Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.mft
File:                     QzFPMPOkU_9JIh2VStgCijBKAVA.mft (raw, json)
Hash identifier:          iFq2WwUQBnt6N9lIKUl690SiiFfyxkQy7Dq0rk/hkVM=
Subject key identifier:   AC:D6:1F:00:25:AB:B0:D3:B4:06:AB:FD:E7:8B:20:EC:29:0C:D0:06
Authority key identifier: 43:31:4F:30:F3:A4:53:FF:49:22:1D:95:4A:D8:02:8A:30:4A:01:50
Certificate issuer:       /CN=43314f30f3a453ff49221d954ad8028a304a0150
Certificate serial:       01962F068308721F5CDBE892113F35446355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QzFPMPOkU_9JIh2VStgCijBKAVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: QzFPMPOkU_9JIh2VStgCijBKAVA.crl (hash: uNSB/vN78CCXtQTCNjt9JsNvZsCzm6Z3PkOyry4tr1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:83:08:72:1f:5c:db:e8:92:11:3f:35:44:63:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43314f30f3a453ff49221d954ad8028a304a0150
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=acd61f0025abb0d3b406abfde78b20ec290cd006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:a6:7d:68:14:8d:62:c0:ea:4a:67:90:f8:
                    6b:60:91:89:6f:eb:2f:ce:78:1c:7d:97:e2:7e:40:
                    88:04:3e:c0:ff:0b:37:37:16:f7:60:b2:04:be:b2:
                    4a:ef:3f:63:57:e6:77:80:cf:39:c3:9d:a7:7d:5d:
                    de:c9:83:2f:4d:65:ba:0c:c7:1d:e1:a6:ad:6f:50:
                    8c:01:53:88:f3:a6:c3:98:b6:ac:17:51:d9:a0:07:
                    7e:a3:b1:74:b3:af:46:37:1a:1e:65:fd:75:e3:e6:
                    e5:f2:40:af:af:58:8b:84:3e:07:26:bf:29:f8:96:
                    42:8e:a5:76:c8:a1:71:49:7c:f3:bf:7a:96:b6:08:
                    3a:49:11:8f:91:92:eb:28:06:9d:f0:5e:45:9f:70:
                    26:a0:72:b1:3c:f3:84:d6:70:d0:57:0a:12:c9:0c:
                    2d:3a:11:e5:92:57:86:da:7c:ff:0d:7d:97:ff:78:
                    c4:e6:16:eb:83:82:c7:af:28:5f:c2:84:ed:19:a1:
                    34:d6:9b:5c:7c:47:4d:0e:91:f6:83:45:5a:81:5c:
                    32:02:a6:56:a0:66:25:5a:b9:39:ee:20:04:23:8c:
                    ee:26:e1:1a:94:d2:c3:58:5e:38:cc:67:af:af:57:
                    d4:7d:74:13:41:50:08:79:73:b2:99:6c:87:6b:ba:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D6:1F:00:25:AB:B0:D3:B4:06:AB:FD:E7:8B:20:EC:29:0C:D0:06
            X509v3 Authority Key Identifier:
                keyid:43:31:4F:30:F3:A4:53:FF:49:22:1D:95:4A:D8:02:8A:30:4A:01:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzFPMPOkU_9JIh2VStgCijBKAVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:8b:1c:70:7e:5c:cd:0a:a4:84:98:8b:25:e3:88:49:df:
         72:f1:74:91:5a:b5:25:e1:1c:23:cc:ab:84:94:4b:20:1a:86:
         f1:1f:77:87:2f:7e:0d:69:70:51:e5:f9:24:2f:87:85:bb:ef:
         2c:5e:fb:61:72:75:2b:73:ee:fc:47:fa:9f:a2:d0:9b:28:a7:
         a9:9f:fb:44:42:d3:c0:90:61:27:d7:04:a6:0c:ef:62:78:5a:
         51:9b:2d:6f:74:b4:a5:26:08:52:9a:4c:ca:49:c1:9c:76:73:
         d8:3b:c2:07:c8:03:b3:a5:2b:c2:97:20:30:f1:52:06:7d:a0:
         77:bc:6d:4d:cc:3d:74:1a:a5:46:d4:29:c5:9e:9e:5d:62:53:
         73:5e:10:93:80:44:64:60:67:33:9b:25:0a:9c:48:f7:a5:ea:
         3a:a2:50:85:4b:c0:9c:8e:a6:fa:24:ad:d9:0e:07:26:f6:c3:
         29:a2:b8:57:61:a1:9e:2d:25:43:21:70:37:68:29:75:b2:b7:
         09:8f:f2:79:d9:df:64:c6:61:1d:0f:5a:f3:d4:d1:e3:81:0b:
         e8:db:e3:8f:e4:7d:3a:bf:96:ab:31:fb:20:1e:0c:88:64:eb:
         16:fe:28:ac:88:32:bc:e9:86:72:16:6a:fb:2a:bf:ef:1d:0a:
         66:a0:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----