Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
File:                     Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json)
Hash identifier:          YDmdp0H9g+QNzj8yIpP72cenzNgJj1Kni0TrgZohqtw=
Subject key identifier:   D1:98:FB:8C:16:49:02:E7:30:E6:A1:48:13:50:2A:A7:55:8B:E7:E2
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Certificate issuer:       /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial:       01962F06689896B4991B39B8F52D9E2B274E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=)
                          2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=)
                          3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=)
                          4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=)
                          5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=)
                          6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=)
                          7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: a9myFe2RCZHSr2+4pKZwp9OgXwLnjwFSYTz/UC6YbgI=)
                          8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=)
                          9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=)
                          10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=)
                          11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=)
                          12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=)
                          13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:98:96:b4:99:1b:39:b8:f5:2d:9e:2b:27:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=d198fb8c164902e730e6a14813502aa7558be7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:9e:51:7d:ee:00:54:b8:4c:48:13:b6:06:
                    0b:08:a8:fa:20:df:b6:fb:8f:e8:75:7b:fa:8a:2a:
                    4d:26:6f:3b:a8:fc:2c:c8:fd:4d:13:91:4b:92:dd:
                    9b:ef:19:58:60:bf:90:38:ea:24:18:53:63:5a:f3:
                    ab:40:64:3c:c0:02:e0:9e:29:df:40:b9:e6:94:fa:
                    85:3e:89:7a:9f:55:91:32:4e:ed:e7:b7:73:79:55:
                    2a:b4:7f:8b:da:d9:26:a9:96:e8:2d:fd:e0:2f:4c:
                    e0:99:34:ec:a3:16:5c:f9:3c:6f:13:bc:89:38:b7:
                    8f:71:2d:80:56:c4:9c:49:1f:05:95:06:b9:6a:46:
                    4a:71:7a:d5:7f:57:5a:c3:92:6a:be:37:21:aa:0e:
                    61:7e:b2:a0:91:80:86:08:bd:39:dc:15:1d:33:94:
                    84:30:9b:04:5d:bc:db:8c:ee:de:e1:36:81:d8:88:
                    bb:85:6f:bd:cb:59:dd:5a:90:8f:7c:ff:4e:65:e7:
                    b6:ac:9a:5e:a9:47:e8:d2:fb:ad:3b:65:4e:31:65:
                    d3:92:16:2e:77:1d:ce:4f:54:fc:5b:80:70:b6:de:
                    21:6b:3c:35:26:a5:4e:e8:9d:b6:5c:51:e0:25:ce:
                    70:7b:b7:0e:cb:20:2f:da:f3:80:7e:58:15:4b:6d:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:98:FB:8C:16:49:02:E7:30:E6:A1:48:13:50:2A:A7:55:8B:E7:E2
            X509v3 Authority Key Identifier:
                keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:36:40:cb:67:e1:0d:d7:dd:01:8a:1e:41:64:7e:f7:ba:
         08:2f:6a:67:0b:83:06:23:f5:11:5f:3c:d5:26:a1:7f:c3:eb:
         24:95:35:33:fc:f9:9c:07:95:28:76:59:0a:fc:40:e4:5b:0b:
         57:b4:cb:f9:e8:2c:78:57:c8:ba:43:6a:ac:cd:c5:f2:2c:84:
         4b:4c:e3:ae:66:78:43:9c:07:08:ad:2c:67:7f:36:98:74:5f:
         10:51:f7:ad:18:ab:be:96:d5:df:f8:22:cf:0b:1c:c1:86:03:
         d4:9e:27:54:5f:19:c4:c6:5e:81:db:29:34:f9:d7:0b:f0:f2:
         84:79:56:34:9c:48:7c:e3:b3:b2:ce:06:1b:28:6f:da:b6:1e:
         b1:d8:4f:1b:47:72:43:06:c1:ae:c9:0e:30:8c:79:04:f9:fd:
         93:17:55:c2:ac:b2:66:05:b3:27:dc:b3:03:ce:fa:83:35:d9:
         81:33:80:ba:6f:ce:04:d2:1a:4b:7d:1a:c7:d2:7f:88:51:a9:
         eb:96:67:54:48:83:f1:9a:c3:69:a9:c8:ef:05:0c:93:18:cf:
         90:8e:34:1c:e6:77:4c:5a:3c:34:64:48:2a:b8:ad:c9:67:88:
         2c:b0:2e:d7:68:1b:8b:4c:68:78:c4:2b:9a:a8:f4:4c:e4:18:
         9c:4f:58:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----