Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File:                     Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier:          SCkcPoQjGgCH7gPEf/6AN5edyFhEFBQANfqdVLsxYSU=
Subject key identifier:   E4:CC:E0:C8:F2:FA:0F:69:A3:65:F9:BA:1C:43:F4:6E:CB:10:71:23
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer:       /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial:       01962ECF841FB192DA74F4F872462E0C6C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number:          A6
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: nVP+ZesqBXNIR2vyai8NYNP/h35s+sAT1Lb/nEGAw00=)
                          2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:84:1f:b1:92:da:74:f4:f8:72:46:2e:0c:6c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=e4cce0c8f2fa0f69a365f9ba1c43f46ecb107123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:7f:b1:b1:dd:40:96:d8:90:85:df:fb:bc:
                    36:db:cc:98:ac:05:24:c4:2c:f0:09:a6:41:e3:33:
                    df:16:86:80:70:bd:8f:7e:36:c7:57:ec:36:03:00:
                    a4:77:be:fc:96:24:58:0d:34:1a:2a:8d:a9:ec:d7:
                    4c:94:a2:22:39:01:de:a8:04:b6:bb:c4:7d:f7:32:
                    b6:fc:b2:63:7f:4e:f6:86:a5:c2:17:64:b2:10:24:
                    8d:a8:79:dd:64:bc:ee:5d:68:fd:73:4f:29:27:49:
                    59:fe:43:9f:1b:e9:d0:83:f2:4a:63:8d:6e:ba:3e:
                    f8:d6:3d:25:fd:b7:e6:6c:67:22:77:1b:95:8c:7d:
                    ce:72:51:9b:30:74:68:50:3d:f3:44:43:08:5d:ff:
                    81:52:17:32:6b:b7:88:03:11:fd:c7:e9:ba:8e:58:
                    d7:5e:a3:e5:46:19:4b:98:7c:7d:5a:b8:48:0e:b4:
                    28:7c:5c:3c:a4:37:f7:4f:e7:c0:7b:cb:f9:d3:8d:
                    88:44:88:7a:57:48:eb:bb:0b:86:f1:b8:3b:d4:d6:
                    06:c6:a0:e7:0b:fd:11:bb:16:e4:61:b5:ee:af:19:
                    f3:b4:7c:1a:fc:48:ab:c6:f4:8e:20:8e:e9:9c:3b:
                    07:6d:ee:3f:7d:45:3f:69:40:b3:b0:eb:cf:2f:04:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:E0:C8:F2:FA:0F:69:A3:65:F9:BA:1C:43:F4:6E:CB:10:71:23
            X509v3 Authority Key Identifier:
                keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:0e:30:f9:57:1d:b0:12:3b:9c:1c:60:7b:ff:2b:5d:52:
         24:13:b3:5b:9c:3c:57:9e:e2:f5:d8:c2:44:c0:bc:6c:d7:4b:
         b4:89:0e:c3:a1:8b:6f:0f:32:9f:d3:f3:68:33:42:d0:6b:68:
         6a:d2:20:3e:08:15:36:63:b7:66:d6:42:7d:04:e3:80:bf:f3:
         01:74:8c:c8:32:79:9c:8a:b1:a1:b1:29:dc:8d:ba:e3:97:16:
         8a:43:b5:4a:a7:5a:c8:5a:7d:32:5c:2b:55:43:76:5e:ce:52:
         92:77:7f:0b:71:a9:a6:b9:29:08:25:f5:bd:63:da:5e:ef:10:
         98:d1:f9:77:84:a6:84:89:f1:76:a4:01:0c:4c:ea:29:50:4f:
         b0:94:68:33:7d:e1:19:ce:fe:53:a6:23:b9:24:61:91:4b:80:
         7e:d1:36:8a:3f:a2:37:58:33:67:5f:92:26:16:6e:05:01:71:
         1a:04:c8:b4:4f:f6:d9:c4:a1:de:df:47:18:75:21:d5:56:32:
         86:58:d6:90:bc:36:e1:cf:3f:44:41:82:50:c1:ca:f9:37:0b:
         21:fd:2f:40:3a:ab:de:11:00:8a:c1:4c:fd:0b:ff:84:10:ce:
         78:41:2a:2e:e4:b7:e4:57:b0:f3:cb:cb:f4:14:52:c0:90:d9:
         d8:ff:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----