Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File:                     q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier:          EU3hG5xGbajAJJ7KYkZs0US07YpMGcN0kBr5p7cFiPg=
Subject key identifier:   73:23:71:3D:58:62:C1:DB:B9:D3:F0:D7:61:94:FD:95:67:6C:99:AF
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer:       /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial:       01962DF403456D30B06A7D8BA891829BC1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
                          2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: Y6EqsC6iuX7UpD0G/9fn1mu561m87at7sS8UVOHSwuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:03:45:6d:30:b0:6a:7d:8b:a8:91:82:9b:c1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=7323713d5862c1dbb9d3f0d76194fd95676c99af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:c1:c3:aa:38:67:54:f9:61:1c:dc:1e:2e:
                    4b:69:ff:51:de:4a:8c:22:0f:14:69:f1:ba:b4:f2:
                    a6:b4:37:68:cd:03:0e:91:1d:e3:93:69:89:91:d4:
                    57:62:92:71:e1:11:df:75:2a:e5:01:fe:ed:ba:a9:
                    94:c4:de:43:30:65:bd:e5:0b:4e:b5:63:5a:e0:2e:
                    f5:fa:e8:d3:fa:24:af:12:13:b3:55:e7:9b:1c:ad:
                    00:65:16:f6:51:44:d2:04:f7:0c:64:a5:24:6a:39:
                    7a:d8:6b:91:ea:9c:fa:36:ab:13:8b:8a:32:bc:d2:
                    4c:a1:ca:a2:b8:44:4e:e6:c5:52:b6:bf:09:7d:3f:
                    32:e0:02:65:75:e0:27:56:f8:e6:6a:b6:d2:1f:e9:
                    de:cd:38:9c:e0:04:f9:61:d8:c9:39:2f:ea:ec:33:
                    26:41:00:e1:71:e4:85:e3:09:7c:16:03:c1:33:cf:
                    c9:cf:d9:76:1b:8c:95:66:12:5a:f3:a3:0f:5d:62:
                    2a:56:28:8a:4f:d6:ec:22:5c:7c:52:5d:25:d6:76:
                    54:ea:a0:e1:df:02:f0:87:dd:7a:38:b7:2f:ab:b6:
                    05:46:04:8b:cb:58:7c:ac:8f:fb:15:f8:4d:f3:03:
                    9c:1b:6c:43:ea:6f:71:33:48:e1:62:43:8a:b9:7e:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:23:71:3D:58:62:C1:DB:B9:D3:F0:D7:61:94:FD:95:67:6C:99:AF
            X509v3 Authority Key Identifier:
                keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b9:8d:be:26:de:30:f1:04:41:d9:24:ad:02:33:fe:ac:27:
         d0:0e:55:0a:57:01:34:85:96:d7:e9:a4:21:3c:2c:01:41:1c:
         4b:44:3f:f4:2d:91:20:65:1a:cd:86:8a:d8:61:9b:90:19:f3:
         79:00:a3:ba:47:80:2b:2e:31:b5:8a:aa:b1:8f:21:5e:f8:f2:
         f3:57:39:68:2a:83:3d:88:0d:34:f0:52:f7:9f:55:f9:86:f1:
         0e:ec:c9:15:5d:4a:46:45:de:52:f0:b7:54:7e:c6:60:af:0e:
         5a:43:d4:57:4b:7a:eb:5d:7c:c3:b2:fd:59:c0:27:61:55:49:
         83:9a:9a:93:a0:bf:37:2b:59:1a:13:00:47:0b:6d:20:e1:9f:
         80:71:2e:62:66:b6:fa:dd:cc:ad:2e:e1:79:bb:9f:9b:ce:b4:
         b5:81:0c:b1:3a:98:f9:83:c8:bf:14:61:32:a4:43:f1:a8:d8:
         ac:98:e6:dc:5f:c1:85:1d:f7:55:1c:d1:ed:31:72:1e:26:79:
         c5:05:c1:f0:74:e8:4f:34:77:72:a8:1b:2c:f2:56:70:42:1f:
         4d:02:89:72:26:bf:2e:83:b1:01:67:01:76:12:bb:b4:1d:83:
         9d:cf:31:7e:84:93:6a:f4:46:6a:31:4f:b4:a5:5f:60:2e:e9:
         a0:e3:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----