Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File:                     qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier:          Gv3E8iuXT+gCmURyStrOejMxPq+X4jCKm2qBmk52GJg=
Subject key identifier:   40:F8:C1:FB:4A:34:BE:1A:AF:D3:5F:92:85:D7:D7:23:B6:CA:87:14
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer:       /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial:       01962F7473141B8624B7C53C22864A90D955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: /FivzfRRwdPnsOv5fDljVdFT6jgHn32bAGnxkevzK00=)
                          2: w4EgtXymNG4qdDGffeejqhzCwgQ.roa (hash: VmcnuEKWSTHxVX4tEucguGz0L6uvVm7W7xv8HWe4KjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:73:14:1b:86:24:b7:c5:3c:22:86:4a:90:d9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=40f8c1fb4a34be1aafd35f9285d7d723b6ca8714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:e6:b6:d1:be:67:46:17:2f:bc:e0:45:d0:
                    0d:9d:5e:a0:38:ce:41:35:ab:6f:54:09:29:0f:c5:
                    ae:d2:06:6c:fd:30:6e:55:9f:16:84:9b:38:b1:99:
                    fc:1f:a6:84:ea:f9:a5:35:88:b0:fb:a5:9e:94:4e:
                    41:e6:e7:2e:15:2d:33:00:e1:cc:19:03:95:28:d3:
                    41:c0:6b:43:d4:37:2d:20:1c:d7:ec:8c:8e:14:ff:
                    90:1d:76:f4:2b:c3:57:0e:c5:c3:55:89:dc:30:68:
                    28:25:a1:51:19:a2:32:f4:4f:29:93:3f:fe:88:31:
                    db:e0:46:a7:45:8e:85:91:b6:78:1b:20:82:a9:73:
                    09:89:7e:37:20:3c:bb:3c:5f:93:77:58:aa:ef:7e:
                    f6:af:40:87:a3:42:cf:02:1c:f0:ee:54:83:4f:bd:
                    47:91:a9:99:7f:8a:67:0f:6a:e5:4a:de:85:cb:c1:
                    2b:50:fd:30:72:55:a0:bc:73:5f:f1:8b:ca:89:d7:
                    18:1d:74:66:96:17:51:ee:53:92:7c:d4:4f:b2:d3:
                    91:33:5a:9d:a0:5d:4f:3d:23:2a:c9:12:ce:60:37:
                    6a:5d:85:c6:94:95:ed:d8:9f:25:31:5a:94:c9:9a:
                    3e:e5:51:b6:ff:08:24:fd:82:2b:12:c1:b5:a5:9d:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F8:C1:FB:4A:34:BE:1A:AF:D3:5F:92:85:D7:D7:23:B6:CA:87:14
            X509v3 Authority Key Identifier:
                keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2f:dc:d9:8d:ea:e6:03:59:8e:f6:93:52:90:5b:5e:ab:1c:
         11:c1:b1:3e:58:24:7c:d9:3b:d3:ba:bc:cf:54:74:60:f4:7d:
         93:ea:e3:60:f1:69:67:03:25:ae:9f:db:67:96:b6:7d:d1:a5:
         72:39:c4:45:50:9d:86:f1:48:34:ef:c0:9f:a6:4b:31:76:db:
         eb:cb:b7:30:ed:a3:7c:66:62:e0:28:d5:24:cb:14:e4:f8:f2:
         42:7d:e6:25:2c:cc:f6:c8:55:14:b7:38:78:c6:45:3b:82:09:
         15:1f:70:e9:ab:b3:69:5e:70:96:a0:43:4f:33:15:21:3a:9b:
         7a:f1:aa:30:fd:7c:1f:41:f5:20:7d:23:e4:f8:a8:be:6c:a0:
         af:59:de:06:e6:73:3d:c2:ec:b3:72:77:8c:96:9d:0c:5c:01:
         a8:69:1b:61:17:7b:e6:e0:85:3f:19:26:8e:a1:8a:2d:21:e9:
         00:ff:e6:cb:a2:f5:6d:68:8b:ac:37:4c:68:28:d9:b8:82:73:
         a5:c1:bb:d5:c5:73:9c:04:e2:31:18:6c:8f:54:29:de:eb:bf:
         4f:4d:ce:cc:0e:74:6c:7c:c6:f9:b5:cc:b4:ed:32:fc:8a:7e:
         c3:ae:65:3a:7f:4f:fb:57:47:61:cb:f7:08:98:54:fc:0a:b5:
         89:70:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----