Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File:                     QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier:          eK7sjlxuZrRgPyATEJ8YEaTBq447S0S0JY/bK1dlVWk=
Subject key identifier:   72:47:6C:1A:80:DC:B0:8A:BD:B6:39:5F:83:93:53:85:01:C2:03:62
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer:       /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial:       01962E621B954949540E96F92FFB0A37F992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 09:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:43 +0000
Files and hashes:         1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: pRqN0/LqIKbnG2Gt/mJMvXHatknHziLzcwTyS7SdnzM=)
                          2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:1b:95:49:49:54:0e:96:f9:2f:fb:0a:37:f9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
        Validity
            Not Before: Apr 13 09:01:43 2025 GMT
            Not After : Apr 14 09:01:43 2025 GMT
        Subject: CN=72476c1a80dcb08abdb6395f8393538501c20362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:0f:db:13:a8:62:12:6f:b4:ea:02:64:e9:
                    f9:e0:9f:84:2b:ae:0b:61:ba:e5:35:ad:cd:00:cc:
                    82:26:e6:3c:1b:ce:2d:10:d7:ac:4b:dc:d4:fb:e3:
                    e4:52:43:a1:98:c3:b0:5b:e7:e5:ce:7c:f1:83:e5:
                    17:c1:c5:ec:97:61:fa:21:ee:b7:76:b4:b5:07:94:
                    74:6a:f6:dc:22:47:d5:8b:a7:48:d3:ba:65:6b:10:
                    a5:b8:50:18:fa:6c:19:58:7a:f0:41:30:bf:04:46:
                    6c:ee:a8:43:f6:cb:fb:0f:e5:4d:13:6f:49:79:6b:
                    2b:8b:e7:03:9e:cc:de:97:e3:5d:a0:09:c7:44:1b:
                    b1:c6:41:53:85:84:4f:7f:78:60:e8:ca:00:a4:66:
                    2c:6c:12:f1:67:18:40:1e:38:85:8c:82:d4:d1:91:
                    f4:7b:fe:76:b4:1a:29:e2:6e:62:bc:f7:bf:e4:48:
                    36:0b:d1:f7:d9:3a:23:14:a3:57:8d:08:f8:01:83:
                    d6:87:b9:0c:d3:c3:3c:8c:a1:be:1d:89:d8:41:fe:
                    a5:90:60:42:27:d6:a9:65:5b:99:84:f5:1e:75:7a:
                    4e:f3:f6:1e:b7:2a:31:6a:55:4b:05:0c:8c:db:c2:
                    a0:d4:63:34:d8:ed:d1:61:68:77:f8:31:b7:e2:71:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:6C:1A:80:DC:B0:8A:BD:B6:39:5F:83:93:53:85:01:C2:03:62
            X509v3 Authority Key Identifier:
                keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:92:11:d4:b7:5e:30:fd:55:b9:9b:f1:a5:97:7f:19:0c:
         77:a8:48:72:14:f1:1e:17:c9:e2:d1:79:2e:98:d9:7b:20:2d:
         ee:78:78:64:12:a4:be:09:95:44:d4:fd:b8:c4:ba:d3:f4:bd:
         e0:ca:9b:42:c9:2c:da:67:61:e0:43:df:51:42:0d:9b:2b:03:
         c5:91:af:bc:a4:2a:63:9a:0f:ae:1c:2e:b8:0c:df:1e:b5:88:
         43:88:1f:af:35:3c:c4:7d:8f:c4:36:b6:f5:42:5f:87:bc:9f:
         96:7e:aa:b7:2c:ca:1d:03:f1:07:87:72:ef:fd:3f:8c:b7:ae:
         d2:a8:a9:93:c8:c0:9e:53:d3:15:03:55:15:db:1e:d3:c9:c0:
         d5:f7:93:6f:45:b6:25:85:0b:d0:b8:5c:60:2d:18:40:59:c5:
         2a:39:bd:10:f2:c2:bd:2e:eb:e5:45:85:b3:9b:b2:c3:b7:6f:
         34:a4:a5:5f:d4:eb:70:fb:e0:98:81:cb:f5:f8:15:32:a0:ed:
         d8:15:8d:08:a2:01:53:42:1b:25:8f:16:a9:4e:fe:7a:06:62:
         45:44:36:a7:7a:20:0f:89:1f:a4:8b:2f:60:ca:5b:96:70:8f:
         f4:35:28:71:41:c6:c2:ac:83:d2:fa:9a:cd:d0:4c:2f:4e:4d:
         d7:5f:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----