Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File:                     QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier:          ThKAcAovYvk2psgTlp/cs1Jn5nRpaJO0XFHt6fNNrL4=
Subject key identifier:   74:09:5A:5D:E0:A9:F8:65:46:45:65:AA:0C:46:D8:5D:F8:55:C6:C7
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer:       /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial:       01962E2B2BA25B495C7A940D4B62AC81036F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number:          1226
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
                          2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: smMAX5x58TCVlJZNXqR8WeM+K7b5apPG5OaptfwpJV8=)
                          3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:a2:5b:49:5c:7a:94:0d:4b:62:ac:81:03:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=74095a5de0a9f865464565aa0c46d85df855c6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:6f:d1:d3:43:ff:83:51:2e:9e:e9:f7:a5:
                    9d:d4:df:f9:9f:0a:d0:b6:9c:eb:d1:67:b6:98:74:
                    54:ee:c0:0c:35:7a:ad:7d:34:56:5b:35:ff:35:82:
                    5d:93:51:d2:99:91:8b:5f:7d:3f:48:39:19:af:12:
                    24:9f:30:48:b7:15:94:f1:1c:a2:ad:7c:21:7e:06:
                    b3:7d:fe:78:58:a7:7c:c8:78:f6:58:a3:6d:d3:1b:
                    c6:5a:f6:8a:81:7e:fc:6d:43:72:5d:74:67:34:4f:
                    68:42:82:90:a5:d1:ba:65:25:29:30:06:37:33:35:
                    b9:80:ed:a1:6f:13:43:59:f0:5f:c6:0b:a7:a5:75:
                    07:19:fa:e2:27:5f:b5:a1:2d:70:d6:4a:bf:97:f3:
                    6b:92:48:89:9b:1b:4c:92:2a:68:79:19:16:5d:43:
                    1c:de:e0:07:8b:d6:b2:09:ac:62:42:be:b4:e6:4c:
                    c1:9e:57:cc:66:df:40:57:f8:1e:be:59:dc:c6:c1:
                    8b:3c:48:5c:90:5d:7b:c0:fc:ff:3d:d1:03:25:62:
                    37:cc:29:e9:7c:04:38:05:8e:ea:30:97:7d:10:e3:
                    98:33:d8:e4:7a:6c:f8:4c:78:20:b4:0d:4c:f9:4f:
                    21:c6:60:dd:5a:7c:22:7c:58:c4:d4:65:e2:c2:5c:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:09:5A:5D:E0:A9:F8:65:46:45:65:AA:0C:46:D8:5D:F8:55:C6:C7
            X509v3 Authority Key Identifier:
                keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:71:3d:54:ec:6e:44:46:81:50:ca:0e:a8:c0:49:1f:6d:2e:
         12:c5:d1:79:79:22:b3:4e:85:74:97:78:0d:bf:e6:ca:21:21:
         b8:da:83:d3:5c:91:e7:8f:7b:f3:6a:5b:fb:62:e8:3f:93:95:
         73:79:09:1e:b5:94:81:c4:10:54:f0:19:81:a7:49:d4:d3:1e:
         83:56:34:2e:69:9f:61:80:51:53:f2:a5:3e:ff:d3:10:05:34:
         ff:f0:82:21:54:67:9d:fd:e0:d0:50:23:79:1a:75:27:6b:14:
         aa:0f:80:72:5a:e4:61:d8:10:f7:79:9c:7e:8a:0e:be:bc:d6:
         97:1e:a5:e5:0d:30:e9:90:f0:05:a7:e9:54:dc:de:61:f8:f7:
         80:57:5c:8e:b5:c5:a0:b9:d7:a3:45:36:6a:45:25:8a:5e:fc:
         43:2c:4e:38:31:11:82:6a:d3:a0:ae:0c:e1:d0:a5:56:44:f6:
         1e:78:e2:b8:da:31:a8:7d:3d:ef:f6:77:88:1d:de:0e:22:46:
         fd:11:2d:61:b2:67:db:d9:21:34:f2:5a:a9:f8:4d:af:16:3b:
         4c:f2:57:df:94:8e:ce:98:35:ad:89:61:71:d3:9e:20:54:67:
         da:6d:0d:77:ea:d3:f5:38:16:22:82:a5:52:2a:83:e5:6c:ed:
         a6:83:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----