Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.mft
File:                     QB0ZYVrOK7vPoJFpCAgIdipksX4.mft (raw, json)
Hash identifier:          PP1jwmIgIzMD+qz8sBIlrBxKJxCuqH5Eiahi+fq+4a8=
Subject key identifier:   BC:EA:2D:65:47:4E:83:74:BB:F0:CC:7D:8F:1E:62:7E:94:7D:F9:81
Authority key identifier: 40:1D:19:61:5A:CE:2B:BB:CF:A0:91:69:08:08:08:76:2A:64:B1:7E
Certificate issuer:       /CN=401d19615ace2bbbcfa09169080808762a64b17e
Certificate serial:       01962FAB6A50C8CEE6ED7129B038DBBA90DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QB0ZYVrOK7vPoJFpCAgIdipksX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.mft
Manifest number:          03B9
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: KrtTh6gsfptfdAcGq3CmJjqfV2o.roa (hash: eRRAdGSdFwP7Zvo2rxHWeAe37W0cOjnKNlia+tVBb+M=)
                          2: QB0ZYVrOK7vPoJFpCAgIdipksX4.crl (hash: +MG8fZZU0X/3Cd35Z0b0QWJ7nJXp7/I0a26vYoFyM8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:50:c8:ce:e6:ed:71:29:b0:38:db:ba:90:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401d19615ace2bbbcfa09169080808762a64b17e
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=bcea2d65474e8374bbf0cc7d8f1e627e947df981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:87:bc:96:6a:fd:61:e9:69:8c:64:dc:71:
                    ef:5e:01:78:70:8e:65:92:cc:ec:08:7c:dd:c8:fe:
                    10:20:fa:6a:f0:69:86:ab:d8:75:ed:92:69:19:3c:
                    4e:e0:1c:85:10:06:4c:5a:3b:01:b9:a1:1c:b9:d5:
                    38:bd:e3:ec:62:25:bb:5f:41:67:cf:48:a5:96:c8:
                    b4:78:1c:9f:d2:9d:ed:0e:68:06:88:41:0e:af:f4:
                    e6:a6:29:3d:df:32:bf:e8:27:50:8d:97:d3:57:a0:
                    40:09:fc:5b:3a:06:36:06:58:f4:21:44:cb:be:c0:
                    b1:12:b9:de:2b:23:6b:e2:14:71:6b:27:2f:f7:31:
                    9c:7e:0c:dc:5c:4e:b6:d7:21:7c:e1:3f:94:fe:00:
                    63:58:a3:ba:29:17:75:b6:00:78:b9:ff:02:ef:2e:
                    ba:b9:7a:4a:c8:b1:ed:fb:87:5c:3c:d2:06:ec:72:
                    a8:74:05:2b:f5:13:41:00:81:40:4b:81:fe:d4:81:
                    4b:78:e4:e8:3d:93:15:b6:55:ed:b3:31:2d:46:f6:
                    82:97:f2:9e:d6:8e:14:14:80:97:7e:7b:3f:5f:c7:
                    64:69:37:8f:b6:30:e7:08:70:98:99:b4:77:d1:24:
                    9c:73:42:e3:ca:df:d8:eb:59:c2:0f:a0:a4:56:49:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EA:2D:65:47:4E:83:74:BB:F0:CC:7D:8F:1E:62:7E:94:7D:F9:81
            X509v3 Authority Key Identifier:
                keyid:40:1D:19:61:5A:CE:2B:BB:CF:A0:91:69:08:08:08:76:2A:64:B1:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QB0ZYVrOK7vPoJFpCAgIdipksX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a5:94:06:d8:e2:57:8d:c2:40:00:d8:c8:d6:b7:89:25:41:
         a0:23:2c:3b:1a:2b:92:51:0d:10:66:9a:f7:d8:38:2b:42:56:
         4d:79:a9:9b:97:dc:33:d7:17:e6:8c:5b:98:ab:86:d8:11:7c:
         af:0a:05:6e:9c:e5:60:2a:18:88:87:97:d4:66:3c:19:f8:11:
         d4:e6:a1:a6:97:1c:bc:45:7d:ea:7e:34:5d:67:6c:cd:40:21:
         b5:ce:43:2d:c3:c5:91:58:ea:b5:e2:56:a9:b3:29:d0:23:c3:
         6e:c4:b6:e5:6f:ee:09:08:48:a5:6c:52:85:35:b0:83:76:bf:
         b3:d8:ff:cc:3d:d9:50:52:93:a9:e9:e7:c0:89:d2:5e:0b:f7:
         7a:dc:8c:ba:59:82:79:b9:8b:62:66:eb:0e:b5:75:59:77:18:
         29:67:d1:f1:b9:07:4a:b9:c9:36:b0:c5:91:d2:e7:87:80:1e:
         08:ef:1e:d5:01:7b:13:86:6b:c9:15:01:43:fb:49:ef:44:4a:
         09:0c:e3:6d:09:4d:8e:5e:a6:8c:f1:1c:9e:9d:2e:a4:a4:e8:
         93:fe:d6:ff:ff:ce:63:37:23:bc:5e:6a:64:ed:13:9d:ca:ce:
         70:0f:fa:b1:97:e8:ef:a0:41:59:a4:d1:05:79:63:24:ff:29:
         f0:56:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----