Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          ai1pqCwQQLB+bD501kfakT8B/8Zlf1gxu/0vUigHO+8=
Subject key identifier:   3F:EE:1E:93:4A:E8:E1:BC:F4:47:BB:1E:F5:BE:81:5F:8A:A2:7A:92
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       01962F3DA90EEB7F215FAE018510C86C8CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (hash: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=)
                          2: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (hash: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=)
                          3: d3wHhLF7_F2drrnAq4ufIbIjpfM.roa (hash: KBpvQcL8WXArnGC0TPR+vAIeruDFeNliNeiATzVd2jY=)
                          4: hAVC08FxpJFnXfaeJz29NCq7Sug.roa (hash: ApHYhoJ0ZC5NYrtBeVMJI/3kAo+MHYIlbbcC8nWTcEw=)
                          5: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: JNokkj1PLnLMdWR7hQ1NJbn11BrTX/H7eXHQbdd0MLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a9:0e:eb:7f:21:5f:ae:01:85:10:c8:6c:8c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=3fee1e934ae8e1bcf447bb1ef5be815f8aa27a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:e5:23:7c:10:cc:c6:29:98:17:57:9b:fa:
                    14:0d:bc:29:47:02:75:d8:7f:d0:6f:97:8b:ec:f6:
                    66:ed:7e:3b:f4:ef:2d:2a:5e:cb:0b:f2:e7:cd:3a:
                    e2:0f:fa:62:b7:67:c3:31:21:03:a6:c7:e4:23:ed:
                    68:50:7d:1b:fd:2e:31:a2:64:66:41:fa:df:3d:71:
                    a9:06:69:fd:56:91:b0:95:ae:8c:20:94:c5:8b:aa:
                    05:1d:5e:9d:bd:f1:38:51:e0:f8:7a:8c:ac:ac:b3:
                    75:c6:49:e9:1c:64:89:d6:d7:1f:f3:cd:58:e7:6b:
                    ba:3e:48:bd:be:b0:c9:de:a3:a3:a7:ff:a6:8c:df:
                    6a:f7:90:ed:f7:98:ae:97:e4:86:f8:6c:0a:b7:cb:
                    e0:cb:fc:99:e3:a8:da:f3:ac:a1:1d:84:69:41:00:
                    1b:b1:fa:c8:f4:fc:54:a7:33:5f:96:3b:d5:3f:4f:
                    a9:5e:5c:bb:d2:9e:7e:52:00:7d:e7:68:fd:47:fe:
                    3c:f4:2b:0d:0f:58:21:3d:f0:5e:5c:94:72:e4:17:
                    31:18:9e:00:9b:ca:73:64:dc:fd:e9:e4:2c:7c:63:
                    dc:5f:53:17:32:a0:72:e4:fa:d7:82:b5:2d:99:98:
                    36:d9:8c:23:a5:08:7a:5e:26:32:c9:f3:21:9a:b3:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EE:1E:93:4A:E8:E1:BC:F4:47:BB:1E:F5:BE:81:5F:8A:A2:7A:92
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:9f:42:97:4e:3d:0f:74:9e:fd:2d:cc:ea:31:8a:69:c4:
         5b:e3:d2:a6:f7:e1:d7:04:34:1a:77:9e:ea:f4:f4:e9:da:61:
         95:4f:32:11:af:99:ea:ad:db:e3:65:1e:8d:8a:78:5c:85:73:
         31:e9:8c:d5:91:c7:e8:f5:88:4d:4a:42:0c:e1:35:d7:08:9a:
         fa:a3:41:f0:28:fc:81:1d:73:29:6d:3d:8c:65:3a:11:40:58:
         f2:73:36:95:9d:1d:3a:4c:1f:17:c9:04:bb:2f:17:68:6a:0c:
         6b:38:59:07:a0:06:fa:c5:7a:8b:8d:21:c0:b4:d7:98:b9:d8:
         85:e2:36:e7:e8:e5:39:18:5b:fb:c8:1d:0d:2c:64:f7:a1:8f:
         20:98:97:f0:23:0a:17:b7:67:4c:ca:a5:ee:74:09:43:55:ed:
         3a:bc:d1:9c:80:8e:27:99:76:93:fb:08:b4:5e:d7:2b:e2:48:
         b4:09:cd:5f:2a:ed:87:53:9f:30:12:4d:e6:14:4b:f2:e3:17:
         30:29:a6:82:73:c8:42:60:cc:76:a9:39:05:4f:61:e0:a2:7c:
         8a:13:b9:63:4f:ab:ac:a3:c5:06:1c:53:cd:5c:e2:38:19:37:
         07:c8:f1:39:0b:07:8c:3b:85:f0:7a:49:0e:00:de:92:6b:fe:
         1c:95:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----