Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File:                     QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier:          d0V1W4p5jH9N22uXME6f/mMjkoa7+v5LrNOujLQTZsw=
Subject key identifier:   74:F8:ED:03:C5:C1:D5:30:AC:51:90:E2:05:AA:C2:AC:95:9A:BF:D3
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer:       /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial:       01962FAB4A1163CE228C75A3CEF50E023772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: a9xfZG+OsK2shdV0Ub7iS4dhBh89GwDOvqWu+ClqX4E=)
                          2: ULw_e6rY6wER2z1dGFmp31jEgd0.roa (hash: MY5YBBTJCozx9Da4ab7Dr9d2mlZWfjLXtBL3DR2CzxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:11:63:ce:22:8c:75:a3:ce:f5:0e:02:37:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=74f8ed03c5c1d530ac5190e205aac2ac959abfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:6d:57:c6:d3:18:39:e1:4a:ec:10:da:3d:
                    4e:cb:0a:a8:ff:33:9a:0b:ce:0b:b5:65:b2:04:b7:
                    71:7f:f2:b8:ff:e5:f6:1a:8d:c3:2a:c9:44:d6:af:
                    ea:f7:0f:e7:a2:15:03:3e:0f:c7:d5:5e:e2:9c:85:
                    bd:4f:69:07:5f:2e:34:aa:ec:db:40:96:f0:94:42:
                    76:57:f6:ce:2f:77:46:5a:97:5d:03:33:75:3f:f8:
                    c2:12:37:69:14:4e:23:d1:75:b8:6f:f0:f5:e5:b3:
                    84:03:88:1e:ab:92:c2:af:fc:3f:da:55:54:97:20:
                    d9:6b:a9:47:4b:2e:22:07:f6:8a:23:92:5b:f6:0d:
                    d1:d2:c2:95:84:56:e2:9e:9a:f7:c6:5d:db:03:b0:
                    b2:ea:00:65:89:0d:42:b5:01:39:8f:cb:23:0d:c5:
                    f6:2d:cd:d1:9c:51:7a:68:be:93:2f:e0:b7:38:f3:
                    b0:b6:57:ba:93:e4:6d:f1:46:1f:46:69:b9:89:0c:
                    24:de:4d:1d:98:0f:12:cb:aa:ac:2a:40:8c:fe:d4:
                    ba:8a:45:40:aa:31:e3:3f:86:d7:66:bf:06:69:4f:
                    b5:06:a4:f3:57:b5:f0:6d:4d:a3:42:44:0a:ae:dd:
                    18:ed:aa:3c:25:93:62:15:ec:34:e5:8b:e9:bb:0f:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F8:ED:03:C5:C1:D5:30:AC:51:90:E2:05:AA:C2:AC:95:9A:BF:D3
            X509v3 Authority Key Identifier:
                keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:34:4a:3f:c3:f4:92:cf:01:f4:9f:69:18:89:68:d3:e3:64:
         f4:97:d2:80:38:19:51:8a:9d:8f:0b:56:f5:1f:84:c1:49:0c:
         c6:fd:f2:cb:f9:c7:59:19:f3:bf:78:d7:e0:45:c2:33:07:cc:
         7b:f1:1b:ad:a5:97:06:2c:4c:8e:f9:85:be:37:1c:97:80:2c:
         db:5e:8b:91:4f:70:15:03:35:42:3d:ee:d3:44:1c:85:e6:52:
         37:63:85:ca:aa:eb:dc:32:e0:a9:3c:93:ad:80:5e:5a:81:a5:
         c9:f4:ed:ff:fe:8a:90:45:d4:a0:c8:de:3c:45:b1:5b:85:93:
         09:27:1a:ef:e3:9c:f7:72:e1:69:90:6f:e9:f1:4f:aa:c2:e7:
         6c:37:47:6d:91:4f:6a:fe:91:da:a6:65:1d:1c:df:a6:a4:1e:
         9a:f8:c6:6e:2b:e3:0e:71:48:1b:c3:9e:dd:36:4d:c4:26:30:
         1b:21:95:7c:78:33:80:f6:16:fc:d8:b8:5e:9d:36:fe:84:84:
         fa:ec:59:2c:d5:a3:9f:59:2e:bd:e0:d8:d6:cd:d6:36:f7:0a:
         93:6a:a2:ad:9f:ea:06:73:4f:b3:41:34:6d:87:7d:e9:be:ed:
         20:f6:dc:c7:9e:eb:19:39:21:c0:e4:0f:bb:3d:a7:bb:c0:91:
         f6:67:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----