Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File:                     Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier:          7Fz85DiKoj0uCHz3ZWu3mrMnzI9q7bvllgnsG3yDWlw=
Subject key identifier:   98:05:DA:55:B9:32:F8:24:13:BE:89:53:38:84:F5:26:8A:25:EA:12
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer:       /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial:       01962E2AF398139B104ECF24844811B4ED96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number:          C4
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: lcQim8jHTUlkj3nC49uH8nXSv5/TpIg7l/6kJ9ndiTc=)
                          2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f3:98:13:9b:10:4e:cf:24:84:48:11:b4:ed:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=9805da55b932f82413be89533884f5268a25ea12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:d0:e1:05:90:0a:51:8e:05:d7:70:e2:a4:
                    e5:51:89:a0:63:66:f5:e5:78:4f:af:11:64:88:96:
                    5a:1a:e5:47:3d:aa:fe:4f:86:2d:55:e7:8e:90:02:
                    72:5d:39:d5:b8:1c:27:51:2a:84:dc:16:3e:4d:cf:
                    22:b5:a4:b4:65:69:d9:94:99:0d:16:a9:de:00:b8:
                    3a:f0:a4:0b:4e:13:61:4c:76:8f:54:c2:d8:79:5a:
                    a7:b1:0c:de:fe:5d:f3:60:c7:6b:72:e5:ba:fa:be:
                    04:a8:9c:d1:2c:26:01:ae:bd:72:d0:ec:32:05:8b:
                    f2:80:68:35:31:ac:78:84:af:0a:21:2c:bb:b3:29:
                    91:2c:06:a7:e2:b3:db:2d:14:f8:77:fe:e6:f8:ae:
                    a0:f9:b4:95:15:c7:73:89:d4:f6:ef:e8:3b:82:c9:
                    62:9b:8c:72:fc:54:d9:ec:6d:62:6e:3e:04:f3:92:
                    43:65:94:a7:ce:00:8a:d8:a2:17:93:b3:6e:c3:0f:
                    e4:1e:d3:14:d9:26:fb:09:e1:28:a1:b5:c0:25:1d:
                    09:30:13:6a:71:65:45:4f:a6:76:76:b4:77:a1:93:
                    b3:ef:4f:49:25:21:f6:77:a4:8a:95:e9:0e:3b:51:
                    38:b7:4c:b7:f8:46:10:34:86:2f:51:97:c7:97:84:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:05:DA:55:B9:32:F8:24:13:BE:89:53:38:84:F5:26:8A:25:EA:12
            X509v3 Authority Key Identifier:
                keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:da:a1:8b:7a:c9:80:82:8d:c0:25:57:4b:ef:70:00:d0:
         e2:74:2d:71:7c:6b:ca:79:0f:16:58:09:16:97:e5:14:75:28:
         52:4c:23:22:60:5f:2b:da:92:cf:78:86:fc:6a:67:49:e2:b9:
         9f:4b:19:9f:c3:68:f6:92:03:a6:ab:12:a9:51:68:b9:90:51:
         82:e2:32:19:17:06:e9:2d:fe:77:19:6c:2d:2f:99:54:b1:0a:
         29:47:c5:38:2d:46:e7:9e:9a:cb:c9:49:91:27:58:21:6e:15:
         4d:60:06:4f:b0:ae:bc:4e:b0:b6:8b:07:c3:de:27:f0:4d:66:
         18:19:8f:fb:9d:38:54:c5:a5:bc:eb:7d:51:00:96:ad:3d:1f:
         a3:2f:28:7d:2a:64:7a:87:d4:4e:dd:0f:cc:83:22:ff:5d:b6:
         19:a8:24:97:3f:6e:ba:50:f6:ff:dc:1e:53:05:0c:d8:bd:8a:
         13:23:fc:26:20:14:ed:8c:f6:ec:df:ba:da:89:eb:47:c7:1c:
         74:e9:6c:1d:db:64:6f:bc:c8:b1:38:df:8e:6f:a2:d7:7b:28:
         44:a1:1b:5a:ec:d3:5f:6b:10:b2:2a:5d:c4:ec:82:63:54:e2:
         05:ea:91:fe:46:90:69:48:17:56:59:cb:81:3e:fa:1b:88:1a:
         ee:78:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----