Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File:                     cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier:          Yvah4EH+4w1aMeFDtvN827lVQ5t5XSNJDQAmLKnkY0g=
Subject key identifier:   D2:A4:0D:68:7A:7E:07:CE:49:2F:23:31:26:2F:A2:67:E6:BC:7A:83
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer:       /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial:       01962E2AE04116ABA1E65A6F542106FFCD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number:          11B9
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: OyLRKSxZzvNjarC3n2TakCdQRMRo7uu2PJGJlTzxZhE=)
                          2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e0:41:16:ab:a1:e6:5a:6f:54:21:06:ff:cd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=d2a40d687a7e07ce492f2331262fa267e6bc7a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:dc:2c:5e:dc:c2:33:75:48:8b:5a:2e:85:
                    16:06:ee:05:c0:ac:ba:ee:ca:46:bb:52:61:90:7b:
                    cb:05:e5:7f:68:39:8c:fa:d5:7f:2c:69:50:1c:f0:
                    1e:c0:b3:0a:54:db:19:63:2f:fb:24:f5:69:8b:fa:
                    0e:f6:f2:60:04:7c:3d:54:1b:9e:8b:7c:22:fd:27:
                    a8:e1:e8:c5:50:66:54:46:32:16:69:43:4d:9c:e8:
                    c8:da:d0:33:a1:c2:23:d9:a9:3e:8c:bd:5c:1f:a9:
                    8e:77:b8:f5:82:bb:48:71:20:f4:1b:75:82:90:f1:
                    49:c4:7a:da:ac:32:c6:c0:6f:f8:ec:23:70:66:a8:
                    74:91:f0:69:28:46:0c:1d:ee:db:e5:6d:2f:e4:37:
                    93:8f:e6:b5:83:a3:fc:bc:c7:7e:3f:80:24:79:94:
                    f2:6f:1f:b7:80:ab:b7:11:a1:b2:73:b5:21:8c:c5:
                    eb:67:ee:e3:11:c4:10:44:46:60:ca:a4:ce:ea:82:
                    ce:61:f6:1e:1d:75:01:5a:25:70:40:3b:86:9e:35:
                    a4:b0:d2:92:5f:01:0c:88:a6:67:6d:3f:bd:94:63:
                    2a:6d:17:ae:01:c3:a7:b3:51:56:b6:75:19:42:c0:
                    f5:59:8f:f7:51:18:a0:d1:f7:19:49:14:15:64:b3:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:0D:68:7A:7E:07:CE:49:2F:23:31:26:2F:A2:67:E6:BC:7A:83
            X509v3 Authority Key Identifier:
                keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:8a:92:6f:fb:b9:1d:3d:3e:0b:8d:d9:6d:73:fa:e3:64:
         0d:3c:65:47:49:bd:5b:2f:7b:9e:c9:30:9f:4f:e7:77:d4:07:
         57:5f:07:4c:02:b4:7d:24:72:28:bc:a7:71:b2:1e:86:04:6f:
         c3:76:66:0e:8e:42:c0:d7:50:e4:ba:50:16:8e:d0:1e:e2:47:
         cb:9b:c9:4f:32:5b:4b:d3:76:76:a3:bd:d2:3e:df:87:51:44:
         d2:68:66:70:2f:2d:8b:11:96:68:5b:a5:8a:28:24:70:a8:f4:
         a1:cf:a6:3f:b7:0b:45:c0:79:c9:53:22:37:dd:b8:91:27:ab:
         0c:e6:99:1f:d1:ed:9a:0b:2a:bb:0d:3a:16:bf:04:61:de:06:
         28:7a:9e:44:eb:9c:64:97:cf:b8:10:75:7a:53:d7:da:3e:86:
         ef:5c:84:0a:47:99:82:eb:4e:85:48:e9:31:ee:6d:e6:24:50:
         14:25:fb:29:f4:a1:94:a6:fd:b9:fe:2e:ef:32:57:c7:a8:62:
         66:c9:11:48:67:c3:6f:92:b4:dc:ca:ee:3d:b0:55:04:a1:5f:
         1d:c3:20:8d:4f:dc:30:06:a7:28:1a:7d:01:c8:9d:d4:9d:af:
         9f:6f:75:58:24:4b:21:29:7c:17:2b:8e:db:3b:d9:d3:2f:77:
         4f:55:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----