Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File:                     qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier:          ZMyjLealIKGzbK6hEnHMe6TkP/9hgKhMap7kgF+0Odc=
Subject key identifier:   1B:5B:44:B8:AE:7B:CD:F9:6C:AE:23:8B:43:DC:11:43:ED:22:CC:F6
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer:       /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial:       01962F3D45874A0C885C092468C538079A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
                          2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: pCXJ9MHcy8mIhMoH1gio5/+gCINr3we3qmTUr76pNLo=)
                          3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:45:87:4a:0c:88:5c:09:24:68:c5:38:07:9a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=1b5b44b8ae7bcdf96cae238b43dc1143ed22ccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:12:3b:fd:e8:40:1a:f4:5f:09:05:ad:de:
                    52:d5:e9:fe:12:67:d8:b1:6b:50:cd:1d:ec:d0:35:
                    7f:81:93:ad:5c:27:ce:a7:66:d9:8b:67:f8:88:2c:
                    f6:38:fa:2f:13:86:29:dd:67:f2:bf:52:e3:0f:2c:
                    c0:92:c3:57:4e:0a:6f:d5:23:81:e9:d6:d0:23:5a:
                    6a:d6:40:fd:79:dd:b8:af:d0:e3:0d:86:6d:3a:5b:
                    0f:71:47:76:fe:4d:84:7e:98:eb:2b:01:ea:dc:14:
                    e3:ea:97:53:c6:43:6f:da:72:8f:ab:cc:c7:83:28:
                    24:2b:47:ec:b3:1f:95:2e:4b:b0:e8:fc:52:f4:ad:
                    d2:50:ea:35:4f:50:8f:f0:11:4a:54:2e:52:b9:29:
                    ba:d9:c1:26:f3:77:e1:bb:e0:04:54:e6:af:f0:d8:
                    85:24:92:f4:a1:f9:12:6d:33:90:85:72:20:f8:79:
                    de:45:c2:05:0f:1c:b7:dd:0f:cc:6e:37:68:56:32:
                    13:03:80:2a:34:4b:f4:37:c8:36:25:28:08:ed:34:
                    c9:66:2b:71:20:1c:97:23:99:f3:d7:0b:64:8f:02:
                    1a:73:62:7b:20:40:85:04:4f:e5:7c:45:9f:3b:42:
                    e0:88:5c:34:0d:8d:a1:e0:e4:fb:b2:d3:80:d8:53:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:44:B8:AE:7B:CD:F9:6C:AE:23:8B:43:DC:11:43:ED:22:CC:F6
            X509v3 Authority Key Identifier:
                keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:c0:c8:f0:ed:86:50:4e:2c:37:b3:f5:d2:50:cc:b8:b4:
         b8:ab:2d:70:7d:dd:a7:ec:22:13:f3:d2:1d:2e:ae:1f:04:86:
         f0:47:83:0b:ef:87:61:e3:a7:04:59:23:91:e3:b1:ca:ee:c4:
         ee:65:96:ac:19:b0:79:76:5e:dc:4d:dd:df:e5:3c:94:47:d8:
         77:16:64:cd:37:c7:7d:e8:99:66:ed:72:69:36:3f:aa:4d:78:
         79:1a:45:38:9a:c3:bc:35:5c:bb:41:c7:3c:43:66:8d:96:04:
         4b:3e:7f:a0:f1:53:40:96:2b:8d:50:dd:f4:cb:63:ac:f7:95:
         bd:5d:c4:c9:c5:32:4c:a4:b5:45:06:a0:38:d1:1c:f5:29:c4:
         ee:b4:f9:ee:21:6d:30:60:be:c9:43:d8:d6:c0:cc:ef:5e:46:
         ac:a0:4c:ab:0c:05:5f:1c:49:f1:92:89:44:eb:5f:a8:0f:39:
         c2:50:7e:e2:a4:90:f2:4c:78:a0:5e:2a:08:a8:34:88:dc:13:
         fb:3d:69:9c:49:60:cc:e9:46:ec:ee:fb:9e:80:a3:43:a4:27:
         c2:8e:fd:39:c7:1b:67:fa:aa:8e:59:fb:c8:83:b6:14:e1:22:
         bd:e1:11:2c:6e:c1:8e:f3:4a:2d:b8:f1:ac:bc:8c:10:98:0a:
         0c:57:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----