Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File:                     QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier:          ysPm9jelDG0NsBol/RuSSr86rUds7O9cJW4ublpO+KA=
Subject key identifier:   5B:35:F0:6C:C5:E9:FC:EE:1B:56:D9:06:14:C2:51:2D:1A:06:90:DC
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer:       /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial:       01962FAB1E934B50CE2591296653E6D96A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
                          2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
                          3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: JJ2d3jq+P7p1W3oZosceSRpjgyTVX+Wdl1wyyuOh4Ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1e:93:4b:50:ce:25:91:29:66:53:e6:d9:6a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=5b35f06cc5e9fcee1b56d90614c2512d1a0690dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:69:60:62:ae:9a:fb:76:db:59:c7:35:81:
                    83:96:0b:b7:5a:3d:ec:fb:58:00:86:ce:ff:bf:7f:
                    0e:2a:a6:10:f5:fb:84:0c:21:ca:64:25:d2:0c:1a:
                    a3:18:0d:1e:1a:94:f1:9c:c5:b6:63:c2:32:66:19:
                    a9:cc:c9:18:d3:33:75:f7:82:0f:60:73:b6:e0:7e:
                    19:a3:a6:7a:a6:78:7f:d8:04:f0:f9:28:3e:b9:c4:
                    79:f7:c5:3b:46:cc:ee:71:b1:4b:e3:4e:b4:b5:87:
                    0e:cf:73:b0:83:d1:9c:4e:c7:be:45:8d:39:80:e9:
                    48:ce:0b:ce:12:fb:20:85:20:a8:9f:ee:e5:c7:32:
                    9f:1a:3a:bf:8f:b9:54:cf:d6:7c:85:14:85:1c:31:
                    93:40:49:cd:b1:2b:7b:61:aa:0c:c6:34:f5:44:21:
                    6a:77:b7:fc:5f:f0:ad:17:c0:77:47:5e:0f:96:9c:
                    d8:b6:0c:47:e3:38:d9:a4:62:69:0e:ee:56:72:5a:
                    6e:a7:4d:de:29:13:ca:22:8c:3c:bb:f1:08:b4:3e:
                    c7:5a:00:7f:3a:0e:42:a0:52:8e:de:50:b6:6a:6d:
                    3e:eb:7b:4c:70:3b:10:6c:82:82:9c:f6:47:2d:4c:
                    e5:bb:b9:b1:fc:48:bb:8b:8b:f6:43:58:c9:36:6c:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:F0:6C:C5:E9:FC:EE:1B:56:D9:06:14:C2:51:2D:1A:06:90:DC
            X509v3 Authority Key Identifier:
                keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:cf:a3:97:ee:1a:54:26:41:49:25:e3:fc:a1:54:f9:c6:
         6f:7f:91:3c:c8:64:79:f9:39:70:cc:17:9f:fa:76:4e:dc:69:
         00:64:00:ce:85:e4:ec:e5:4f:ad:9b:b3:ac:5a:88:15:a4:6c:
         b0:58:19:ee:cd:15:05:42:6b:43:cb:8c:d4:c5:33:e6:a5:bf:
         de:84:e3:6e:8e:8a:5b:47:15:13:be:e6:65:c3:98:c1:cd:32:
         84:e0:95:56:bd:08:46:52:a0:de:72:11:c2:c7:84:4a:da:cd:
         de:a8:5a:be:46:6f:c5:57:56:11:96:3d:ec:1f:d3:0b:d3:eb:
         a8:3b:fa:39:b1:9c:a4:b7:32:dc:3b:93:b8:9b:37:cd:4e:ef:
         d1:0b:ee:e9:b5:e5:6b:7a:8f:43:3d:4e:fb:ee:09:2a:ef:ac:
         98:b0:b6:69:f1:ce:28:48:75:db:57:86:24:62:b7:72:8b:5f:
         dd:62:a7:96:97:e6:d5:68:2d:bd:f6:72:04:63:23:52:86:1c:
         ef:25:8e:be:2a:4f:3d:bf:da:57:ff:11:13:53:9d:48:86:e7:
         2a:62:95:9b:a6:6f:87:6b:2b:fd:fb:b3:17:5e:98:06:e5:da:
         89:39:33:83:f3:6f:3a:4c:05:dc:1e:f4:af:f6:dd:59:02:c4:
         d2:f9:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----