Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File:                     q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier:          mTdDKTeR3+fNvzRk3ER2VLJxJGN5NPo2GUoMdRt36S0=
Subject key identifier:   5A:64:C0:56:A7:F7:16:76:E6:66:3B:C5:FF:F0:7A:97:C4:B5:48:66
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer:       /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial:       01962F3D5E4B83B877929F919994A0C3500A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number:          03B6
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 4fHNG3uqnKYRdS0KPogfVSeJ6Y4.roa (hash: EoqRZ5+OD3esILCMjil4nQygTYY9bzIijeRvhLDs9S8=)
                          2: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
                          3: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: iSd+uCBXoktEMolbBIqrSkUyHsnLsOeu5hl0xLPcpn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5e:4b:83:b8:77:92:9f:91:99:94:a0:c3:50:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=5a64c056a7f71676e6663bc5fff07a97c4b54866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:c3:25:4f:54:54:cb:a6:37:d4:96:57:03:
                    15:06:65:6c:56:e8:48:89:0a:ad:37:f3:63:50:57:
                    30:82:fc:e2:47:ca:d1:5a:fb:e7:9b:75:7c:80:df:
                    83:12:fb:bc:c4:f4:f6:46:45:0f:9f:39:a7:79:a4:
                    19:49:c0:f3:4c:70:de:15:4c:bc:6e:26:dc:76:e4:
                    f9:d6:d0:71:f4:fe:e3:5f:d4:91:d5:11:dd:8a:80:
                    ac:17:de:d4:3e:61:37:38:a9:b2:02:06:c6:e3:85:
                    ff:ec:fb:2f:ba:87:09:8c:ab:78:af:0b:a9:59:ac:
                    8d:6a:fd:8c:de:ff:74:5d:b1:1c:9c:de:ba:10:49:
                    66:6c:cb:52:14:7e:5b:0f:cf:c6:70:5d:7c:60:f5:
                    71:81:79:c5:44:44:93:0b:65:50:61:d0:0d:d8:ae:
                    a2:78:6e:58:79:c0:42:bf:f7:94:ec:5a:9a:21:5e:
                    25:5d:c2:48:35:cc:e8:15:88:ae:b1:5e:64:d2:b5:
                    b8:23:39:09:97:6a:13:6d:65:46:2f:63:b5:09:a3:
                    40:4c:4b:da:13:9c:e0:62:06:9e:f3:d0:d9:50:94:
                    1f:d3:4c:ea:5e:b8:8d:07:26:0d:be:d6:17:1a:99:
                    50:c6:48:e6:91:a3:0a:8d:d0:9b:84:94:ac:20:33:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:64:C0:56:A7:F7:16:76:E6:66:3B:C5:FF:F0:7A:97:C4:B5:48:66
            X509v3 Authority Key Identifier:
                keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:49:17:b2:bd:70:fd:6e:00:58:31:f0:05:cb:ff:d8:9e:
         14:47:c2:7d:f2:83:c0:e2:1e:b4:8c:29:03:40:1b:de:c4:db:
         7e:2b:a3:d9:a8:f4:fd:7b:b9:97:1f:ab:cd:7b:b5:bf:7b:e0:
         6a:cd:f3:3f:4a:8e:31:42:1d:19:c2:40:b7:5f:3d:2a:60:ba:
         d3:d1:8f:5f:93:5d:f4:d3:15:41:1f:da:e8:81:23:ef:5f:9c:
         3f:22:d4:2d:0e:82:02:08:45:14:96:f3:fd:95:db:4d:d1:ce:
         b0:16:7d:67:0d:4d:63:1d:9b:0d:9c:2a:9e:f4:5d:11:b8:a4:
         03:e5:21:42:6f:07:dc:8a:11:b2:32:3e:6e:d2:d6:38:25:6f:
         69:ec:3b:96:3d:b4:68:aa:7f:63:e5:06:59:be:55:bb:31:b2:
         77:70:e1:f0:19:c5:92:13:0d:1e:e4:21:14:97:0f:ea:54:33:
         f4:21:b0:dc:38:59:f9:91:35:11:c2:f2:9e:05:25:33:77:1f:
         69:55:eb:20:82:98:84:ec:bb:46:48:b0:6e:9a:b8:19:bc:a9:
         35:7b:37:cd:ce:bb:ae:47:3a:6b:44:cc:79:71:66:92:d7:09:
         43:e2:c7:4f:8b:b7:40:5d:fe:67:ad:67:0f:59:b5:c5:65:32:
         03:ce:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----