Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File:                     QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier:          0CN9ZiLM/4wnJd+SbEODOTW966HD6k7h3ijBthhLVik=
Subject key identifier:   1C:80:F8:66:7A:59:BA:A3:FB:DB:33:0F:E7:4A:B4:AD:CC:01:F0:4B
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer:       /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial:       01962E2B17CE2E20E314C78E976083D93DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number:          04CE
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
                          2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: PAsnOOLW1NjMvfywVQjy49KtHz5AA1FVLwQ1jLhVqxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:ce:2e:20:e3:14:c7:8e:97:60:83:d9:3d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=1c80f8667a59baa3fbdb330fe74ab4adcc01f04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:9a:5c:e9:b4:5a:41:55:74:8a:16:26:b6:
                    f5:7d:6f:06:a5:f3:60:cc:3a:93:18:d8:21:2a:63:
                    1b:0c:5c:c6:b8:1c:cd:44:f7:f0:6b:19:e3:9c:ea:
                    e3:ce:21:de:0f:22:cc:a1:8b:43:3b:e5:93:91:ad:
                    98:9b:72:aa:06:49:61:da:08:cd:ce:ef:58:7b:66:
                    55:be:f5:a7:cf:15:6b:45:d2:9f:80:df:ed:9b:5b:
                    36:99:36:35:83:5b:a3:36:39:06:5b:ad:21:c2:b9:
                    32:08:2a:f0:48:4a:d5:ad:16:00:a9:cd:7d:06:92:
                    62:c2:31:03:bc:af:b3:5d:43:c1:57:f7:7d:52:2f:
                    76:f7:96:58:51:21:d2:18:db:c4:ee:77:30:0b:7c:
                    67:fd:30:23:0f:20:f0:12:4c:1f:9e:42:71:6b:34:
                    88:85:cc:18:38:6c:95:39:ab:c6:0a:f0:63:19:3d:
                    47:e9:5d:d3:13:0e:b3:73:07:9b:dc:d5:4a:5e:02:
                    8d:51:cf:b8:49:ab:f6:1b:ef:dd:b8:91:62:7b:de:
                    85:8a:b5:c3:92:81:e7:2a:99:be:9d:6d:ff:c4:bd:
                    37:86:a9:47:af:48:d2:8b:1c:a0:08:a6:be:27:22:
                    81:b8:d1:da:ce:d2:04:8d:7d:25:d6:12:99:8b:8a:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:F8:66:7A:59:BA:A3:FB:DB:33:0F:E7:4A:B4:AD:CC:01:F0:4B
            X509v3 Authority Key Identifier:
                keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:b3:ca:cc:3e:79:3f:37:5b:30:30:87:17:83:0d:29:f8:
         d1:e5:6f:74:b2:db:9e:7a:cd:f6:d3:b9:23:a0:53:23:e3:05:
         49:83:8f:72:21:75:ab:b1:22:67:f0:a1:d6:c0:f7:54:7e:74:
         e2:67:8e:82:71:6e:46:6b:d4:d0:6a:01:90:54:1e:d4:4a:9f:
         54:a6:2b:9b:88:a5:be:3d:86:c8:bd:fc:c0:25:0e:1e:f6:f8:
         7a:9c:35:a4:7d:96:c5:47:c9:0b:16:ff:29:e7:4f:58:f5:59:
         e9:d8:d6:dc:da:5b:9b:1a:6f:e2:f8:0c:ba:36:1a:71:76:9b:
         19:41:8e:e2:71:75:34:7a:c8:d1:eb:48:72:d3:5e:dc:70:d2:
         73:98:3b:97:09:93:5a:ec:b5:3b:55:db:91:3b:d0:46:64:39:
         4a:5e:08:b7:51:f9:53:29:7e:cb:fa:6b:00:65:32:7d:9b:8a:
         c0:5f:84:32:9c:a8:e6:1c:c5:c6:4c:71:93:96:ae:a9:9b:d1:
         2b:52:06:7c:8c:1f:5f:fa:84:69:2c:76:3a:e1:d5:32:17:e1:
         6c:cc:62:80:b8:29:8e:e0:33:15:49:c4:77:a3:36:0c:23:ec:
         ac:1d:d1:23:1e:56:8e:3d:d1:63:55:21:5c:58:ac:c0:1a:2c:
         d1:a9:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----