Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
File:                     qJ3jcDei8quO2_asHfHCmZfIiMg.mft (raw, json)
Hash identifier:          uMHbqtPtHS6zhgBevLP7NJVNvyHchaGtw7FP2nmmH78=
Subject key identifier:   8F:03:7A:09:B4:36:0D:82:2C:AD:F0:7C:F9:9A:10:FC:4A:76:2F:08
Authority key identifier: A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
Certificate issuer:       /CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Certificate serial:       01962F74BDE79A0AFA52E38BAD7F29E7F99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
Manifest number:          01EE
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: qJ3jcDei8quO2_asHfHCmZfIiMg.crl (hash: rceB+TpxFsKoHlolDtFDzmxezAPP+/tuoj+Vkw29kls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:e7:9a:0a:fa:52:e3:8b:ad:7f:29:e7:f9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=8f037a09b4360d822cadf07cf99a10fc4a762f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:fb:5f:dc:da:e4:18:4d:db:f0:d8:38:b5:
                    86:b1:e1:8e:27:e6:9a:34:68:1d:4b:96:de:18:5b:
                    7b:3a:61:a2:63:aa:36:92:f5:42:80:76:65:fe:53:
                    66:ba:d3:27:97:26:7e:07:60:14:0d:fd:3d:be:bf:
                    2f:66:da:4f:72:48:4f:4a:1c:7e:25:35:ef:6d:0e:
                    22:5c:26:e9:15:d7:d7:27:84:0b:f3:b5:10:ae:da:
                    0f:9f:55:a4:c0:ac:f9:68:ce:c7:7a:64:9e:4d:a8:
                    98:fa:3e:4d:5d:d3:e4:0a:5d:72:53:37:ed:ed:0c:
                    ea:ba:cc:b1:27:c3:98:4a:2b:fd:15:4c:92:43:3b:
                    db:6a:13:da:29:dd:59:e1:d0:fe:51:cb:c8:c3:d1:
                    f1:58:cd:b3:99:ed:e3:a6:cd:7d:ff:00:4e:31:e6:
                    ed:4f:5c:ce:d8:93:b0:c2:36:d1:32:ef:2c:36:10:
                    7b:84:ef:e9:74:f4:f2:89:0b:50:18:3c:82:da:0b:
                    90:97:38:0f:7c:04:89:23:8e:02:43:91:40:e5:00:
                    fa:6e:c1:5b:ea:7a:d0:5f:c0:56:09:bf:ef:40:39:
                    14:55:19:ce:58:6a:51:1a:54:85:06:14:2b:0b:32:
                    1c:c5:74:49:7b:41:ab:4f:d3:93:37:3c:61:ed:09:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:03:7A:09:B4:36:0D:82:2C:AD:F0:7C:F9:9A:10:FC:4A:76:2F:08
            X509v3 Authority Key Identifier:
                keyid:A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:56:62:8c:e8:7c:3f:69:b6:76:3b:3e:2f:9a:df:04:8e:
         0d:72:eb:d5:9b:6a:e6:05:67:70:d0:76:28:11:b4:5b:10:74:
         2b:af:0d:45:85:69:dc:62:e6:71:cd:dc:52:04:ad:86:5e:48:
         62:d3:e9:45:82:eb:9e:85:29:d2:44:be:87:d5:4b:f7:47:c4:
         a9:ed:fa:c4:6f:74:92:39:8d:44:6d:e2:61:1b:dd:ac:5d:01:
         b4:1e:6b:99:cd:cc:e0:72:14:d3:c6:8d:9f:67:7a:c8:a8:c5:
         0b:47:12:b8:c8:37:4e:9e:f2:5c:e5:7b:50:6e:e0:d0:4a:aa:
         e6:e5:1b:4b:f0:f0:5b:46:94:a9:c2:91:b0:27:77:ac:f0:82:
         d6:75:c5:d0:cd:b9:dd:23:7e:21:fd:5d:c6:f0:0a:91:4b:1e:
         71:87:fc:88:3e:9d:62:94:76:e0:cd:ea:e9:5e:bd:d5:ef:f0:
         96:31:bf:9c:da:30:c8:75:e1:92:4c:b3:cc:8f:a3:42:99:bc:
         17:6e:88:a6:b2:7c:a5:bd:80:5f:23:e4:fe:84:f2:aa:8e:09:
         c2:67:1f:38:de:7d:1c:7b:84:65:1b:9b:44:5e:43:a1:03:d8:
         cd:56:11:d0:9a:a3:7b:aa:b2:52:eb:2c:a4:bb:56:35:dd:57:
         18:fc:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----