Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File:                     QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier:          SlStqk9FjthJKspguS3A6EA6uuG/Kw7X0TCiShi3vqk=
Subject key identifier:   E0:7C:C6:A8:75:31:62:98:C1:C6:65:A6:23:59:C3:03:A3:6B:C0:43
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer:       /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial:       01962FAB2A65A735CB9B0EAE333B11AB9DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number:          0650
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
                          2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: Zkuv6gyRy+JMbRP0cHcdqjKM1SBGtNNG2v4p5SxSJXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2a:65:a7:35:cb:9b:0e:ae:33:3b:11:ab:9d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=e07cc6a875316298c1c665a62359c303a36bc043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:58:39:0c:68:a9:4e:11:73:0d:d9:9f:60:94:
                    ec:ac:f0:d2:75:3c:60:17:04:a1:0f:6c:5b:36:00:
                    16:1c:8c:79:03:a5:0f:67:c0:7d:00:a7:a0:b5:06:
                    28:82:4a:bc:7e:89:f8:30:8e:23:ca:38:8b:82:a0:
                    80:e2:46:19:0c:b8:8c:05:1b:f6:6c:41:8e:8c:6d:
                    68:af:70:6b:67:18:46:3d:a6:6e:52:3d:60:dc:3d:
                    fc:ed:c6:e2:0a:af:0f:d5:d5:09:a4:7c:78:0d:61:
                    9c:69:8b:84:f8:25:0e:3a:47:10:3d:1f:1e:da:ad:
                    19:bb:7b:df:e1:0d:31:56:9e:02:35:88:e9:f5:bf:
                    7c:fa:ba:76:96:fc:3c:10:ef:63:25:3a:eb:47:e4:
                    9b:59:1e:9f:54:7b:88:d1:9d:a9:fe:81:72:46:00:
                    01:23:3d:9e:28:f9:00:02:ac:3f:49:bf:fb:a4:dc:
                    a4:d0:a5:0b:25:bc:8c:8e:f3:bb:7a:7b:f1:9e:57:
                    b2:00:d4:04:29:69:0f:aa:d6:dd:92:36:45:b4:ba:
                    ed:38:00:2e:1f:3e:6b:ce:7a:84:35:61:eb:48:9f:
                    f2:42:db:6d:06:48:d6:f5:b9:f1:2e:14:2b:01:25:
                    e7:d1:54:10:a5:68:9f:21:14:4a:c8:22:6f:30:0f:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:C6:A8:75:31:62:98:C1:C6:65:A6:23:59:C3:03:A3:6B:C0:43
            X509v3 Authority Key Identifier:
                keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d9:86:7c:88:b3:a3:f4:9a:8e:c6:ee:9c:b0:31:02:f1:9c:
         f9:d9:4a:7a:dc:d9:e3:84:50:76:9a:a0:bc:32:cf:cd:eb:45:
         d8:7f:09:d0:30:e9:e1:20:7f:9a:34:b2:39:dd:f5:36:c5:1e:
         1f:12:68:41:74:51:ea:25:b9:ac:ea:be:00:d7:5b:7b:c1:17:
         1c:bc:93:43:7c:6a:cd:10:1c:1f:25:8b:bb:14:6f:37:ef:45:
         93:5d:92:34:8f:82:54:bd:72:19:45:9e:28:34:d9:32:65:a0:
         00:c1:6e:57:1f:ca:18:ad:60:ac:ed:b6:5f:28:24:f2:d8:b2:
         76:01:d8:12:43:91:e5:be:33:92:4d:34:87:c6:96:bd:86:fd:
         14:67:19:c2:85:0c:46:ae:f5:f6:a5:31:68:4c:70:fb:3c:08:
         33:2f:63:34:60:f9:a3:f0:0c:13:99:cb:81:93:f9:3f:1a:59:
         b5:21:bd:18:75:06:83:25:14:41:70:40:2a:08:73:e9:a5:7d:
         f7:54:a1:66:ff:4a:18:24:60:ac:d7:3a:a2:25:4f:f4:6b:ea:
         41:ee:a6:5d:8f:1e:6b:1f:47:81:5e:ad:e9:96:f4:bc:4d:52:
         50:db:49:53:3b:60:91:53:a9:68:61:d1:2f:42:85:96:45:f6:
         24:ee:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----