Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File:                     qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier:          7DXRUWxY7F3+rnhibO7CeL9Ed2YXwJDJci1qZrYvD4E=
Subject key identifier:   86:D6:9E:8E:66:F3:4E:33:F3:8A:6C:1F:46:B6:E5:B0:0D:86:EB:72
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer:       /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial:       01962FAB8EEC60C7A18A658224A91250042A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number:          1147
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=)
                          2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=)
                          3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=)
                          4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: wqxLUbt1MFrFRJ/VAy+gGAr0f2RTgDgcpPwU8p242Lg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8e:ec:60:c7:a1:8a:65:82:24:a9:12:50:04:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=86d69e8e66f34e33f38a6c1f46b6e5b00d86eb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:0a:03:c6:c4:ac:79:ab:4c:e7:e4:2c:bd:
                    6f:08:06:ad:01:49:f4:9c:8a:2b:89:dd:42:43:d5:
                    d3:9d:3c:a1:96:7f:fa:17:17:33:b6:81:80:b0:db:
                    10:a0:db:a6:c8:e1:53:c3:98:9f:bd:79:78:e5:13:
                    cd:04:e9:69:86:c4:e0:85:2f:f5:9f:27:28:3e:31:
                    db:da:b9:ce:16:25:21:ef:8c:60:6e:fa:68:e6:fa:
                    2d:f0:29:70:c7:d8:fe:42:dc:7b:05:90:fa:22:26:
                    39:1b:b7:57:86:8c:38:21:00:ac:e4:7a:85:96:84:
                    15:bc:f0:8d:12:33:cb:50:32:1e:99:ea:09:bc:b0:
                    56:5b:51:75:80:c5:e1:8b:72:fd:5d:94:6a:50:2a:
                    6b:f8:97:d3:f5:6c:25:ef:23:41:ce:28:8c:a8:d6:
                    e7:23:e0:7d:33:4b:7b:e5:70:80:bd:41:f9:23:75:
                    af:82:bc:0e:38:72:e4:18:20:38:42:76:32:53:af:
                    07:19:22:f2:f1:8b:e5:35:b9:14:ac:d9:25:94:ce:
                    5d:7f:82:bb:85:2c:1f:f8:00:16:23:35:42:f5:a0:
                    c6:d1:a7:22:51:ae:a9:4a:d6:57:91:70:c8:5e:eb:
                    23:da:4c:0b:cf:bf:1b:56:dc:32:40:9f:bd:90:4b:
                    ed:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D6:9E:8E:66:F3:4E:33:F3:8A:6C:1F:46:B6:E5:B0:0D:86:EB:72
            X509v3 Authority Key Identifier:
                keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:42:dc:0f:2c:cb:59:27:5c:8e:1f:4c:42:e3:c8:a6:c1:
         21:7b:9c:de:59:4c:9b:bb:d9:95:49:ee:75:fe:51:ed:26:50:
         55:42:b1:c0:a7:9f:fb:2f:1e:15:55:3b:de:fa:77:dc:39:11:
         9c:97:0a:1c:33:86:db:67:4d:c2:2f:5a:1e:95:52:55:67:1e:
         2d:51:2b:bd:d1:df:9a:6e:f4:9f:d9:97:b7:dd:00:ed:70:d9:
         26:e1:00:ed:f8:cf:d7:25:d6:d6:f8:51:40:39:18:49:9c:f8:
         76:9e:da:8d:45:97:df:b3:1c:ef:fc:68:a8:75:68:b2:e8:80:
         67:52:54:2c:c1:09:71:32:50:da:0b:9b:b8:09:58:b1:c4:44:
         6f:30:70:f7:92:a8:98:a9:6f:27:49:b8:06:aa:31:66:2c:3d:
         88:da:06:10:53:06:fc:9f:fe:bc:4c:4e:05:6c:1d:75:40:e5:
         40:79:f8:65:45:55:5a:67:cd:59:c7:9c:c6:f2:f0:f8:fd:12:
         74:9f:22:df:02:8e:8e:5f:4a:09:a9:13:e8:37:7e:18:ff:59:
         49:6f:30:2d:08:8b:8b:72:8d:71:ce:8a:28:05:ed:15:a2:11:
         7a:17:22:00:d7:3e:d5:36:98:1d:7b:c1:bd:96:3c:f6:65:c0:
         e7:65:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----