Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File:                     qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier:          N4Vi17A/V8d+lKcSVzKvQcFPERn+8rgHoWgGgwZehZ4=
Subject key identifier:   C2:C1:AC:F1:40:7A:B2:FA:32:A6:C9:DD:29:2C:07:40:1B:9A:17:2B
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer:       /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial:       01962E61D33613A1B4CA1AEB9E46F27EAAD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number:          0318
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: R0bDzTZMsFHuXIVscoarjoJ_wTM.roa (hash: 9HD9aEc03IRoCnCCjg3LQXd12HLkqdNv34Xu2fVDTFY=)
                          2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: 2XM70eP0X+Y+db73krbbnbxMUTVjQ1y7DCI7NMjI3WM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d3:36:13:a1:b4:ca:1a:eb:9e:46:f2:7e:aa:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=c2c1acf1407ab2fa32a6c9dd292c07401b9a172b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:69:99:50:a9:2d:73:61:f2:d8:4c:a0:61:
                    fb:75:0f:08:1d:ba:67:ec:46:99:b4:3f:2c:a3:5d:
                    ff:38:c1:12:77:51:7e:37:f8:38:b0:bc:b1:19:fb:
                    13:aa:bc:74:56:5e:c5:d4:1a:c6:99:70:2e:18:de:
                    e3:06:35:25:92:f7:fa:e2:9a:b5:47:17:fa:ed:4d:
                    ac:27:1f:11:a0:32:5a:b9:04:fd:6d:6a:b8:10:80:
                    91:6b:f4:ae:bf:ef:50:08:a0:34:d7:82:38:fc:23:
                    14:07:8e:b9:42:02:c0:8f:27:ec:6b:bc:b0:1c:dc:
                    e3:75:56:08:ac:88:dc:41:f1:47:4d:fa:36:68:6f:
                    25:1c:7f:9f:cd:cf:68:4a:f4:8d:5f:5f:3d:b2:21:
                    81:29:a7:f1:89:c0:57:69:f0:cb:f5:db:f2:1f:5a:
                    9b:72:a3:d0:e7:80:9b:4c:95:23:f3:fc:27:74:9d:
                    7c:9f:62:f6:db:70:58:76:28:72:1a:cd:22:a0:9c:
                    bb:14:1b:d3:39:6d:82:b3:d8:68:af:6d:28:b4:7d:
                    8a:c3:cf:af:72:c2:1e:0f:70:f2:d8:0d:53:3d:ce:
                    04:30:fa:69:a2:ed:7a:9f:26:dc:00:ea:76:07:13:
                    8d:03:fc:81:da:1f:cf:02:ce:27:a4:2e:55:7b:99:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C1:AC:F1:40:7A:B2:FA:32:A6:C9:DD:29:2C:07:40:1B:9A:17:2B
            X509v3 Authority Key Identifier:
                keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:de:d8:81:52:03:96:40:3f:20:08:d6:c9:00:27:ce:25:84:
         68:23:13:a6:02:0f:40:f7:d2:60:66:8c:8c:3c:7d:fd:6d:c1:
         ab:6a:53:cc:77:8c:b8:eb:2a:72:f1:a1:58:4e:c1:69:a6:3b:
         9d:1a:c2:fe:96:9b:9d:af:fd:90:b8:11:a6:fc:f7:aa:e2:f9:
         32:cc:a4:1f:51:07:27:5a:7e:e3:8b:e3:25:d1:9e:f9:a4:84:
         ef:f1:1b:e4:00:69:9e:a0:bd:79:a8:4f:85:93:a2:a0:f4:f5:
         54:15:66:6e:f8:c9:ca:de:52:43:76:39:05:8f:a7:43:68:a4:
         d2:6d:86:11:38:ae:63:76:b8:96:1e:1f:1b:a5:e5:01:68:c4:
         10:d6:87:59:e9:26:93:47:a1:52:1a:25:47:a1:b1:03:95:9f:
         d1:49:37:47:d9:e0:fd:91:c8:fd:6b:4e:af:60:36:08:71:0a:
         b7:ce:6f:16:a1:a7:0d:ca:22:04:10:70:b7:44:f5:dc:c8:f2:
         40:97:b2:6e:87:53:43:ed:82:ac:9e:5d:3a:f1:af:2f:89:90:
         7c:4f:03:4e:3e:62:8b:b6:dc:2a:ba:25:a1:bb:08:41:e0:8e:
         2e:3c:77:8a:ac:ac:3f:cc:d0:d6:bc:55:fc:03:c8:2c:ea:e2:
         ce:ce:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----