Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
File:                     QqbmQBmAE94SolHwhgMM14xzJRY.mft (raw, json)
Hash identifier:          acihgX1oTDifBplDJgWJZuCKFnyFb6j6BZ9jrSyj5/s=
Subject key identifier:   AE:3D:E7:B7:CD:50:5F:F0:F2:85:AA:28:26:C6:04:A4:FC:71:16:3D
Authority key identifier: 42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
Certificate issuer:       /CN=42a6e640198013de12a251f086030cd78c732516
Certificate serial:       01962F7468D564443A5974B7A9A094C10F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: QqbmQBmAE94SolHwhgMM14xzJRY.crl (hash: VZJKe07uzy1oblGvLlV6MFmjeYL+5P82hfu8LThVo10=)
                          2: j37XoMC3UG0E_oUwTDht88JJrh8.roa (hash: cqy63HfmTCUoUdF/JZjPLrFzuSfjpRSNk0rinu9lqNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:d5:64:44:3a:59:74:b7:a9:a0:94:c1:0f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a6e640198013de12a251f086030cd78c732516
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=ae3de7b7cd505ff0f285aa2826c604a4fc71163d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:d3:16:23:c2:f3:85:f4:c1:55:67:de:7e:
                    04:ae:ec:43:82:80:33:c6:b4:9e:a8:f3:ce:3d:a1:
                    fa:eb:64:60:22:18:34:98:45:a6:bf:22:fd:18:0d:
                    44:09:17:06:c5:3e:37:40:04:af:d3:0c:fd:db:29:
                    c5:b2:3b:a0:66:b7:35:0b:6f:ce:e9:86:56:51:11:
                    69:e6:b7:99:d7:e1:8d:36:b7:32:99:6b:52:1a:38:
                    e3:0c:46:66:83:ec:02:61:a7:88:dd:91:83:a5:3d:
                    58:c3:a3:9b:ea:7a:75:79:16:ab:2f:f5:72:f5:e8:
                    aa:50:7d:1e:1a:b6:86:92:1b:08:ef:95:01:90:32:
                    d3:1b:d0:0f:14:73:21:65:61:2c:d8:50:20:00:ab:
                    1e:19:8c:e8:0e:2c:34:b3:78:e6:f4:fe:ad:fa:ac:
                    16:84:08:5d:25:1f:a3:15:08:10:1c:24:dc:62:c1:
                    58:9f:48:80:80:82:1c:d5:b5:2d:1b:ab:f1:a6:e3:
                    92:92:2d:56:f3:e4:9e:d4:4f:f2:d0:93:64:f3:ba:
                    e3:82:fa:ed:66:72:4e:56:0d:52:3a:19:9d:7f:6e:
                    f1:18:c6:e8:bd:34:5f:c5:7d:cd:31:7c:2c:e5:31:
                    3e:93:f0:48:da:d2:2e:1e:5f:a8:13:a6:ca:9e:37:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:E7:B7:CD:50:5F:F0:F2:85:AA:28:26:C6:04:A4:FC:71:16:3D
            X509v3 Authority Key Identifier:
                keyid:42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:77:24:39:f3:82:4a:21:2b:46:eb:35:8e:b6:69:72:6f:6b:
         7c:99:46:13:30:fb:38:86:a6:72:4f:42:3c:2c:2f:fa:b0:ed:
         33:6e:3f:de:22:4c:40:b2:3e:6c:59:d9:45:ac:50:21:9b:81:
         9f:00:a1:ce:a7:bc:0a:43:f6:39:36:10:1d:db:5f:92:ae:fe:
         1d:10:54:08:86:7e:8b:e6:d9:89:be:98:5f:2b:5e:af:92:22:
         68:99:ac:5c:20:1c:5b:3a:be:d6:b8:45:70:2e:bf:d6:d9:7b:
         73:a5:72:c0:a2:a9:e7:d7:59:2a:e9:90:cb:71:28:cc:86:83:
         bb:cf:71:6d:0c:14:69:d3:03:17:34:71:55:94:8f:bd:4f:e7:
         03:88:d1:f8:26:1a:00:24:8f:df:6d:44:50:f3:95:5e:69:67:
         ed:a0:50:89:45:ab:40:7a:f1:85:c0:16:cf:e3:13:3d:04:0b:
         54:53:b6:5f:5e:ab:43:7c:cc:c3:20:08:4c:8e:ab:d7:d0:da:
         3a:ac:85:37:45:a3:7b:f3:43:29:0d:b4:13:4a:b7:54:ff:d9:
         e3:a0:c8:26:19:ea:46:9a:59:31:19:ba:3e:fc:f0:27:ea:de:
         8f:91:d1:e3:20:b7:dc:4d:de:9f:a1:b1:57:af:76:e3:5c:49:
         6c:ce:be:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----