Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File:                     QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier:          wsJupf0QJst9RlPIi8AxX1kYXdhgHALVw3Vc8Qi84hc=
Subject key identifier:   45:59:70:AE:36:6C:D3:AA:10:2B:AC:D0:1D:5C:E7:C1:5D:52:DC:85
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer:       /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial:       01962F3D9B6EEE16B6462B67BC967DCF7347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
                          2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: 6RsPQR9lgSm6deo/u8H1UF+tX0on+lW77bPoM5xyWdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9b:6e:ee:16:b6:46:2b:67:bc:96:7d:cf:73:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=455970ae366cd3aa102bacd01d5ce7c15d52dc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:d2:f9:da:cc:04:22:91:20:66:c5:21:bc:
                    4a:74:f0:69:73:78:3e:6d:cd:db:b4:ad:7c:1a:30:
                    e4:4d:c9:ae:13:fc:18:ae:bb:1d:c1:32:e0:b8:75:
                    d8:b0:6c:45:0b:48:ad:dd:dd:50:50:7e:c5:b2:04:
                    2d:18:b7:cd:b5:13:b1:b4:bb:7c:34:d9:26:00:d8:
                    9a:5a:64:05:8a:14:28:04:16:69:34:7c:dd:35:b1:
                    79:51:b1:67:45:f5:e2:9f:a3:f7:23:40:e1:ea:c7:
                    ec:f0:75:0f:ab:09:99:99:96:1c:c5:5e:7f:bb:4c:
                    79:78:7c:96:b4:7d:e0:ce:b7:f3:95:c2:43:a1:a7:
                    2c:ba:19:36:10:e7:d2:14:ff:77:73:43:c9:cd:12:
                    32:65:c0:d9:5c:6e:e2:c6:44:66:7c:bf:5a:39:fe:
                    3f:a3:f7:7c:50:48:07:5a:05:a3:58:1e:ea:03:d6:
                    eb:51:f5:30:41:14:29:13:20:9d:09:f1:33:c9:f8:
                    fe:ce:f9:79:c7:58:ad:44:82:66:38:ae:6b:47:b1:
                    e7:42:9d:e7:71:82:8d:47:0e:21:d3:7f:24:07:63:
                    4c:e2:2c:98:ba:b2:00:77:73:aa:0b:12:be:ed:1a:
                    ec:68:ef:c9:f3:24:89:a4:bb:01:53:44:aa:24:1c:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:59:70:AE:36:6C:D3:AA:10:2B:AC:D0:1D:5C:E7:C1:5D:52:DC:85
            X509v3 Authority Key Identifier:
                keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:64:6c:55:9c:bd:1c:6f:44:e8:64:c7:00:9b:28:e5:b8:
         d5:5f:d1:63:91:ef:9e:c7:db:41:ee:eb:82:86:7f:0a:cc:cc:
         44:f9:0e:9b:3d:c6:7b:11:70:13:eb:fb:30:4e:72:d7:36:e6:
         2c:81:97:10:f4:a9:d7:72:b5:35:28:e9:53:dd:b9:2c:00:cc:
         80:8e:46:a2:95:be:da:7f:f2:f0:77:ba:98:f6:6f:b6:e2:3a:
         06:4f:e0:d0:dc:53:76:10:a9:e5:81:00:25:40:aa:a8:17:db:
         75:72:c8:72:b4:be:da:7e:fe:0f:48:4f:28:e3:8b:3c:ff:6c:
         a3:9c:d7:34:0b:d9:9a:16:43:3a:26:a7:f2:ea:b3:6f:65:75:
         9c:7e:66:04:9e:1c:38:e0:a4:1c:98:64:de:f9:97:da:ea:9a:
         67:41:81:5c:f7:cd:87:a8:0b:af:f7:ef:c5:13:f1:f3:dc:39:
         e8:b0:fc:f2:9e:29:95:04:18:8f:65:02:5f:44:13:a6:69:4b:
         ca:98:f5:b5:fc:87:f6:67:bf:b5:47:1c:8c:a7:e8:4b:39:a8:
         bd:13:ac:7b:b8:fc:a1:7c:09:59:51:9d:b0:01:19:5d:cf:fe:
         21:79:5a:fc:57:e9:24:a2:30:eb:f3:cd:be:ca:a7:a2:c2:48:
         e0:a1:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----