Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
File:                     bQih9MOF86e2KYTVPoFmWplUEPM.mft (raw, json)
Hash identifier:          3vbk7N0AxPi6MBcjoaofNEpmx+GQUVUQvPZ8JUORJyk=
Subject key identifier:   90:01:E7:41:E1:DA:8F:C7:40:8A:96:40:FB:8D:8A:8A:3C:1E:49:22
Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
Certificate issuer:       /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Certificate serial:       01962E2B3E5DA71608FD470B5D0F1A62CA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
Manifest number:          08E9
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: J7EMvjCrDCSEaNvEXQjzbwryII4.roa (hash: Ak6AJOV8w0m5lQCAa41zEyYCpJIBSURSyT+w9pihP/8=)
                          2: bQih9MOF86e2KYTVPoFmWplUEPM.crl (hash: sUTsPYLERcN4jGluGNoUfX1lpbLHLpT/Y8+c+ZowraM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3e:5d:a7:16:08:fd:47:0b:5d:0f:1a:62:ca:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=9001e741e1da8fc7408a9640fb8d8a8a3c1e4922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:b4:d9:18:36:d0:93:ba:9b:e4:ae:23:2d:
                    e7:c2:92:78:2a:11:92:89:71:27:5a:20:2f:ab:3a:
                    8a:83:b4:7a:57:14:34:ed:42:ba:90:5a:b8:c9:7b:
                    89:6a:16:66:53:af:c9:32:30:11:df:a2:1d:50:6c:
                    a0:1d:ea:dd:d6:36:bf:d0:c4:f8:ee:99:74:c2:be:
                    5f:ab:26:1f:99:97:3d:2e:62:f5:8a:a5:1c:58:94:
                    80:5f:09:a4:09:b0:db:c9:ad:ed:fb:12:c2:a5:a8:
                    bf:82:77:20:f2:3e:77:2c:42:15:06:70:8d:ac:99:
                    b8:4b:21:38:fd:e2:03:14:1a:e7:b1:bc:4b:e6:88:
                    34:51:51:8e:d2:1f:c8:e7:92:4e:52:ee:fc:aa:00:
                    ee:4f:a6:83:98:fd:2f:87:5f:4b:04:99:4e:2f:fb:
                    ec:4f:89:32:50:df:39:a3:b5:f4:12:bc:1b:02:c7:
                    12:ec:c4:d5:fe:31:dc:4f:63:d5:07:df:94:1d:5d:
                    c8:a7:65:b3:6f:42:ab:47:93:09:cf:02:b6:42:52:
                    e1:13:6c:dd:13:18:75:f7:5d:f1:28:b9:f2:3b:53:
                    59:af:19:8f:be:51:9e:d6:03:ae:e9:f6:e2:fa:38:
                    e6:c0:e4:37:1b:fb:b5:0c:c6:31:71:d1:eb:38:71:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:E7:41:E1:DA:8F:C7:40:8A:96:40:FB:8D:8A:8A:3C:1E:49:22
            X509v3 Authority Key Identifier:
                keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4e:1a:3b:ba:74:18:db:6a:22:7a:00:96:c6:fe:b0:bd:32:
         9e:7b:c6:38:88:70:b2:e3:90:00:b3:60:26:5d:b1:5e:87:95:
         38:61:1a:32:09:85:d6:10:57:5b:c3:35:d0:d9:13:26:a1:cc:
         b6:eb:28:ea:b7:4e:bd:f3:55:f1:fe:b8:fb:35:fd:25:6d:f8:
         76:58:fe:bb:07:fc:4a:85:ba:1d:b8:ae:e5:8a:35:13:10:27:
         08:da:01:61:86:d2:41:e3:40:18:23:66:a7:52:7d:cb:da:42:
         db:94:85:49:31:b3:77:48:f7:56:8f:94:be:24:fc:af:bc:fe:
         6f:a6:bb:28:89:53:28:78:ef:51:57:3c:f2:d9:61:2b:7f:e3:
         b7:9a:3a:c4:6e:a2:80:2a:fc:35:3d:c7:bb:01:52:2c:d0:4a:
         3a:1e:af:7b:5e:26:14:05:1e:cf:32:e0:1a:90:97:6b:6b:75:
         58:55:d7:0a:8f:d5:33:97:3c:11:d5:c3:a4:9e:04:a0:b8:a0:
         8a:7f:be:73:36:3d:ae:18:ca:88:4e:23:7f:ad:e9:d9:df:ca:
         b7:71:d3:8a:85:43:fc:eb:e9:23:0b:4e:7f:8c:e7:e5:04:13:
         8f:2d:16:f6:98:60:8b:b3:dc:26:ac:f3:14:34:1d:e2:5a:07:
         7c:f9:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----