Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File:                     QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier:          Y08xx+zd7K4I1w4gBzr+yGjLQKRKwZWx7yeRaxdjZd0=
Subject key identifier:   54:C2:2C:14:07:0D:83:CE:49:7A:46:CB:36:31:24:F7:5A:B4:B3:5F
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer:       /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial:       01962FAB60DDF264F83E8C8A069FF3580411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number:          113A
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: tnuGTRehVN/e3Mor19puviOkk+QjvuxDCfrfhnLcWqI=)
                          2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:60:dd:f2:64:f8:3e:8c:8a:06:9f:f3:58:04:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=54c22c14070d83ce497a46cb363124f75ab4b35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:27:20:bc:78:d7:c0:96:fb:ec:1c:a2:93:
                    36:a7:3f:be:9a:58:be:d3:ab:d9:a8:10:a9:30:14:
                    13:bd:ad:22:fe:ae:fb:37:56:bb:d4:8b:c9:23:3f:
                    75:a3:7c:84:e9:6b:8f:38:4f:76:1e:f8:fc:80:a0:
                    c5:05:10:31:e3:21:77:87:c3:90:a1:67:17:8c:f5:
                    df:7c:45:b3:40:c4:61:0e:ed:79:a3:5b:c9:18:e1:
                    1b:78:09:9c:94:91:5d:1e:f2:3e:03:17:da:43:d5:
                    1b:da:74:76:8b:c8:42:51:e4:7e:5b:18:57:eb:a5:
                    71:38:78:79:f6:11:1d:19:32:d1:86:5d:eb:f3:7e:
                    9a:59:8f:f1:66:da:97:c5:17:ee:e4:30:ba:45:4d:
                    0d:0e:4d:1d:1c:b3:47:32:0d:20:ea:24:c3:83:5e:
                    bd:cb:16:bb:60:28:e4:59:2b:6b:e2:1f:a7:8f:2b:
                    6a:44:ec:b0:66:c9:37:bf:dc:f1:45:8a:82:59:2f:
                    16:b0:f1:39:e3:2a:35:0b:ef:5a:5d:50:4c:20:2a:
                    a8:47:6b:33:85:9b:94:ac:4a:e4:c9:d1:71:42:47:
                    15:5f:11:b5:bd:d6:7f:2e:fb:91:eb:38:8a:75:db:
                    5d:de:32:0d:a3:fc:57:65:59:64:ed:5d:86:b6:fd:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:2C:14:07:0D:83:CE:49:7A:46:CB:36:31:24:F7:5A:B4:B3:5F
            X509v3 Authority Key Identifier:
                keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:9f:76:be:99:2a:4c:9a:19:e9:51:22:04:8b:62:dd:f2:
         97:fe:c2:b7:6b:31:44:72:ae:d5:df:d0:11:35:08:ef:ea:e3:
         50:5d:c7:c5:01:b4:7b:b4:16:32:72:ee:4f:d6:0a:30:05:50:
         91:10:af:dc:1c:be:72:a3:33:d6:13:ec:32:43:8b:0a:cd:c0:
         1b:1a:ad:fa:7e:64:68:41:31:31:36:03:ce:8c:c6:ff:f0:98:
         11:12:97:4e:45:b5:1a:3e:ee:99:3c:cd:ee:b4:ba:7b:c7:c6:
         4a:df:0c:c7:19:9e:1e:2a:5a:9d:f8:25:ab:00:fb:60:96:94:
         d3:d2:ee:2e:77:8e:41:55:93:5d:b8:a3:22:3f:f9:0e:36:83:
         04:25:4b:d0:fa:83:d8:77:93:ca:65:df:ba:a0:f5:17:98:4e:
         99:34:88:72:43:1d:c9:f1:fc:5f:5c:87:41:ce:17:0a:02:47:
         e6:e7:73:dd:18:b0:d6:34:17:dc:1d:30:a5:74:38:ba:05:be:
         87:14:a6:64:47:c3:4b:bd:e1:1c:94:a7:ea:97:39:e7:8a:c7:
         99:f3:9b:a5:d2:7a:88:7a:2b:e5:3d:8a:e5:21:f6:ae:06:79:
         e3:b0:64:78:ba:84:c8:d1:4e:ea:85:37:0f:c2:0b:f0:fd:2b:
         8f:22:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----