         de:79:c6:69:ef:39:9b:51:89:f3:b0:80:1d:1f:e5:c7:c8:06:
         cd:37:1e:ec:28:45:26:4a:f6:1e:d6:46:ce:0b:ec:10:df:29:
         78:70:94:28:35:f8:b1:41:b1:92:b9:20:76:2c:f1:e7:2d:de:
         c4:8a:32:09:bd:88:41:20:b2:aa:e7:4c:5e:97:32:5f:91:1f:
         ee:dd:a5:17:56:aa:01:94:32:2b:30:23:59:80:58:f0:9a:08:
         17:19:1e:ea:ec:8d:05:36:00:86:64:df:f7:20:12:47:4b:84:
         2c:d2:71:6c:4f:7e:36:ae:dd:4f:ba:cb:25:d2:92:b3:21:3d:
         74:5f:e8:9d:d6:58:83:f4:ec:a7:c6:af:36:59:6e:0d:7c:a3:
         7f:b0:4e:0a:ac:80:52:90:a7:87:c7:d5:02:1c:28:7b:e2:f8:
         93:4d:85:d6:67:56:e4:fd:6d:89:f0:5a:1f:ba:1d:fc:6a:a0:
         0f:f2:25:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----