Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
File:                     q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft (raw, json)
Hash identifier:          P2eqwMrj+9TuVpozf5wpvwXcBWn3tKz+ilZf9D3MVrc=
Subject key identifier:   CC:EA:35:51:0C:0A:D2:30:B2:C7:96:95:2F:6F:56:C1:12:48:90:FB
Authority key identifier: AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C
Certificate issuer:       /CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
Certificate serial:       01962E2B0C597698CA10384F4AFDBD4318F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
Manifest number:          04B0
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: WWXaaN1zwBirDLU3BmnsrZPd1-s.roa (hash: ZqdlSOebOyA4siBcQOkN6AJQaX0krOyaiW9rxlzSPYA=)
                          2: q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl (hash: g4EAAW14bvXTIpDEnhjrR6tvcyzQl2q0SZn/w4v8GsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:59:76:98:ca:10:38:4f:4a:fd:bd:43:18:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=ccea35510c0ad230b2c796952f6f56c1124890fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:80:61:4d:22:a1:1a:3d:d5:c0:b6:e5:c7:50:
                    32:da:5e:6c:ef:54:d5:2e:1c:8e:9e:fe:34:b8:ac:
                    14:ef:6c:68:31:4c:36:e3:b9:3e:00:73:e2:65:a4:
                    f7:ba:5a:36:74:2c:47:c1:1f:18:4c:c7:44:94:84:
                    fa:1a:21:cf:c7:f6:2f:ef:18:d8:d9:31:99:f7:4f:
                    5f:91:4e:fe:a4:5b:24:62:76:3e:b4:eb:33:1d:20:
                    8c:50:5a:0f:c8:d9:31:65:06:ab:07:b8:80:29:55:
                    2c:d7:6a:fc:e1:a0:d2:d4:9e:42:7a:5f:ba:a9:ff:
                    be:8a:7d:d3:58:1e:17:d6:e6:28:c6:78:46:46:d4:
                    71:13:4b:61:5b:3b:ab:e5:50:e6:f6:2e:d5:cf:64:
                    9b:39:98:bd:46:8b:e7:05:f4:80:9b:8a:5a:ed:ae:
                    23:8a:56:14:a2:41:e9:f4:e5:23:8d:49:d0:fa:eb:
                    db:e7:94:cf:2b:60:d8:ed:5d:4b:dd:d3:7b:e9:af:
                    84:9b:ee:ac:04:08:d4:a7:dd:01:14:cc:e8:c5:7e:
                    1b:e0:92:34:b9:99:ad:fd:62:d7:6b:ad:18:bf:3b:
                    19:00:92:c3:7e:0f:7e:25:6b:7b:23:6b:30:72:98:
                    4d:f8:86:ac:64:a5:92:7c:bd:f3:67:df:ad:4c:4f:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:35:51:0C:0A:D2:30:B2:C7:96:95:2F:6F:56:C1:12:48:90:FB
            X509v3 Authority Key Identifier:
                keyid:AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:42:da:52:1f:39:0e:d9:aa:3c:21:9f:d4:e9:90:8a:02:82:
         05:be:5e:e0:b4:d4:62:34:8d:eb:d9:8d:a1:ca:99:01:6e:fe:
         8a:7a:43:22:3f:bd:42:95:ef:c3:c2:e3:ca:a2:8b:2a:53:44:
         ad:be:b9:74:87:f6:c3:ae:2c:5c:3c:ac:82:a8:74:ad:00:39:
         54:23:33:64:0d:bd:1d:b2:e1:24:74:03:b4:19:14:ec:2a:97:
         5d:35:6d:e9:13:47:9c:f3:4d:39:51:30:36:c4:68:a0:96:a7:
         df:13:bd:dc:d9:89:ee:8e:86:69:53:f6:37:21:62:84:71:63:
         09:d8:9c:e9:77:c4:42:02:c2:5c:3d:f4:ef:5e:d2:74:c7:91:
         8f:f4:5f:4f:3d:f9:a7:c1:38:70:8c:a6:69:39:9d:b5:05:69:
         99:84:89:df:91:6a:2a:91:92:4b:34:a4:29:c3:f2:0f:06:8a:
         d2:cb:7e:c5:5c:50:9b:3f:7a:ad:23:3c:3e:78:08:13:36:6d:
         9d:c0:14:26:b1:a1:9f:da:b1:29:df:cf:ea:e0:e4:4f:47:12:
         e1:44:b8:36:1e:1d:59:a9:6b:da:87:9f:22:2d:39:6d:76:a9:
         b9:d3:a1:62:5d:8e:09:09:9d:0c:b1:3e:e7:45:84:fc:8d:1f:
         21:a5:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----