Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File:                     qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier:          4nuhm9jhFOHkJbfOqzp4Pb2nmPjV5dFGU6NCnM2G2rg=
Subject key identifier:   A7:FC:5B:21:50:19:47:B6:D9:D8:A6:C4:88:33:0A:15:15:5E:30:6B
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer:       /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial:       01962E2B316C3AC29B1B807388BAB9DC5BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number:          0256
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 5lkgevE67JqLPCJiuIVDQvx8C9s.roa (hash: TbV0l1n+K1FvkmmG4RWk4U+vij9oLV2Tx8NUa3IQ8as=)
                          2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: v1LlHB1/kVcH6xsTi+i08h9JmT7PAvCZCgHKJng3Y3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:31:6c:3a:c2:9b:1b:80:73:88:ba:b9:dc:5b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=a7fc5b21501947b6d9d8a6c488330a15155e306b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:cb:c3:92:29:ac:66:18:6e:3b:0c:6a:f2:
                    04:0f:d8:d9:a2:f9:3d:9a:cc:e5:1d:0f:1c:d0:37:
                    1e:df:06:db:86:90:a8:3f:3c:f8:e2:d9:89:52:4c:
                    c6:29:48:52:07:8d:dd:29:18:fe:70:11:99:55:57:
                    cf:ce:ed:26:df:e9:e3:53:af:5c:6d:e0:6b:9e:86:
                    60:63:37:b8:43:97:8c:90:8c:dc:cb:71:75:c1:ff:
                    5f:be:1c:b8:21:99:78:24:74:e2:d4:cb:65:ff:85:
                    d7:d8:58:f7:d5:d4:a7:11:f5:b0:bc:29:40:4c:54:
                    e7:9d:14:06:9e:3d:77:68:cd:b5:0b:7f:4c:a5:8f:
                    b7:d8:18:e7:6f:6a:ab:d7:80:a4:5a:1b:84:ab:3d:
                    9e:77:33:47:dd:6d:09:3c:0d:40:c4:bb:f9:12:f8:
                    b3:2b:ae:75:5a:1a:1a:21:da:72:a7:11:b5:f9:63:
                    66:71:b4:19:c3:8b:03:c6:b9:cb:36:08:2d:b2:b7:
                    ac:a7:cd:d1:89:ac:cd:64:74:28:8e:0c:ea:71:40:
                    b7:5b:db:81:c6:25:8e:38:69:53:2d:80:04:3b:0f:
                    43:ab:da:0a:02:1e:51:aa:10:c4:10:9c:4f:8d:8d:
                    df:d5:c7:45:83:b6:c0:9c:22:20:75:4b:b9:d9:95:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FC:5B:21:50:19:47:B6:D9:D8:A6:C4:88:33:0A:15:15:5E:30:6B
            X509v3 Authority Key Identifier:
                keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:37:28:d6:4f:05:f7:a4:d1:eb:46:85:fb:e1:5d:df:13:
         3d:d4:3f:7d:f9:aa:62:b3:48:6b:e6:6f:eb:7a:b5:3e:65:1f:
         43:59:07:25:83:14:3b:90:6e:92:03:e5:ab:dd:cb:30:dd:3c:
         29:1f:50:d3:af:d6:19:72:73:f7:9c:0c:34:11:69:c1:29:7a:
         a5:a2:a9:2e:79:a5:44:a3:92:02:db:dc:65:a1:4f:ec:ca:d0:
         71:c1:21:10:a5:89:2d:72:79:2a:20:39:b2:a8:59:d1:1d:a5:
         ba:2a:ab:5a:60:2d:db:12:64:2b:73:7e:7e:f7:85:3c:ac:5d:
         20:ea:05:20:d1:16:4c:38:7b:38:2e:57:a2:46:60:67:59:17:
         ca:52:5a:d6:4e:f8:2a:67:e3:00:52:d6:e2:0f:c8:04:33:69:
         5f:d5:f7:7e:75:38:23:0d:99:5e:1e:3a:d5:81:ca:ae:8d:78:
         2f:50:62:6c:ed:8b:92:93:3e:25:a1:6c:c5:b9:1d:e7:db:b0:
         f4:d7:dd:f6:ab:9e:ba:81:76:c3:5d:4c:8f:83:9c:ae:05:30:
         56:2a:6b:d6:e9:98:ed:ba:77:95:21:2b:76:0a:90:da:03:c8:
         91:83:0d:ca:7e:e9:88:f2:fc:7d:37:2c:59:de:79:82:23:50:
         e4:12:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----