Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
File:                     Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json)
Hash identifier:          WchNCGqN+Tq+SsREhCqRXfHdIxQtrTOiMA9o0jABo3c=
Subject key identifier:   89:20:62:42:5A:37:26:F5:B6:FE:CC:DD:C5:39:A6:BF:B0:EC:F0:9B
Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Certificate issuer:       /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Certificate serial:       01962E6174DC9781CFFBC2CEA0899580FD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
Manifest number:          0836
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: 1hk2beP_0noowMbOmNtoNb3trEI.roa (hash: yPaUkjXMWXPL0Y518Fz9alSB7qRK1+1Dm8ayCL/j/eg=)
                          2: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: pS/4VVeS7t+261iO8vyZ7uJG2LnHVyY744mvL82xZW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:74:dc:97:81:cf:fb:c2:ce:a0:89:95:80:fd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=892062425a3726f5b6feccddc539a6bfb0ecf09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:12:7c:77:a9:4b:40:89:78:bc:5d:e9:ee:
                    e7:e6:50:aa:3f:c2:d3:b7:c2:46:33:9b:32:d7:6c:
                    ef:63:54:c4:4d:6c:6d:74:45:b4:09:bd:42:e3:b4:
                    9e:45:fa:05:f5:f6:00:0e:47:4c:8b:3a:5e:6a:dc:
                    83:5b:17:58:6a:a0:a9:e9:b5:48:ef:77:d4:31:61:
                    50:1c:83:a6:e5:1c:3f:7f:dc:db:92:96:61:a8:ab:
                    2a:82:1c:83:5e:f3:3c:06:44:8d:dd:5b:1a:88:78:
                    bd:b9:4f:05:d4:6b:8b:3a:45:55:b7:32:84:a8:ef:
                    de:f2:5a:ef:59:ca:41:d6:e1:c5:a9:a4:75:31:b8:
                    e0:d0:ee:e8:dd:d8:65:75:89:a0:96:3b:17:d0:86:
                    e4:6f:94:35:53:4d:ea:56:4f:03:c4:5c:ec:1b:d0:
                    87:94:2c:35:ef:8d:2d:04:21:1f:dc:de:8b:ac:89:
                    44:b5:c9:64:eb:a1:6f:bc:f4:a8:bf:38:c9:fd:91:
                    8e:e4:6f:e8:0c:2f:a7:e1:c9:fe:f0:6e:66:fa:9d:
                    a5:55:5f:d8:8d:21:8c:8c:5f:e7:28:67:78:f8:dc:
                    b1:72:a6:6c:bb:f9:c6:77:d5:b0:22:fb:0e:1b:0c:
                    a3:52:cb:ab:48:24:98:4f:6d:97:cc:05:92:6d:73:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:20:62:42:5A:37:26:F5:B6:FE:CC:DD:C5:39:A6:BF:B0:EC:F0:9B
            X509v3 Authority Key Identifier:
                keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:8f:cc:60:ef:f2:34:3d:28:53:ed:b3:62:e8:89:13:33:
         bd:20:0e:8e:05:88:40:2b:f0:33:bf:c5:5c:d7:ab:a8:9d:17:
         c7:d4:e7:7f:fa:b2:b6:fb:aa:e5:72:81:bf:74:96:fb:27:8f:
         b9:a3:80:30:d8:a9:5a:5e:42:4f:18:9c:8a:0c:8b:17:01:f7:
         1f:77:e6:c9:15:c1:a0:ca:99:40:d9:f2:1e:e1:6a:b8:73:7e:
         6f:8a:e1:6a:4a:ae:2e:14:7d:aa:40:f2:b2:cd:8d:41:b0:9b:
         80:19:58:05:f1:1c:a8:51:93:da:b5:d3:74:dc:15:82:5f:00:
         45:ad:86:91:41:b4:1c:57:d7:f5:20:b1:f2:e1:f7:48:32:b6:
         fd:31:aa:0e:b7:a2:3f:93:22:ec:27:c7:a3:24:fe:76:93:e8:
         de:5b:b8:b6:b9:8e:ae:6a:b9:df:66:e4:47:87:ba:36:a6:13:
         0b:de:1d:33:62:51:38:4a:1e:87:7b:ce:d9:a1:c2:93:21:66:
         9b:7a:a1:2f:60:58:11:e4:a8:c5:48:32:cc:5e:55:6b:bd:98:
         fe:6b:da:4b:57:ef:7b:b7:c2:2d:a2:ef:0d:e1:f1:12:4e:27:
         19:92:ac:de:f6:63:fc:dd:62:a4:be:46:4a:6f:9b:7b:91:2d:
         f1:71:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----