Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File:                     qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier:          GzvDrIz3TxeiyuZqZnad/DWci4vbbzAtuxbJgfV4EKE=
Subject key identifier:   4C:A4:FE:42:1D:38:2C:25:DF:76:08:37:9F:60:B7:C9:8E:46:2C:52
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer:       /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial:       01962E2AB9D28E52E4EC30AAA7D908C1949D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number:          0170
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
                          2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: PgGFAP07lxhxP6u4pds8vEqtcGt/6UOOta7ocFQZJAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:d2:8e:52:e4:ec:30:aa:a7:d9:08:c1:94:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=4ca4fe421d382c25df7608379f60b7c98e462c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:70:f0:5b:66:c3:2a:50:92:4d:83:55:d7:
                    21:fe:b8:b9:58:4f:b1:23:d0:c3:b1:ea:47:f2:fe:
                    e1:af:c6:b3:21:b6:c8:ba:44:f6:b7:fe:a5:86:f6:
                    8c:98:cd:dd:6d:6f:92:28:66:84:71:8c:c7:b5:f2:
                    f4:90:bb:c6:cc:a1:32:75:c9:91:93:ca:8b:90:76:
                    9a:6f:5e:a5:7b:d2:6a:3a:e2:d3:61:4f:9c:86:38:
                    83:e1:2d:a1:00:1a:68:22:bf:a3:78:63:b9:01:58:
                    ee:71:d4:df:69:13:8b:e1:1f:9a:99:e7:ae:c8:ac:
                    59:4d:a7:0a:45:4b:98:00:05:d4:3a:76:95:41:10:
                    98:29:9f:e2:08:ab:a0:3c:b9:1d:2b:00:b3:3a:de:
                    5a:4b:10:10:98:5d:e2:59:27:39:2c:aa:75:09:6d:
                    f7:96:23:7e:33:e1:3e:83:0b:93:78:e2:d8:08:20:
                    b9:85:ad:3b:f7:a9:a7:c2:b3:c5:61:5c:7a:d0:ca:
                    ee:35:61:68:58:62:63:d4:b6:a8:2c:b7:4b:a0:81:
                    df:3f:87:c8:5c:30:2a:51:0c:11:6f:70:e3:17:70:
                    d6:dd:7c:ec:00:ac:0c:bd:78:eb:13:e3:95:c1:60:
                    5c:2e:2a:32:23:43:1b:25:50:f8:1e:cc:3b:6a:0c:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A4:FE:42:1D:38:2C:25:DF:76:08:37:9F:60:B7:C9:8E:46:2C:52
            X509v3 Authority Key Identifier:
                keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:90:13:7d:d1:5b:36:01:8b:af:92:fa:56:27:aa:96:3e:5d:
         60:7b:1b:41:2b:60:bc:d7:78:c4:bb:59:a4:cf:35:8e:49:89:
         b1:32:9b:8d:6f:b7:89:5b:59:bc:78:af:05:2f:7e:f4:31:23:
         58:99:11:59:58:31:86:5d:ee:e9:d1:e3:7f:fe:c8:9a:2d:e6:
         6d:fc:1e:80:e6:d3:01:6f:3b:7b:ac:27:05:80:59:31:f8:cb:
         61:50:50:df:7e:e0:91:40:d0:61:c9:cd:01:00:db:f0:82:20:
         f5:e2:ab:f2:23:68:02:04:d6:93:c1:c5:b8:b2:0b:67:47:1b:
         28:48:6c:7d:97:49:37:89:f3:92:33:b5:dc:72:75:d9:66:bc:
         15:d7:e2:31:73:bd:a9:e9:e6:e0:3a:a2:e7:11:67:69:95:7c:
         5f:d7:68:2e:5a:70:a3:6b:94:47:98:07:db:08:49:26:a3:40:
         48:27:90:b4:e1:52:82:aa:39:44:4f:bc:8f:43:06:64:71:af:
         f1:32:f3:b9:68:17:03:8c:18:23:f9:99:57:1e:cb:5f:0f:06:
         9e:fd:8b:e2:dc:a1:f5:6a:41:2a:27:95:a3:5c:96:ce:a6:e8:
         fd:4d:06:d6:f1:66:84:29:57:e5:6f:ef:af:ce:32:bc:fa:d7:
         b6:5a:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----