Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
File:                     bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json)
Hash identifier:          FMqe53MDDF46dujYL7K2s7VMXZvbplveXO+EP/KHGVY=
Subject key identifier:   8F:01:CE:67:B7:E6:AF:86:B9:36:96:D9:30:4C:D2:A6:F0:DE:B8:E9
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       01962DF426739A06D10BEBAEDB349D281F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
Manifest number:          120A
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=)
                          2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=)
                          3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=)
                          4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=)
                          5: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=)
                          6: TF6vPvFxs5WUrrHSqmKpxsQvB18.roa (hash: skdmvC6iLpguLmAUBf5CQp9okNf5/hjKRW8eNCLvcbU=)
                          7: UCwT6CL5WW3mYzoKNlTk2SOU8IA.roa (hash: N87SKU9+C8nd7bvGxIGpUOdKdK4qImbFhv+zWkYw2Wc=)
                          8: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=)
                          9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: Bkt4WjwUBR9gpICID9zGjUTuVukvOmjbKUEi4sNDua4=)
                          10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:73:9a:06:d1:0b:eb:ae:db:34:9d:28:1f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=8f01ce67b7e6af86b93696d9304cd2a6f0deb8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:27:d5:cd:f1:d7:a2:7b:d7:6a:26:e3:a4:
                    7b:84:5a:9f:06:57:e4:1b:19:91:ae:b1:df:fb:29:
                    86:b5:33:7b:8c:43:89:2f:36:b4:12:75:7b:e0:cd:
                    61:a7:b8:ac:65:a7:bb:02:c7:1d:cb:06:92:60:f6:
                    34:dd:db:a0:60:79:a7:69:21:ce:ef:98:39:ba:6c:
                    7a:de:63:9e:19:8d:2e:2b:f0:40:47:0d:d9:a2:58:
                    ae:1a:8c:2c:d7:f5:50:1d:a3:a9:a6:e4:d3:2d:f5:
                    6b:0c:d2:ca:99:75:53:b2:65:ba:38:d2:78:4e:c7:
                    d9:f1:c0:48:4a:d2:10:70:1b:5f:4e:ae:0d:49:33:
                    02:45:5c:ed:74:c1:f7:ae:a2:f0:27:1e:72:40:dc:
                    0a:9c:de:51:cd:f3:34:5f:79:1d:54:43:db:d0:a4:
                    68:b0:3c:ac:e5:fe:e8:a1:67:df:eb:c0:0a:20:55:
                    36:71:76:05:75:c9:f1:a0:d3:98:06:1c:4b:1b:db:
                    26:05:d9:76:df:50:ac:5f:a1:45:30:0e:d3:1f:3f:
                    b5:85:f2:17:63:29:0c:a2:28:b9:c0:66:66:ee:8f:
                    20:dc:91:0e:56:ec:82:c9:e6:e6:f8:8c:97:e5:91:
                    16:b7:5f:83:5a:b5:99:0c:06:a3:7a:c1:3c:7c:89:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:01:CE:67:B7:E6:AF:86:B9:36:96:D9:30:4C:D2:A6:F0:DE:B8:E9
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:04:d4:2a:92:70:8f:6b:e3:f1:5a:3b:6b:db:c0:41:b8:
         28:fc:c0:3e:4e:12:4c:18:dd:36:ca:bb:5e:56:26:46:83:a6:
         93:78:ac:b4:e2:3b:a9:33:e5:07:ba:58:ce:cf:0c:58:a7:2c:
         99:61:59:88:bd:ff:d3:3a:61:c4:26:63:71:06:11:48:54:8d:
         f0:c1:b6:cf:ff:45:25:84:69:66:3c:f6:d7:56:56:e8:d8:1d:
         c0:27:06:0f:d5:ac:ad:6b:02:0f:ae:7e:34:93:24:f2:a3:f9:
         31:2b:40:52:81:3b:92:e5:f2:a5:64:78:1c:e5:b8:d3:f7:02:
         2b:96:f0:fa:4b:9d:d9:3e:48:8c:cc:68:6a:bb:f1:03:b6:46:
         c9:01:43:ca:9f:64:82:e7:f8:38:d7:14:74:96:ce:19:8e:3f:
         10:c6:c5:ca:c4:15:7b:aa:70:b3:44:c7:c6:5a:9b:bf:d3:4b:
         ba:1c:22:12:e2:60:e5:f5:6e:f2:87:da:f9:38:ac:fb:99:08:
         a7:eb:17:52:ab:8d:80:f4:47:90:c4:ae:ec:81:39:df:25:2e:
         4f:9b:e4:54:8f:84:60:83:47:12:d4:39:1d:85:1f:5e:32:90:
         46:75:7b:04:23:05:db:a7:0c:bf:50:8a:88:0a:82:2e:a6:f5:
         58:f1:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----