Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File:                     1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier:          D+NSdpYon5eejMzqWRhoHHyluLFUz+HjdASiZcws3Yk=
Subject key identifier:   A3:AF:40:E3:2B:80:27:3D:E5:65:3A:8C:0D:EF:BF:01:5D:A8:A6:E7
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer:       /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial:       01962E98E59F651A0388AF4DBE2C0962F8FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: NNGispOjqPi276zu2pBr8eZuv+kzXZe5cgnwb1pjn+c=)
                          2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e5:9f:65:1a:03:88:af:4d:be:2c:09:62:f8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=a3af40e32b80273de5653a8c0defbf015da8a6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:10:f0:e8:8c:22:10:8f:85:e8:5f:74:58:
                    78:ec:0e:e5:9f:ce:30:b0:6f:4a:c1:1f:d4:d0:c0:
                    a8:b2:23:21:f8:c2:d4:4e:78:76:c3:68:41:85:a1:
                    45:5e:6e:38:e3:0a:dd:63:81:5c:82:d9:1b:55:64:
                    49:70:a8:68:81:22:2a:e5:92:41:e7:c0:73:74:89:
                    ab:8a:08:1e:98:de:dd:3d:ea:da:71:d5:39:19:f9:
                    42:d1:3f:dd:2d:45:fa:8e:c3:01:9e:d5:ce:fa:62:
                    d2:5b:1b:7b:ac:c7:67:19:5f:16:5d:e0:58:8b:6a:
                    92:6e:11:18:35:b7:49:ec:8c:40:f8:3a:13:23:af:
                    f1:93:18:22:95:9c:f2:f0:69:c8:23:db:4d:3e:ce:
                    b6:b1:41:0f:dd:fa:b0:e0:d6:95:34:77:03:06:08:
                    e2:f8:93:1e:93:d6:b9:bd:73:de:89:60:ae:c5:67:
                    b8:d2:b8:38:fc:63:f9:6b:03:41:5b:1b:70:cc:ed:
                    16:9c:43:55:c3:07:64:14:66:97:e0:31:4f:79:eb:
                    15:b9:3b:b7:e1:49:e8:ab:a2:fb:de:1a:04:6b:ac:
                    a5:36:07:06:2d:84:c6:16:79:41:85:63:4c:03:3e:
                    d2:4f:58:ff:a1:3e:36:8d:76:5e:86:2f:c7:ca:58:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:40:E3:2B:80:27:3D:E5:65:3A:8C:0D:EF:BF:01:5D:A8:A6:E7
            X509v3 Authority Key Identifier:
                keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:1f:a6:4d:66:74:35:6e:a2:8a:d0:b7:ee:c1:8e:05:c4:
         4b:89:ba:db:a6:d0:1f:d0:bb:fa:4c:fc:0d:16:56:38:ef:dc:
         4a:34:37:fa:17:28:46:b8:40:c4:0a:48:06:3b:82:5c:fe:1b:
         8b:4b:35:23:49:87:f8:7f:f1:d1:be:cf:0c:8e:81:9a:b7:74:
         27:bb:9a:8c:59:d9:73:df:2d:c0:b9:27:32:4f:ab:3d:2f:a5:
         a0:51:82:2e:05:bd:ed:2c:8c:39:c7:5e:55:a6:cd:b8:66:d3:
         a5:db:f5:1d:e3:49:1a:09:27:e3:34:d3:36:a5:71:8f:f3:7f:
         5f:c7:bd:56:70:ed:af:45:bb:43:de:ce:43:ed:8b:2b:50:d3:
         d0:9c:8a:e0:38:f7:54:c9:32:69:04:2c:28:6e:a0:0f:f3:51:
         0f:7f:98:18:16:12:24:00:0f:54:c3:80:a3:8b:e5:6e:b8:b8:
         90:6b:19:f1:21:cc:0f:f8:bd:f3:b8:b9:a4:df:30:7f:d6:b5:
         7a:24:01:88:3f:96:87:d4:17:24:2e:ff:98:9a:e8:ce:83:08:
         78:e7:ac:b4:5b:d5:70:e3:ed:f3:f9:37:25:fa:36:2b:22:cc:
         fc:aa:df:e8:07:56:e2:18:c2:43:d9:99:6a:58:13:3d:44:3b:
         e5:5b:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----