Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File:                     q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier:          oMkkDhmwZqC0KmyzV9q89hARVRChMwMAhp7Gix1mynU=
Subject key identifier:   51:6E:4B:09:1D:70:A5:CF:6B:48:52:A0:9E:76:79:79:C8:D9:A6:28
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer:       /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial:       01962E990E3B6E1C516B0641C0D378E29651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number:          113C
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
                          2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: t2bB9EA90/4nCofC3fQv3uPeD5y5z6W/eNxfApFhYvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0e:3b:6e:1c:51:6b:06:41:c0:d3:78:e2:96:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=516e4b091d70a5cf6b4852a09e767979c8d9a628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:d6:1b:77:6e:8d:a1:00:25:a0:96:cd:2c:
                    f8:98:0a:a1:d5:f3:2c:0e:df:a1:0a:87:1a:55:16:
                    8c:2d:9b:c4:4c:27:7b:14:cc:9f:40:c6:da:8c:9d:
                    54:63:81:56:f7:2f:5c:99:f3:de:68:0a:1c:7e:df:
                    7e:fc:e4:bc:31:01:dc:0a:90:34:7d:f7:a4:fa:69:
                    3b:ec:0c:e0:d1:e7:88:1d:fd:04:d7:5b:68:e3:be:
                    5b:c8:90:14:b8:a3:f0:81:80:e1:73:fc:f3:74:9c:
                    ed:d5:d6:86:76:5e:94:cb:af:8d:6b:17:01:12:9b:
                    f4:b7:33:ed:2d:25:e7:7e:73:f6:e5:77:34:82:e9:
                    e7:74:ec:3a:52:c7:53:1d:6c:94:10:02:2e:54:d1:
                    58:f4:6d:78:8d:5f:ed:f6:79:dc:be:77:da:b5:3a:
                    fb:a5:0c:07:09:7c:19:39:4b:5b:34:12:af:a9:11:
                    0e:84:bc:e0:67:0c:86:50:e7:69:c5:d5:6b:99:25:
                    24:11:41:36:61:02:48:94:f6:8b:d1:9f:3a:2f:1a:
                    48:1d:95:0e:dd:fc:0c:3e:2a:8f:97:bd:6c:53:31:
                    70:ed:ff:e5:01:ea:df:54:a5:2d:f3:17:a0:10:d6:
                    35:33:9f:d6:8c:8f:8a:6c:aa:b3:96:49:04:22:7c:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6E:4B:09:1D:70:A5:CF:6B:48:52:A0:9E:76:79:79:C8:D9:A6:28
            X509v3 Authority Key Identifier:
                keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:74:5c:30:d7:da:51:a3:7a:25:91:10:30:68:8e:c1:ef:a4:
         87:38:9b:cb:2a:9e:9d:57:7e:fc:7a:c2:15:aa:10:49:aa:a1:
         08:af:08:5b:46:77:dd:1c:a2:d6:71:2b:bb:4f:70:78:27:86:
         0c:77:69:11:9e:68:fa:c8:d6:be:d9:b4:eb:98:af:13:1b:5e:
         36:03:40:b2:5c:43:76:e4:7e:7a:4a:a0:0e:06:5a:e2:b3:f3:
         55:0b:a3:e3:07:0e:12:b9:69:d3:d1:dc:04:07:8f:1b:f0:a6:
         2f:f5:14:c8:4d:59:bf:e5:03:02:85:53:22:62:6d:29:27:7e:
         d7:7a:ee:1c:1e:5a:35:e8:c9:4c:9e:34:f6:3e:2a:ba:22:15:
         de:2e:bb:5b:88:5f:9e:85:dd:2f:49:34:0b:3b:97:a2:26:39:
         83:5a:d4:f8:4f:79:40:83:91:9e:19:0c:01:17:7f:f9:40:a9:
         c8:b4:50:cd:39:a0:7f:c0:50:22:7b:f2:1a:7b:da:ab:0f:d4:
         6a:7a:10:5d:46:53:98:46:5f:69:ff:4a:1a:1a:6b:fa:fd:20:
         eb:00:7c:1d:75:56:9d:0c:97:17:c9:f5:0f:17:46:4a:48:ae:
         fe:71:a0:37:51:1e:92:8b:80:af:2e:91:6b:a3:32:cb:24:1e:
         af:57:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----