Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File:                     Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier:          UtXbvUHGxZyMo/dJhwJY33sYKvggg4AKJRWi/kNs+sY=
Subject key identifier:   70:F2:7B:1A:E8:91:E2:A2:B7:FE:63:13:56:85:4B:D1:FD:6E:43:3F
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer:       /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial:       01962FAB7890545F16E6EF4228714B4DE253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number:          148E
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
                          2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: 8hk2t83N7kKXZZLIhG9nRA0gC172OBl2GRtjLIZvZq8=)
                          3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:90:54:5f:16:e6:ef:42:28:71:4b:4d:e2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=70f27b1ae891e2a2b7fe631356854bd1fd6e433f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:9e:4a:48:7f:62:4a:69:f8:11:61:a8:f9:
                    65:8b:cd:fd:a8:1d:0a:bd:b7:c6:e0:93:67:66:82:
                    c7:60:83:14:bf:80:5c:2a:f9:ca:fa:a2:74:37:ee:
                    56:2d:57:fb:ab:ac:92:b6:71:07:ef:b5:f4:c0:09:
                    c9:63:a9:0b:97:0b:3c:86:72:a3:0d:85:eb:21:f7:
                    cb:3f:c1:4a:95:93:7b:0c:10:1b:94:c9:8c:8f:06:
                    41:51:9e:21:38:97:5b:96:0b:dc:df:e0:42:44:02:
                    91:c2:76:4f:7e:f9:ce:4b:94:60:2f:9a:78:54:b1:
                    97:c6:c2:0f:d8:1a:d0:95:89:a4:ec:6b:85:9a:7a:
                    c5:6e:74:5d:ea:f9:e1:74:c0:bb:59:b3:6c:e0:d9:
                    3f:0f:68:6c:bc:45:61:39:18:76:81:3c:62:c8:98:
                    00:b8:c1:43:cf:43:ad:2c:28:40:94:68:ec:a7:f2:
                    b6:8a:a0:e5:8e:4a:a1:6b:ce:04:4f:08:95:4f:8c:
                    4d:dd:d9:39:71:17:45:c1:34:07:ca:88:06:1f:31:
                    f2:40:d0:5b:9f:b9:87:95:17:a0:eb:61:e6:f1:bc:
                    a8:e3:87:36:8a:b7:54:fe:51:9e:5f:bd:22:20:1d:
                    08:35:e7:73:35:de:75:2a:e4:bc:aa:81:5f:d4:e3:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F2:7B:1A:E8:91:E2:A2:B7:FE:63:13:56:85:4B:D1:FD:6E:43:3F
            X509v3 Authority Key Identifier:
                keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:66:48:aa:64:28:aa:ca:9e:e7:90:e4:f8:38:10:ef:bf:
         c3:09:8a:e7:de:8c:fa:5d:cc:9f:41:74:97:94:f2:65:33:42:
         18:f7:48:58:67:40:75:fc:bd:06:a7:25:b8:c5:33:4e:96:8c:
         7f:0c:8c:02:62:d8:35:ac:35:a0:b9:39:71:07:e3:5b:38:96:
         25:74:d9:b9:15:83:04:60:0f:7a:d2:b4:01:d8:7c:f4:23:4c:
         90:90:8e:70:c6:65:47:db:d1:ee:70:03:b7:13:84:b0:ab:60:
         0f:18:11:ac:8c:3a:48:7c:92:c4:bb:37:87:f7:4b:20:48:33:
         fd:9c:90:92:bf:2b:fe:e6:2f:16:c4:5c:a2:6d:43:01:da:e7:
         99:40:8a:f0:4a:a8:47:c2:a9:5c:10:50:e0:9e:1a:85:f8:79:
         0c:fe:dc:87:cb:0a:ba:08:2f:09:a6:32:11:59:07:42:ee:cf:
         5f:1a:15:9a:f6:b1:f0:2f:88:c5:30:ec:96:0d:26:a2:19:89:
         25:1f:31:d5:e6:46:56:af:7d:54:e7:a7:0a:51:b9:6f:a0:30:
         96:e2:b8:6a:37:18:35:fb:52:5c:fb:a8:c9:08:e9:94:0c:7e:
         3f:a2:f8:04:1d:af:d4:79:78:85:cd:6a:9b:40:4d:ac:68:0d:
         fb:ff:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----