Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          S+2s8WCzCDndd3MWpTvptzggCCcqXkb2RCF4HVCar68=
Subject key identifier:   0B:E5:9F:CF:A3:7F:B8:5F:A2:AD:25:DE:62:82:4C:8C:20:B0:2B:0C
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       01962ECF67599E740283E03F788B2BC38D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          08D4
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: 3qRTh1P9OF6YOqHXqOqHDoBD8eg.roa (hash: nQAh302ZIgG0KfyPwfrx+gnhB19jlHvyVNBKKuKcDas=)
                          2: ArCJqTzX_sEk_DHHySgQMJUeLC8.roa (hash: c2rd+JdXNOMDPKYRrrcQLA7xUjenlWywhht/2+icFHw=)
                          3: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: 1IypeLmbHSB0WBa2GyW3tUkh/+nU5J6uE94WaF7H1uY=)
                          4: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (hash: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:67:59:9e:74:02:83:e0:3f:78:8b:2b:c3:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=0be59fcfa37fb85fa2ad25de62824c8c20b02b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:7a:02:e1:73:94:a9:9d:5a:71:68:58:f8:
                    f8:e2:41:cc:9b:11:00:55:80:4a:7c:18:8c:1f:2b:
                    30:b9:88:6d:97:3d:43:d8:f4:f8:3f:39:8f:84:75:
                    fb:14:0a:57:26:d7:40:9a:68:e6:21:38:b9:08:51:
                    97:47:27:8d:fd:1c:8f:3f:a4:1c:7d:57:e4:60:6c:
                    90:10:09:c8:0a:df:89:a5:10:fe:a0:ef:fa:c5:e0:
                    0e:e5:ea:2e:81:4a:43:68:db:fe:b4:c6:c1:1e:1b:
                    0a:4b:5b:b9:2d:8f:ec:39:1e:c2:e2:b7:dd:79:69:
                    16:35:33:c4:60:89:9b:d7:46:62:d0:b3:18:a3:c1:
                    29:51:ec:79:cf:4a:ee:e3:45:d3:5e:1c:f0:24:e8:
                    74:4f:38:da:0d:7a:b7:c1:60:de:27:38:de:e3:e0:
                    2f:5e:68:fc:a7:9e:03:0a:07:4e:16:35:93:ee:ff:
                    1b:98:18:4a:9a:67:d2:da:43:b6:f1:0c:59:ed:17:
                    ca:c0:0e:73:5e:76:21:b3:36:35:8a:1f:97:c8:3c:
                    68:ea:7d:12:00:6a:21:9c:2c:3d:e7:51:17:20:14:
                    e5:3a:47:c4:ce:71:7c:56:5d:80:6a:29:9d:ef:07:
                    56:3b:1b:90:7a:61:49:ac:92:86:99:cd:22:54:e3:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E5:9F:CF:A3:7F:B8:5F:A2:AD:25:DE:62:82:4C:8C:20:B0:2B:0C
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9c:c1:d7:70:98:8b:e6:ff:6f:d7:92:3f:65:7e:6a:ec:67:
         80:cf:14:21:ce:b1:c7:a0:e9:f2:24:35:03:f3:18:45:c1:77:
         c1:c9:2a:ae:4f:bd:7f:68:2f:e4:b1:3e:04:7f:02:5d:67:36:
         05:bc:27:8d:3e:f4:76:ef:60:a1:87:d9:9e:ab:f0:9f:98:92:
         f1:92:74:74:80:b9:29:a4:66:62:91:32:2e:f7:68:32:99:9d:
         92:bf:6c:5f:1f:0f:a5:be:ff:06:11:87:f8:31:9f:89:4f:3e:
         d9:95:82:3f:a6:04:d5:46:c8:19:15:10:b0:22:8d:f2:ec:f9:
         69:8a:d8:3c:14:8e:1f:f5:b3:76:1c:b7:bc:2b:b1:0c:ea:24:
         90:44:ac:ed:e6:04:73:83:2f:d6:cc:90:4a:d6:ef:ee:09:af:
         10:a5:e6:28:35:f3:2f:ba:ea:51:d3:5e:05:9d:7e:74:2b:1e:
         9a:6b:49:92:08:2b:e7:1f:bb:4d:f4:8b:ec:75:82:23:6f:66:
         cd:57:e8:6c:1c:ae:04:fd:7b:35:80:ee:bf:d9:77:da:b9:65:
         7b:77:a9:57:90:96:c8:7e:4d:68:f8:a6:47:ec:c9:03:45:c2:
         7f:be:af:56:d3:cd:fe:df:69:12:57:65:fe:66:69:7c:0f:35:
         9e:66:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----