Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File:                     qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier:          7j3WuY8Hj1cFxntHpSbS4yM2O5dGpUg6amJzUotdFdo=
Subject key identifier:   4C:4D:DE:49:9B:2E:68:DC:EE:AA:A4:16:A6:9A:51:88:63:02:A3:8F
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       01962E987884D40B7688FB07C24A8D0429F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number:          0D0B
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
                          2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: goDlHQLdOh2otI86T0+kp9yWP9eTopPB4wbOnPcs3dc=)
                          3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:78:84:d4:0b:76:88:fb:07:c2:4a:8d:04:29:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=4c4dde499b2e68dceeaaa416a69a51886302a38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:4e:6c:c1:ed:c3:5d:c8:82:15:63:40:3e:
                    dc:7a:e1:8d:41:3f:af:19:83:05:08:68:37:b7:34:
                    f7:b8:fb:cc:8d:c6:14:fe:0b:93:ea:e2:f1:e4:f3:
                    95:2e:47:a6:f3:bf:89:c2:67:c5:68:1d:73:bb:7c:
                    5b:fa:1d:0d:d5:c1:1b:fe:17:9f:e0:81:b6:d7:01:
                    a1:18:94:9b:f5:7d:6b:b9:c8:7b:13:2e:93:15:10:
                    9e:56:f7:a3:98:cb:49:7f:dc:6d:64:86:d0:1c:30:
                    39:71:84:94:4a:94:7c:69:8f:d1:0a:c6:69:dc:a4:
                    8a:56:a8:01:37:2e:35:14:0d:b9:eb:d6:c4:20:a0:
                    7a:1c:42:8e:64:9c:0a:0f:43:a4:5d:65:8c:5e:48:
                    f0:9a:b1:7b:6f:2a:38:39:4c:9c:ac:e7:df:74:10:
                    4e:4e:a3:84:38:b4:9f:01:ba:15:c7:74:9f:e5:48:
                    8e:73:db:af:b8:ab:5c:be:cc:f9:65:9b:a4:19:b6:
                    b5:9c:5c:66:60:9f:83:76:2d:97:2d:e9:09:b6:17:
                    cc:83:a6:0b:6c:09:14:a2:e3:26:89:c0:e6:14:5d:
                    0b:40:47:cb:f4:0d:11:eb:a4:69:8d:9e:5f:61:22:
                    09:95:0b:31:e5:02:2a:cc:17:05:8b:f7:b1:d0:1b:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4D:DE:49:9B:2E:68:DC:EE:AA:A4:16:A6:9A:51:88:63:02:A3:8F
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ee:67:56:71:3f:97:57:b9:f8:f1:a3:9a:78:ab:9a:09:20:
         04:05:a3:31:7a:21:b6:92:4f:2d:35:0f:50:46:d3:c9:87:84:
         52:12:d5:ff:35:13:dd:bd:f9:0e:29:75:15:e8:86:d1:2c:b0:
         24:64:ac:a7:3e:fb:44:56:6e:b3:a8:2c:e5:58:8e:d9:e8:5f:
         c7:cf:35:42:2c:2e:6c:5b:56:5b:e7:e6:77:7c:39:29:e6:12:
         8d:fc:9f:77:57:13:cb:02:6e:97:b5:c6:f5:8e:e1:04:1f:b9:
         f3:2f:6a:81:c6:6f:73:d9:86:69:f1:0c:db:48:07:ec:ee:d2:
         37:55:9f:d4:d5:fd:b9:d1:07:47:39:7e:92:57:0a:f2:d8:1f:
         50:30:9c:de:bc:1a:7b:08:f7:d6:e2:be:6c:01:9f:f0:5f:41:
         07:ab:66:78:a6:e1:25:d4:7f:02:5f:a2:4d:ca:e6:d6:84:67:
         be:b0:12:45:bd:ff:72:9e:f5:64:e9:67:a8:67:43:61:de:65:
         aa:01:85:d2:18:be:ea:f7:00:c6:dd:04:f4:3b:3a:2c:bf:27:
         df:a2:6d:d5:28:09:e0:cd:4f:8a:4d:c8:fc:27:98:c5:07:e2:
         91:dd:9a:16:74:36:0a:2c:14:e5:11:77:a6:29:85:ee:17:82:
         f2:28:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----