Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File:                     qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier:          7dNv0sZ/u1yGNDDpBA4/Ewn4gi9ujjUwcjaKBDqLwnk=
Subject key identifier:   2C:0A:BF:34:6A:BF:A0:54:1B:59:8B:B7:40:0A:74:CE:65:60:CC:3D
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer:       /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial:       01962F3DA770F017C3F2203209986B131EAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number:          0576
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
                          2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: GdpIYEjczMFPThXw7FHqeffOkRs3bKz9MVG1OkQO4Nk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a7:70:f0:17:c3:f2:20:32:09:98:6b:13:1e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=2c0abf346abfa0541b598bb7400a74ce6560cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:a1:53:b1:3d:98:2b:fe:66:4b:c3:ca:44:
                    cd:75:c0:31:28:4a:4c:5b:99:e7:9b:f2:84:a3:16:
                    e3:eb:c6:62:bd:07:2f:63:08:7a:c2:0a:84:8b:c3:
                    c2:85:56:4d:d9:c8:d5:02:61:b0:0f:a7:f1:c0:c5:
                    e7:d7:9c:4f:10:8d:f2:68:02:dd:65:08:bb:b8:47:
                    39:2c:69:b1:91:da:c0:9d:42:aa:74:bb:db:71:4d:
                    05:75:b2:90:3b:e9:fe:c2:c8:97:40:d8:26:df:00:
                    fb:01:36:e0:ca:63:f9:70:db:2a:70:25:3e:a1:8d:
                    dc:1b:3c:32:47:8a:0d:ef:9d:3a:b7:60:2c:2b:56:
                    bf:8d:31:26:33:99:89:6c:e6:cd:9f:ea:2a:b2:8e:
                    02:db:10:f5:f7:86:8d:2f:ff:8f:99:6e:68:17:0d:
                    08:5d:91:74:6d:ae:7b:55:a7:b7:81:10:a4:63:30:
                    55:bd:a8:91:0e:d2:b8:b3:54:b7:8b:18:03:23:28:
                    b8:4a:71:01:66:00:18:92:cc:b6:1a:cd:5e:f5:fd:
                    99:90:5d:4c:16:ef:02:5c:0a:59:1a:a3:1d:e8:41:
                    0c:fe:9e:3c:43:a5:d2:1b:86:cc:50:0f:82:bb:0d:
                    26:3e:ed:27:8e:22:9a:a2:ff:8a:d5:c1:8c:ed:f3:
                    4c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0A:BF:34:6A:BF:A0:54:1B:59:8B:B7:40:0A:74:CE:65:60:CC:3D
            X509v3 Authority Key Identifier:
                keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:a7:f8:d1:32:a6:b5:d9:74:c7:a8:26:75:e3:ed:a4:47:
         61:81:8e:ae:d4:b9:47:e5:cf:5b:a9:06:1a:2c:6c:9b:41:24:
         24:4f:13:93:f1:1f:e4:c9:a1:3c:2a:b7:b8:5d:d8:ee:ab:fe:
         c0:f4:47:8c:50:15:cd:99:48:be:ad:ef:28:8b:04:4f:ff:f6:
         aa:1f:0c:08:ef:ea:a8:0d:f4:11:9d:8a:12:88:68:f4:a9:6c:
         c7:99:34:37:c0:0a:9a:9a:e1:90:c6:8f:51:8a:22:4f:33:76:
         7c:06:75:52:9c:07:5f:64:2f:0d:8a:b7:a6:c7:55:de:ad:01:
         f6:5e:95:a1:cb:97:cb:0a:43:25:01:eb:83:11:38:cb:7d:ab:
         be:06:d1:bc:73:eb:7a:16:56:25:0a:f5:f3:5b:d5:69:f5:2f:
         49:8b:64:60:14:df:2c:26:55:e9:c7:13:df:63:94:77:05:2d:
         e5:da:19:7b:7c:34:03:ff:7a:e9:4a:ee:c3:d9:7f:e0:64:97:
         9e:a9:98:02:6b:1b:80:97:7a:79:81:e8:ee:70:a6:b2:1c:7a:
         18:91:97:d7:35:5f:17:76:e3:ad:0c:d1:bc:e9:14:79:38:c6:
         bf:82:c3:39:2b:f2:ee:6b:82:ec:e2:fa:ee:39:8f:57:4c:ca:
         4d:ef:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----