Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File:                     0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier:          PFbS313Snf7lf1tW8PuQDnkfOtyoOFcpILi76X8Z8y8=
Subject key identifier:   48:5E:E1:A2:4C:6B:13:34:C0:DF:D2:C7:35:22:19:B6:38:C2:C2:1D
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer:       /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial:       01962E2B44178DA89786D3526DC6F5861201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number:          0C77
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: doz/5b/FY2k2p3NmsZxhGgWaYHxlNIyK2Xmav0w5FJI=)
                          2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:44:17:8d:a8:97:86:d3:52:6d:c6:f5:86:12:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2abab75e746db1ecaa998759900399485093027
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=485ee1a24c6b1334c0dfd2c7352219b638c2c21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:9e:2b:9a:b2:62:cf:a8:7e:41:11:09:90:
                    31:07:50:bd:93:df:e6:fc:28:69:12:99:ba:fc:60:
                    5e:1d:09:aa:2c:4f:bc:28:06:d8:3b:85:a8:51:79:
                    7d:f2:d2:35:33:d3:df:b0:a2:11:0a:44:c9:36:f1:
                    ed:eb:dc:d9:5c:60:8b:b8:d8:a9:1f:b2:4d:2b:3d:
                    9a:af:22:d6:e0:ff:b2:48:4e:cc:50:c6:8d:87:4c:
                    5b:77:1d:fb:bf:77:a9:c8:0e:6d:7e:d6:67:a6:0f:
                    7a:36:14:df:f5:23:32:c7:21:07:e4:96:ab:a2:2f:
                    db:13:a1:cb:5a:f8:9b:5e:eb:e9:89:95:2c:da:d6:
                    e4:84:9e:a8:00:1d:02:65:db:66:f5:ea:49:43:96:
                    4a:96:dc:17:86:d3:f3:b4:0f:23:78:1c:53:8d:19:
                    01:14:84:64:5d:5b:b0:b4:ba:22:9f:cb:4a:57:4b:
                    84:46:da:7a:d8:50:39:31:9d:7c:be:1e:6d:38:dd:
                    b5:99:25:20:f0:42:6a:63:67:3a:99:99:49:7f:27:
                    e0:03:1f:66:b7:57:4c:8f:fc:05:12:29:4c:ec:27:
                    0f:92:eb:aa:34:e0:49:fe:66:61:75:c0:c1:68:2a:
                    d1:93:78:39:9e:c7:eb:b4:02:1d:ce:7b:ed:2f:0a:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5E:E1:A2:4C:6B:13:34:C0:DF:D2:C7:35:22:19:B6:38:C2:C2:1D
            X509v3 Authority Key Identifier:
                keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:74:04:28:5f:74:c1:4e:8a:f9:39:40:f8:e2:13:94:fc:
         39:1a:06:eb:2f:42:9d:92:d8:e7:43:b0:01:c6:64:9b:25:ad:
         64:6f:21:0d:8f:5f:79:88:36:2d:f6:d6:f4:08:7a:97:f3:30:
         78:1c:66:0a:32:a4:6a:30:8f:0d:de:e1:b5:45:57:65:6c:16:
         f0:34:2b:18:93:7e:62:ad:33:02:b2:84:2a:60:45:06:da:2d:
         5b:19:c6:67:c6:11:7a:ee:46:7c:c8:08:0b:88:d2:fa:e2:e8:
         7e:df:a1:c3:67:7b:91:58:e9:a5:22:c5:4e:30:f7:cb:67:bf:
         12:4d:7b:d6:0c:f3:5b:cc:14:08:07:f7:ce:cc:e8:c9:79:a6:
         7e:5f:85:06:a5:a8:31:26:f0:08:64:32:1b:0a:cb:91:3d:7a:
         67:73:ec:4e:a6:be:56:c1:1b:70:78:a0:6b:ec:d0:94:46:1e:
         a5:20:ce:01:ac:d1:77:d7:fe:a6:7c:18:c3:64:d4:6c:f1:78:
         06:39:58:aa:89:eb:4e:62:3b:84:25:6c:6e:88:03:ab:70:bf:
         0e:21:c1:15:23:a1:55:ca:61:28:5d:97:2b:1b:e1:10:55:3d:
         f8:3b:5b:0b:26:0c:e9:72:07:8d:1d:9d:dd:e7:95:08:42:d6:
         2f:d5:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----