Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File:                     QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier:          Nn4HeA7qhlnt7vJojzaT85Sf61VvRb15X/ex3VUiyrg=
Subject key identifier:   03:ED:6F:9A:4F:0C:9C:EE:FC:03:72:5A:79:DE:66:94:D1:F1:15:59
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer:       /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial:       01962DF3E444EE3EEAB99F33A44A45E9EFFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number:          0445
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: KZYzQ7jFzWYYwYRhQ-ZJNAP7g7s.roa (hash: bwXn17r3CjUQeiw9goACwMSayH6c9Rjo8urDQ0LO3DQ=)
                          2: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: YKur1ylZX5Nk0zOV8E5Q68Qml4NyRpKEbivk7Ef2O24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:44:ee:3e:ea:b9:9f:33:a4:4a:45:e9:ef:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=03ed6f9a4f0c9ceefc03725a79de6694d1f11559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:33:eb:a4:53:2c:cd:c2:f6:84:1f:18:2d:
                    46:c4:87:34:a2:16:9d:46:6b:23:0b:f9:98:64:ae:
                    8c:01:b9:cb:bb:53:41:09:45:46:34:d6:a4:8c:f7:
                    76:39:0a:be:1c:3a:e0:b8:f7:22:6c:30:11:6e:af:
                    2d:09:70:9e:1c:32:5a:4d:60:46:8d:42:bb:50:97:
                    cb:e2:e4:6a:9b:27:f2:ad:15:17:12:60:b8:49:bc:
                    87:e8:dc:0d:c6:da:05:96:d3:49:d7:96:34:79:a9:
                    64:63:06:e8:04:d6:c8:d2:f4:e6:0f:4a:1c:65:a7:
                    d1:fc:c6:4f:d2:5b:3a:03:2e:02:2e:f9:08:ee:a9:
                    d0:5b:d6:70:95:7f:e1:6b:c1:2d:56:db:2b:a8:bf:
                    65:4d:70:22:c5:3b:5b:d8:b1:bb:1d:0d:16:4f:7f:
                    40:23:56:a1:e3:c1:3c:df:a5:e1:25:0f:ad:a1:77:
                    37:a5:73:36:6e:e1:4a:34:3e:86:f7:aa:ad:7b:9c:
                    c0:26:9c:cd:6c:b0:13:16:1b:e4:2a:b6:5e:0b:b2:
                    56:7f:35:d8:00:bb:d4:5d:90:c2:57:88:83:dc:cc:
                    6f:e2:e3:5b:34:d8:1a:76:49:aa:be:75:32:ca:67:
                    8f:6b:0a:f8:c2:a7:d9:e1:16:0e:b4:81:02:91:ae:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:ED:6F:9A:4F:0C:9C:EE:FC:03:72:5A:79:DE:66:94:D1:F1:15:59
            X509v3 Authority Key Identifier:
                keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:7d:45:c4:be:3d:27:4a:82:50:fe:9c:de:74:fa:ae:69:
         43:7b:4e:93:59:86:87:42:52:6c:fa:6d:2e:97:08:51:8c:b8:
         6f:5e:d8:f9:30:e7:9c:aa:20:cf:95:b0:55:e9:dd:10:89:26:
         99:fb:34:bc:26:2a:3d:ba:93:b2:7e:a1:f8:59:96:a3:3b:7c:
         1e:06:7f:f7:fc:9b:22:5c:d0:95:7c:3e:51:e4:db:b9:e2:c5:
         96:11:37:8c:0a:7a:48:72:38:ed:7f:d1:8f:29:65:df:34:70:
         e3:49:08:ad:c2:70:99:47:a3:28:a5:91:44:c8:5e:49:5c:52:
         88:60:3e:7c:ad:18:32:60:a1:8b:f6:7a:02:26:fa:d4:f3:a2:
         d5:2c:da:5e:0c:ec:c9:d1:e0:be:51:88:e3:1d:2e:34:93:85:
         08:ab:99:73:0c:45:b7:f1:d4:82:77:d1:9d:9e:fa:79:5c:f4:
         6d:b5:38:d3:92:e8:5c:f2:a0:11:d0:72:d8:04:d7:cd:40:01:
         2c:ff:55:eb:ad:ca:c2:fe:be:94:16:0d:23:44:0c:c0:e0:30:
         9e:59:f4:ce:50:5f:fe:ed:57:70:da:f8:22:47:fb:08:c2:33:
         27:5b:cc:43:45:08:69:53:a6:75:f0:6e:1b:84:1f:ea:9e:91:
         c9:e2:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----