Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
File:                     q53IX5TKZH3g22TXTTE5lHzESbo.mft (raw, json)
Hash identifier:          nMtUm2mb4SAE8R3kKzaqiPusfMv3T8eFjct54gPahco=
Subject key identifier:   84:B2:82:17:31:94:CF:20:2F:6B:4A:E7:40:00:1D:58:51:2A:CB:A3
Authority key identifier: AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
Certificate issuer:       /CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Certificate serial:       01962F06630A335A31BE8CA7BC1DFD40AE31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
Manifest number:          11D7
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 3U4MivbAgZFFTzpri9v9qzr-9Dg.roa (hash: OpxoqQJPTPV/7nPesTeS09o0jfmFmQcqEJLqODzVTIM=)
                          2: q53IX5TKZH3g22TXTTE5lHzESbo.crl (hash: VZUq6W90gmHEINxcy9kignrvb0HXwjyZAKIbyNFNr2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:63:0a:33:5a:31:be:8c:a7:bc:1d:fd:40:ae:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=84b282173194cf202f6b4ae740001d58512acba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:70:38:be:1a:fd:f9:f2:23:ae:7d:34:14:
                    69:94:4a:69:34:6f:e9:8c:0a:3e:94:18:48:f6:93:
                    59:2d:95:52:d5:aa:38:ed:51:2c:ac:d1:8c:a4:4a:
                    13:77:f7:68:00:bf:04:97:40:5a:ed:42:42:8f:11:
                    17:a9:0f:12:48:90:fb:31:fe:fa:87:12:06:d0:e1:
                    80:23:88:a5:85:fb:80:f1:44:a1:75:05:35:f0:f7:
                    9f:21:25:76:dc:2c:b4:5b:02:25:d4:8a:a3:7e:6e:
                    27:2b:96:54:57:72:93:53:63:b3:29:5e:2e:25:44:
                    88:46:6a:36:c0:4d:93:29:84:93:57:bb:62:be:d1:
                    d6:a0:49:05:3f:3e:42:21:2a:cc:26:ba:bd:d6:95:
                    32:02:6d:f1:86:63:71:94:57:c7:30:53:a7:65:4f:
                    f9:08:a3:1f:4e:b1:a6:01:d8:6d:52:b8:f6:85:0d:
                    00:87:0a:04:fd:75:7f:5c:da:92:e4:6b:8e:52:73:
                    0d:6c:fd:3d:53:5b:f4:1d:5c:e8:d6:7e:8f:92:29:
                    9b:a6:24:62:7b:01:62:65:fa:93:c7:71:6a:e6:35:
                    f0:13:45:4d:3c:c5:9d:df:f1:c4:b0:7f:84:ad:56:
                    81:3d:f7:e4:50:a9:e2:a8:ff:47:78:9b:60:13:d4:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:82:17:31:94:CF:20:2F:6B:4A:E7:40:00:1D:58:51:2A:CB:A3
            X509v3 Authority Key Identifier:
                keyid:AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4e:1f:9e:e1:0d:dc:2c:dd:05:9e:c8:aa:5f:31:6a:da:3d:
         56:a6:e4:77:3e:f0:62:59:8e:77:c8:ba:dc:d4:16:09:43:75:
         c0:7f:ba:19:8f:c3:ba:ea:e7:46:05:82:6f:a1:10:51:ee:f9:
         1c:87:26:2e:57:68:c6:95:ad:d8:b1:48:80:7c:98:1b:46:4b:
         c7:c8:20:1a:f9:b7:36:6c:05:5e:df:a7:f4:04:bd:f5:8a:94:
         48:be:25:76:96:c6:04:cd:ac:16:77:ea:3d:25:e5:1b:70:c7:
         dd:10:f4:8f:58:84:dd:40:8a:1f:36:a6:46:6d:8f:15:fe:bf:
         cf:26:d3:6c:bd:09:32:81:58:0b:04:d5:3a:67:59:91:ba:e3:
         45:9e:68:da:d4:b2:9c:d8:88:53:a1:50:be:89:dc:52:29:2b:
         51:bf:89:4d:52:33:9c:f8:6d:ee:76:66:48:6a:63:fd:5e:63:
         69:49:66:f5:9d:99:e0:05:89:89:12:58:fe:9c:1c:29:30:aa:
         aa:92:3f:ec:c4:8f:3f:85:71:31:72:fd:67:58:d9:81:65:30:
         41:cf:53:96:3f:d3:e2:23:82:a3:1a:ee:5e:db:42:6f:61:d4:
         bd:57:f1:7d:b6:eb:a3:b2:dc:fa:22:5c:83:be:72:e8:50:a0:
         02:2c:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----