Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File:                     pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier:          fl3V5Qrhk2hc8+Qs8+ysvcGuyfl1QUxcP5De9bm8p2w=
Subject key identifier:   4C:F8:D1:59:26:A2:CC:0C:35:7C:23:2A:C3:69:64:B1:C2:E9:C1:0F
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer:       /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial:       01962F74C73469A3FBBCF857F601DE26BDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number:          A6
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
                          2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: gOSOJMjjLTi5Sy0NUa+6szJOuUaXYkPFSltGIBB0+xw=)
                          3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:34:69:a3:fb:bc:f8:57:f6:01:de:26:bd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=4cf8d15926a2cc0c357c232ac36964b1c2e9c10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:dd:e2:9b:2b:d5:df:ec:9a:08:04:8b:c5:
                    ca:e3:4d:b2:d0:cc:42:68:1a:70:3c:8b:ff:b8:53:
                    02:2c:74:a5:97:a3:5f:02:2c:d1:9a:c1:aa:03:f8:
                    5d:1e:3d:19:0d:bb:19:17:20:a0:ec:40:78:de:5e:
                    15:84:08:6e:e4:85:bb:4e:3d:e6:81:d6:02:04:f3:
                    00:eb:bf:02:28:74:41:2f:d3:82:20:d3:dd:64:87:
                    a7:78:ea:0e:e2:7f:ac:87:e4:68:2f:54:6b:46:dd:
                    bf:f6:7f:4a:10:f4:27:3b:b2:89:de:e2:b9:66:f6:
                    4f:23:29:dc:ac:99:55:ac:92:38:e4:0d:bf:c4:e9:
                    64:47:70:cb:a6:be:40:50:ba:be:af:39:3b:87:dc:
                    43:a8:ab:c4:cc:92:e2:19:9f:b6:24:08:18:77:54:
                    1b:17:bf:34:b7:e3:e8:f5:db:b1:19:57:38:b8:53:
                    b8:0b:42:37:17:f3:a1:23:14:6f:3a:55:af:33:f7:
                    b7:ac:59:da:59:ba:53:58:67:19:1f:e0:58:a8:a1:
                    53:4c:8d:29:a1:c4:9f:41:9e:f5:cf:a7:71:e5:41:
                    15:b9:83:ae:a9:d9:a1:04:ed:6f:18:54:b0:45:54:
                    b0:83:05:ab:b9:74:b4:09:1c:6e:09:0f:2f:43:00:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F8:D1:59:26:A2:CC:0C:35:7C:23:2A:C3:69:64:B1:C2:E9:C1:0F
            X509v3 Authority Key Identifier:
                keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:33:d7:d7:4c:03:68:1d:af:c6:c9:08:a7:f4:f1:74:bb:d1:
         fa:2f:a9:0e:66:43:12:b1:77:7e:e7:78:55:be:e7:52:bf:2f:
         37:0e:80:6b:a2:98:da:ae:ed:f5:c1:11:3c:83:3c:65:f0:ae:
         3a:3c:15:1e:ae:4f:2c:80:5b:42:55:7d:90:e0:34:f3:89:c6:
         6d:30:0e:e2:c0:92:db:e4:e2:65:42:78:9f:89:3a:fc:e6:79:
         89:32:eb:ec:88:b4:96:9e:ab:ef:0b:20:f1:3a:9c:96:75:60:
         37:98:03:27:d0:5b:b1:6d:ca:f3:5e:9f:41:23:b9:f1:5c:4f:
         1f:21:07:c2:b2:55:69:61:1c:b4:36:86:f1:ed:4d:35:e4:a6:
         bf:e7:9c:0f:c9:a3:39:17:be:98:4e:31:38:cd:da:53:0b:61:
         0d:35:cc:ee:06:56:27:09:3b:72:fe:7f:9b:31:bf:2e:3d:6b:
         5d:22:60:7d:89:4e:2e:f5:b7:8e:bf:27:78:50:81:91:16:c9:
         33:31:89:14:f2:25:2e:ce:46:93:e9:f6:ba:83:fb:24:85:0b:
         6d:56:7e:d7:38:1a:d9:36:08:b3:40:ce:10:68:1b:e5:e5:89:
         9e:cb:f2:1c:00:75:bf:cb:ce:3a:60:6d:3d:ec:87:15:33:0c:
         07:dd:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----