Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          aUgzAPRUckoCNy7Ibk8JfpvWvOvmDgyNTGjCmMV0/14=
Subject key identifier:   64:D8:1B:C9:E8:42:6C:CC:41:41:F5:71:9E:0B:FC:B8:EE:94:BA:7B
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       01962E99734A2B86973B56C05EB184C0A6D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0BC0
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: LNV6UgyUh7E+ayI7dPXu6e+IB8cZZ9aOYc1I+PngRKw=)
                          2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:4a:2b:86:97:3b:56:c0:5e:b1:84:c0:a6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=64d81bc9e8426ccc4141f5719e0bfcb8ee94ba7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:9a:98:48:b2:a2:54:02:86:89:61:a8:53:
                    4e:db:5a:b2:be:ec:95:fb:f8:29:c7:5a:38:27:6c:
                    f3:47:77:f7:0e:c3:a6:8a:2b:0a:a7:4f:e9:2d:14:
                    96:9f:88:3e:5c:bb:41:f0:7e:04:2e:84:02:c6:ab:
                    f9:02:27:b7:e4:b9:44:72:5a:91:6a:31:51:4b:58:
                    44:f7:25:3a:2c:82:ed:a9:02:bb:21:c0:8e:04:d9:
                    c3:cd:d1:f7:e7:f9:86:de:ba:73:2c:2e:02:10:ed:
                    9d:f9:e8:a1:09:93:52:af:e2:ba:68:9b:9b:b2:fc:
                    4b:fd:ab:84:c4:06:57:01:5f:3f:d5:34:c2:83:bd:
                    56:bc:96:ef:e2:38:d9:94:13:65:07:f1:a4:91:51:
                    8f:bc:e2:d1:5b:08:a1:33:8f:9d:7b:58:48:b1:82:
                    67:06:96:cc:b5:db:75:66:20:c0:41:9e:b3:ed:f2:
                    cc:3d:36:f4:52:60:66:36:0b:bc:23:dd:8f:20:d4:
                    da:f1:c9:82:85:4c:ed:f0:86:7a:40:a5:1d:08:6c:
                    36:23:fd:de:44:4f:1f:dd:62:ea:16:09:c0:fe:fe:
                    9a:fd:ff:cf:b8:b7:76:f1:bd:ec:83:55:7b:b6:b6:
                    04:d9:10:f3:db:3e:7f:a9:e8:2c:35:84:8d:4c:fa:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D8:1B:C9:E8:42:6C:CC:41:41:F5:71:9E:0B:FC:B8:EE:94:BA:7B
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:8e:53:46:1b:23:1f:19:ff:0f:65:fa:02:ce:07:8f:d1:
         0c:e7:ab:7f:6f:8c:4a:03:6b:15:e0:17:46:65:b3:82:49:f6:
         96:d6:71:1e:79:a8:a4:42:c2:e7:31:55:c1:4c:ca:56:00:68:
         88:c5:dc:c5:4c:ed:5a:03:b9:02:7c:d7:b1:25:4a:c1:44:3d:
         45:3b:ce:00:d0:ee:2b:9a:10:58:31:25:c5:71:d2:6f:fc:46:
         df:b4:78:ac:12:db:cc:15:e0:fd:e0:f3:0d:3c:11:46:bd:e4:
         4a:8a:2e:b7:eb:8b:de:ff:c0:59:9a:4e:69:aa:f9:2c:3f:64:
         8a:f5:11:88:65:0a:e3:07:e4:26:51:1c:4a:a9:52:23:81:fd:
         1d:8a:ce:e7:ec:49:96:13:a3:39:89:39:54:ba:f1:df:cc:4f:
         38:3d:31:ca:3a:32:c9:bc:43:5f:0d:01:63:a7:f4:d7:b2:88:
         5d:a4:93:e7:6b:b1:c3:a3:01:70:52:09:38:67:9b:c0:a3:3d:
         77:65:c6:52:60:b1:c1:1f:bd:75:2b:6f:d4:91:c5:f1:8c:50:
         a4:9d:72:76:ed:b3:f3:ba:3c:a8:a5:71:68:f8:22:10:ec:53:
         0d:e7:16:a8:52:47:3a:26:01:cd:8e:fc:09:0d:14:43:ca:41:
         da:34:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----