Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5654c-9fe7-4793-8a8f-40edadeee860/1/QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.mft
File:                     QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.mft (raw, json)
Hash identifier:          hgGuOYiHufoVv7uxzXX+otKGWeZo4XguacMkWNZMRlU=
Subject key identifier:   13:A6:CD:41:71:43:D2:AC:59:C4:86:AF:73:8D:DD:93:04:97:0C:9F
Authority key identifier: 40:8B:0F:E6:58:EB:96:FB:50:B1:35:F7:1B:B9:2F:27:B9:2C:13:94
Certificate issuer:       /CN=408b0fe658eb96fb50b135f71bb92f27b92c1394
Certificate serial:       01962F3DB9D28667DF6A0ED6722304B17BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e5654c-9fe7-4793-8a8f-40edadeee860/1/QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.crl (hash: THNic89sY0oCTO4LWccwJxLMs+ijtWkBXMo1XCclzEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:d2:86:67:df:6a:0e:d6:72:23:04:b1:7b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408b0fe658eb96fb50b135f71bb92f27b92c1394
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=13a6cd417143d2ac59c486af738ddd9304970c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:b9:65:ac:df:ca:7c:6d:82:0c:7f:af:4a:
                    05:01:02:d5:74:62:76:c0:0f:f2:81:90:81:63:01:
                    b7:4d:34:81:3f:5e:d2:64:93:a6:fe:27:7b:71:69:
                    a4:94:6b:26:12:b9:b6:22:da:58:b4:a9:c9:2d:9c:
                    bc:84:b5:ec:75:b9:0d:33:28:8c:d4:6c:eb:77:46:
                    28:1d:35:a4:fe:a6:5c:fa:3b:81:4e:cb:60:bf:52:
                    33:85:b1:aa:7c:82:94:4f:f3:d1:ac:e2:98:a6:55:
                    93:b8:20:41:7e:12:5f:a7:ff:94:ff:49:33:ff:9a:
                    1e:35:62:77:1c:f3:6b:19:f8:6f:6c:a8:3a:2b:c4:
                    6d:13:8f:9a:3f:53:75:7a:99:c5:d8:2b:9e:98:b2:
                    ad:aa:7b:3a:63:ec:fb:fb:d0:be:2e:b4:04:7a:3d:
                    44:1f:75:c6:58:6e:93:2c:36:88:b0:b1:08:20:1d:
                    5a:0d:86:85:f3:d5:70:bf:b1:ad:a1:53:0e:9b:a5:
                    b1:c9:95:3d:48:6e:40:5f:14:a1:2a:aa:f5:34:8b:
                    09:24:31:88:d8:f9:45:17:88:a5:1d:fc:21:8d:df:
                    e2:4b:bb:4e:05:f9:87:ca:d2:6b:16:fd:be:d5:9e:
                    bf:a0:1c:5c:b8:9c:3d:97:00:9c:f1:12:ac:0d:b0:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:CD:41:71:43:D2:AC:59:C4:86:AF:73:8D:DD:93:04:97:0C:9F
            X509v3 Authority Key Identifier:
                keyid:40:8B:0F:E6:58:EB:96:FB:50:B1:35:F7:1B:B9:2F:27:B9:2C:13:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5654c-9fe7-4793-8a8f-40edadeee860/1/QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5654c-9fe7-4793-8a8f-40edadeee860/1/QIsP5ljrlvtQsTX3G7kvJ7ksE5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fd:b0:a6:5c:ea:e5:2f:64:3b:63:d3:c2:0d:0e:6e:ef:98:
         d4:13:7f:1a:d4:13:86:42:d9:3d:c4:fc:f0:d6:be:2b:67:08:
         34:9a:67:ca:dd:80:22:fd:4b:70:ff:f4:23:83:90:d8:cf:b1:
         d2:b2:88:e3:4f:c7:4c:21:18:77:2f:8f:97:06:c7:5f:f7:65:
         05:a3:7d:5b:0a:9c:ff:51:d8:02:58:bb:a4:7c:91:8f:90:18:
         cc:c3:56:78:08:18:43:0c:e6:d2:42:27:b8:6d:9d:cd:a3:ad:
         8d:e9:7d:0d:0a:8f:83:1f:27:57:3c:06:8e:ac:52:d7:77:e0:
         96:d0:ef:1d:3b:0a:a7:72:91:66:a3:b0:42:93:a7:4b:0e:3d:
         7b:bc:75:40:5c:a8:e0:bf:28:4e:4c:7f:73:61:61:f8:80:79:
         50:5e:70:51:9c:65:6a:43:5b:53:52:d7:d4:82:dc:71:6e:b8:
         b0:46:94:f1:cd:dd:cf:c9:f9:b2:bf:c0:43:35:24:7c:26:d6:
         8d:5c:e4:57:7a:1d:bb:62:64:ad:c3:87:bf:ed:14:e8:f2:af:
         ab:81:09:3c:f3:01:33:ee:52:ae:60:2c:e8:09:95:d3:c1:fa:
         c3:ac:13:01:2e:64:ea:ec:cc:17:11:09:77:de:0e:9d:89:13:
         c1:d2:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----