Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File:                     qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier:          WInoC+IB9U5FRgMKJEb39tOzMZNEroysaXxOxK2tsrc=
Subject key identifier:   01:C6:82:4E:46:F3:11:91:B4:3F:E5:03:E7:4D:64:11:D5:7D:DD:DA
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer:       /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial:       01962F06B2B494C13764D99693B338615DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number:          150C
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: 5HOepO76tD27CgXh7AgBSaOVvIM.roa (hash: fhyBpQTMKKX7db+5/rypfSBY1Vplej8lw2Wzs2aMOjk=)
                          2: O-aTNeAUuhRfRBdVxSFTjH721NM.roa (hash: 646Eeqep+XalWbfa7ZRu6J/EFuQON8lDSdfIDR01CgY=)
                          3: f5DYymL8L0FgOoFZZezVYFeh5Jg.roa (hash: 7uwt9itnco/csPtpi/DQC4t0QetXfLjimKtZXfisb00=)
                          4: jVDEyqMCODRbBkqkq43-QF92dZM.roa (hash: s/kttAz6ZQTi3SrIl36OIG3RsnNyK9roMAcg0ML6WjQ=)
                          5: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: qCxVf3c08cUwVjgZJSCCZ854F4oHe0hozvpTWGH2dzU=)
                          6: sSUdZotuy4S4l9Q97FUkm6YHu1I.roa (hash: N9mN14LIOsmlRFzMWQaWvllKH9jT/1Q6bPMTPFvQFf0=)
                          7: t0oLewvfmtctM6fLKW7JACNy67I.roa (hash: eoIen7jr8ftFR2LBFlJ/X2GszHh0uXwaMxdCabuer48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:b4:94:c1:37:64:d9:96:93:b3:38:61:5d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=01c6824e46f31191b43fe503e74d6411d57dddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:5c:c5:70:29:d3:20:2b:3d:de:73:1b:a0:
                    fb:63:dd:0a:fe:d0:c0:0f:2c:78:a6:76:8f:1e:c0:
                    40:3c:5c:0c:3b:c5:54:1b:62:ab:b9:8d:65:b9:f0:
                    89:01:31:e5:e6:a6:e4:31:d9:1c:4f:1a:67:51:d7:
                    33:1d:3b:6f:21:5c:e9:8a:ab:fe:f4:d8:e5:2f:32:
                    f1:ef:fd:bc:c2:3a:76:ba:f4:af:d8:91:46:d4:ca:
                    6e:20:0f:ee:ae:74:ac:26:52:b2:0f:aa:00:db:d3:
                    d3:7f:f8:3b:6e:d2:ef:b8:21:8c:c8:d5:a4:d8:79:
                    8f:44:48:df:94:39:5b:20:13:a8:52:34:b6:c7:ce:
                    a4:0a:58:4c:7f:a9:3f:60:66:7b:7b:26:c9:a4:57:
                    2c:a9:b7:93:a9:b1:eb:1d:05:2f:ab:7d:60:ed:22:
                    d9:70:82:0e:03:8d:b3:7a:5d:ce:4c:6d:6b:5c:47:
                    4b:71:a4:a2:b2:c7:f4:e0:94:06:2b:c7:07:fe:2d:
                    92:0e:e3:4c:c3:47:2f:39:b4:4a:80:24:92:6c:8b:
                    7f:2b:47:85:42:5d:f6:f2:4b:de:bd:37:15:b4:23:
                    bf:57:e1:eb:d0:7c:b9:16:55:e6:40:55:74:92:a6:
                    79:5f:e3:bb:79:9c:51:91:88:c9:a7:0a:22:5d:e3:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C6:82:4E:46:F3:11:91:B4:3F:E5:03:E7:4D:64:11:D5:7D:DD:DA
            X509v3 Authority Key Identifier:
                keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:9d:7a:6e:04:a4:23:bc:03:88:e3:e4:3d:d0:a2:2c:39:
         7c:0b:eb:af:2d:c5:cb:f5:e6:6f:b9:a9:72:76:ba:bc:ef:61:
         7e:c4:51:ee:de:a3:f4:c1:f3:58:65:c1:72:7c:4f:7d:c6:cd:
         18:bf:f1:0e:58:ff:0d:36:9f:85:bc:e0:bd:36:57:dd:6b:3a:
         92:f8:39:25:78:0e:1d:b2:eb:ac:51:67:a8:c0:a9:68:ff:d0:
         6f:7d:57:53:a0:8f:82:36:b1:51:89:99:ba:8d:73:4c:f5:09:
         c7:a4:d1:2c:eb:50:75:f5:1e:98:ed:18:ca:d9:5b:a5:8d:89:
         a7:04:a4:e7:ab:b5:9f:17:4c:e9:18:e8:44:43:73:85:7b:b2:
         0c:13:16:39:7e:af:83:3e:ab:3a:bc:f0:6a:3c:76:23:d8:4a:
         a2:bf:8f:e8:3b:e4:88:9b:cc:54:e7:f8:b5:e5:dd:d0:64:00:
         28:87:f3:2a:ec:00:2a:2d:a5:d0:b1:55:2d:01:78:3d:6d:de:
         91:7e:18:7b:71:47:df:7e:43:a9:08:58:e7:0c:1f:d5:84:b8:
         f2:46:c5:23:12:d7:63:7e:d6:60:80:f4:27:cc:aa:49:64:f6:
         79:62:88:b2:f7:33:a8:75:7f:59:b7:fc:68:31:22:43:af:2f:
         1a:4d:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----