Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File:                     qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier:          upjQS3uUbfQWzdrMWrlpKY5if8mHTGwcWBpjU5eCl/E=
Subject key identifier:   F9:CD:5D:06:9C:62:B7:B0:7B:A8:D1:4E:86:27:D0:D7:2A:3B:38:41
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer:       /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial:       01962E61ADEFBF9A90504E91DA8BD4A66A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number:          06C1
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
                          2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: R+T2iLxaatXTTBQCvivOuzk9A1Z1nAWV2MYwm6rDBow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ad:ef:bf:9a:90:50:4e:91:da:8b:d4:a6:6a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=f9cd5d069c62b7b07ba8d14e8627d0d72a3b3841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:f3:86:1a:41:bf:91:e9:ca:53:1d:df:b0:
                    50:9c:24:90:41:16:6b:a8:46:73:c3:cd:c8:b8:55:
                    28:c7:1b:84:14:5d:21:dd:11:34:cd:12:ec:a6:b9:
                    e7:2d:70:e1:2b:2e:a0:55:50:aa:87:fc:d1:01:7f:
                    5e:24:8b:b8:54:23:d3:19:10:90:45:f4:6e:4d:92:
                    98:43:5d:3e:ca:36:46:84:98:eb:a6:d8:49:1a:f5:
                    87:13:1d:26:6e:43:a1:4d:ba:fb:5a:5f:6e:27:b4:
                    e1:fa:d1:b8:42:7f:47:fa:85:36:7d:ac:c6:a1:5e:
                    f5:91:aa:95:77:71:d9:bd:55:40:50:c9:0b:e8:a3:
                    6a:49:b7:6e:bd:4a:64:e1:22:d8:b2:6d:69:5b:f8:
                    d7:85:1e:06:e4:6f:41:76:ef:92:09:9a:2c:70:72:
                    ec:22:89:57:2f:00:fc:50:6b:3e:78:11:3a:f6:a4:
                    df:69:19:14:63:67:aa:54:65:b0:09:6d:16:b5:45:
                    d2:b8:65:08:5d:10:4b:50:52:f2:3a:ba:66:a0:d5:
                    d2:7a:76:b7:ad:81:f3:bd:0f:1b:c9:a5:6d:2f:4d:
                    60:9b:3a:e5:27:38:70:09:8a:a4:ae:64:aa:ea:9f:
                    6a:84:cc:3e:1e:94:08:5f:3e:ac:ee:5c:55:72:84:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CD:5D:06:9C:62:B7:B0:7B:A8:D1:4E:86:27:D0:D7:2A:3B:38:41
            X509v3 Authority Key Identifier:
                keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:8b:38:d5:2e:a8:27:c3:e8:ed:c9:91:c9:69:11:d4:fc:
         dc:45:88:97:d0:49:8a:07:0c:c1:16:13:07:16:06:58:50:0c:
         9e:f5:3a:62:a8:4f:42:38:ba:10:e1:94:88:a9:5c:76:06:4c:
         0b:d7:ce:ca:6d:e5:80:d8:f7:a7:30:0a:59:99:aa:51:e7:8d:
         f3:cb:07:e8:4a:b9:2d:62:b1:44:78:ef:2d:9c:74:20:b7:cb:
         4a:1b:77:e9:5a:fa:2a:2b:b7:48:25:dc:28:06:04:dc:30:cb:
         7a:8d:27:fd:64:a9:9c:de:0a:c1:51:26:bb:8f:2c:70:1f:33:
         7c:e3:ad:fc:5a:2c:3d:15:85:07:5b:5a:30:12:11:93:94:72:
         07:c3:56:ce:a4:11:37:6f:93:7a:1e:10:05:69:dc:b2:27:fc:
         51:ba:aa:a1:d6:0f:de:27:6d:b0:44:63:4e:e0:a1:cb:db:5f:
         4b:ba:3e:de:0e:75:24:52:f3:c2:0a:e0:04:5a:e4:b6:36:7f:
         9c:c4:88:7b:65:1c:8d:f3:98:98:f4:2c:31:92:a8:e5:b0:69:
         eb:c6:27:ec:06:81:23:75:e1:eb:10:32:a2:81:cf:69:c2:a1:
         37:a6:7a:16:87:66:42:ee:54:2c:0a:ba:db:7e:8d:be:9c:9a:
         a1:00:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----