Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
File:                     QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json)
Hash identifier:          L/SeBr5nBbognnn2PL82PA1alHnogzjtoqoV8WE9E30=
Subject key identifier:   34:68:72:C7:80:31:B4:FB:29:78:6F:E4:B4:FC:97:F3:52:B6:E2:39
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Certificate issuer:       /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial:       01962F07429243A74A7E51E39147F2861CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
Manifest number:          03B9
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=)
                          2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=)
                          3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: HBgKfbgvy2ko+tu1mThc1f7UKS9Effl5DUybdZX7nd8=)
                          4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=)
                          5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:42:92:43:a7:4a:7e:51:e3:91:47:f2:86:1c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=346872c78031b4fb29786fe4b4fc97f352b6e239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:b8:90:ee:3f:80:02:85:51:80:9b:9c:00:
                    43:c6:37:7f:13:ba:bd:85:14:fe:f2:76:3a:7c:0e:
                    68:2f:3d:f2:91:25:c4:ff:dc:6e:7e:68:9d:0a:f4:
                    2c:c2:7a:6a:e4:3c:92:fb:e0:da:70:fa:6f:1e:7a:
                    24:14:24:c0:06:34:1c:cb:99:82:7b:19:0f:df:a8:
                    12:2f:df:f8:02:ae:91:e3:37:8d:33:3e:b7:cd:b9:
                    5b:cb:fb:66:3e:c0:b1:13:b3:9e:00:6e:d1:7a:e5:
                    c8:5e:87:e8:64:a7:51:d8:e1:d1:79:9b:81:af:72:
                    93:54:48:74:11:fa:6d:ca:e1:63:20:5b:4f:83:d5:
                    7b:14:d2:6b:ef:36:8b:ac:c0:18:f6:6c:4a:49:68:
                    89:53:ef:5a:d7:09:e8:36:28:0c:9b:23:bc:09:d7:
                    4c:5c:84:82:f4:d9:94:2e:37:c0:32:3e:cf:d8:00:
                    ba:79:29:ac:9c:73:d8:9e:92:b1:d3:2b:b8:44:9d:
                    84:62:18:39:be:f8:c8:2f:ad:3e:93:3b:af:26:e0:
                    e5:33:ce:95:c8:46:45:1c:79:03:76:1c:a0:cc:f1:
                    75:c0:44:6a:29:6c:3a:c6:44:a9:0d:5a:1a:e0:ae:
                    7e:44:c6:82:74:62:d3:64:f0:9c:d5:d5:d5:d7:cc:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:72:C7:80:31:B4:FB:29:78:6F:E4:B4:FC:97:F3:52:B6:E2:39
            X509v3 Authority Key Identifier:
                keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9c:8d:9f:93:43:27:c6:ea:90:46:2b:4c:38:5c:4b:f4:ae:
         8a:a3:61:14:87:c2:12:80:a9:79:6f:ef:c6:ed:79:8c:67:e1:
         c2:e6:7e:70:61:4f:79:11:29:de:b6:58:d8:b4:c7:54:34:0c:
         32:e1:af:b7:ee:5a:e7:67:93:57:11:c9:8d:d6:44:54:e7:9c:
         4a:57:0d:d3:5a:12:86:65:74:ce:ad:a0:b0:5a:14:d0:0b:ce:
         6a:03:2d:54:73:c2:b1:f6:ea:52:6d:e8:75:87:61:8f:9d:f0:
         81:0b:a1:f7:79:5e:fb:07:4e:b9:98:3e:2a:44:6a:0a:aa:1e:
         84:10:2f:56:db:c1:ea:4a:3d:4c:af:7c:80:2e:1a:38:a2:53:
         e8:e9:c9:07:34:44:c5:90:0f:f9:a4:18:bc:7d:22:17:d4:a6:
         50:e8:43:bb:be:64:27:82:9f:e4:af:23:ff:68:17:5d:09:b9:
         08:fc:99:6c:fb:4c:4e:88:fe:8e:26:23:1b:9d:10:89:73:99:
         69:9f:3d:e8:48:47:2a:08:76:c0:c2:70:40:73:10:6c:d0:1e:
         e5:33:24:90:1a:43:ee:e1:56:5c:ba:72:32:4d:e7:25:2c:01:
         90:86:d0:34:c9:34:da:fb:ca:bd:2b:6e:73:e7:b0:17:d8:24:
         85:9b:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----