Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File:                     qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier:          bYqqiFWczUmBOu4tMucprm95mZ+4iW70jrQUz7tQw8g=
Subject key identifier:   71:AF:4C:F3:7C:96:8E:F0:81:61:0A:F5:B6:E2:86:A3:99:8F:92:97
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer:       /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial:       01962DF43BA601EBA98B42592B69E8C0FEFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number:          1326
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: jmms1nLdE29K2y57nHZ1TV0/N8upWKD+rhR77GhCQJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3b:a6:01:eb:a9:8b:42:59:2b:69:e8:c0:fe:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=71af4cf37c968ef081610af5b6e286a3998f9297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:1d:98:46:24:0a:98:e8:4c:b9:9d:a8:a8:
                    8d:9a:7c:40:4c:e5:fb:2a:24:33:5e:27:cb:71:95:
                    14:b2:4c:9c:42:cc:09:ac:cd:9d:c3:94:38:7c:2c:
                    72:72:bf:24:2c:34:68:4c:d9:55:fd:09:4b:90:68:
                    52:8f:78:6c:68:67:fb:60:d4:70:03:81:8a:b9:09:
                    4e:55:86:f6:a9:fd:0a:d8:f0:a8:ac:94:0a:2b:b9:
                    ca:87:b8:26:7e:28:79:79:89:27:19:49:22:22:51:
                    92:41:3f:76:8a:e3:9f:91:66:b2:07:12:9e:06:86:
                    e3:12:2d:aa:5c:6d:d8:f7:b6:8b:4e:17:56:9b:5b:
                    e5:dc:7a:c8:78:d1:f6:23:e9:c4:0e:56:97:1c:b2:
                    05:b7:bd:d4:9e:81:ea:31:dc:04:d0:03:46:d2:f3:
                    14:86:df:02:bc:1e:3e:e7:ea:80:f9:8d:8b:7a:27:
                    19:0d:d7:fd:45:65:89:2f:61:a6:d5:e7:dd:a0:be:
                    29:24:66:e7:97:e4:4f:1e:7a:2f:a4:53:f3:0a:f5:
                    f3:e6:f2:60:d8:f5:1c:94:f9:af:d2:86:bc:04:9d:
                    3f:e6:c5:62:8c:d0:1a:f4:56:03:83:37:1e:af:b7:
                    2b:e1:33:0a:b5:6d:f9:df:2d:5a:46:4d:07:ea:9f:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AF:4C:F3:7C:96:8E:F0:81:61:0A:F5:B6:E2:86:A3:99:8F:92:97
            X509v3 Authority Key Identifier:
                keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:df:d9:4c:41:bf:df:89:c8:50:76:84:e4:e8:0a:df:7d:8c:
         27:bb:ac:0d:8d:0f:1a:06:26:c7:ce:89:a2:c6:99:0e:ad:41:
         16:dc:10:a9:69:0f:34:20:85:14:6a:b6:5b:55:77:b8:b0:f5:
         da:f6:31:bd:fd:3f:c1:e0:91:09:89:62:a1:64:b1:7c:09:3d:
         75:0f:16:ab:5c:97:34:83:f4:f1:34:c2:6d:47:19:16:30:5f:
         af:1d:c2:4e:ae:1e:14:c7:e1:5c:93:86:43:fa:bb:50:fc:b0:
         28:20:28:f9:6c:5d:57:d9:af:df:95:16:16:a3:19:1e:37:de:
         eb:fd:f5:5b:eb:61:2b:36:85:24:9b:6d:9e:30:6a:8d:0d:d4:
         d5:ff:43:5d:e8:74:6a:04:1d:a2:8b:81:1a:1f:75:97:0b:82:
         12:73:86:99:90:68:92:96:be:14:e3:28:47:aa:e2:8a:ad:b9:
         19:46:3e:b7:f7:91:b6:c8:78:dc:48:25:35:b7:7c:52:35:e4:
         fa:49:bd:0b:be:05:64:c3:57:cd:45:38:02:52:00:f4:44:82:
         a6:21:e5:78:fb:8a:1e:03:1d:c2:36:50:2a:16:75:4c:de:03:
         7d:36:fe:1a:e2:0c:5a:ea:cc:d6:6c:1b:e1:b2:ee:1d:8a:8a:
         4f:e6:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----