Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File:                     QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier:          4NjTGr0EsDgBvC2Kllz7LXYOL/oAaEl+lYAyOX7pnnU=
Subject key identifier:   85:05:03:5C:A9:55:C2:0A:A7:0A:1C:4E:63:A3:1E:D9:1F:6D:6B:46
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer:       /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial:       01962DF3C1D63601027DF7F8737C1404BF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: jwMGr9VTqifvb9AQdDr/tY+RpIhOtvBcV/Z7cH8s3/Y=)
                          2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c1:d6:36:01:02:7d:f7:f8:73:7c:14:04:bf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=8505035ca955c20aa70a1c4e63a31ed91f6d6b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:20:f3:89:95:ad:6d:98:f3:8d:2c:95:a6:
                    c6:cb:2b:0b:db:9c:27:53:12:ac:65:9c:3b:c4:b2:
                    c5:67:bd:31:74:63:17:87:4a:cc:d0:e9:7e:61:7a:
                    6b:b7:ef:95:eb:16:56:0d:f3:1b:fd:d2:7b:b9:62:
                    4e:61:8f:65:45:48:cd:ee:ac:56:95:7b:9f:8c:74:
                    5c:d5:38:ad:72:4d:b4:36:00:24:af:8f:6b:3c:fe:
                    02:23:46:34:67:02:d5:87:45:4a:b6:51:e9:99:08:
                    49:4c:83:37:c3:91:4d:94:6c:76:11:48:d6:3c:b0:
                    1f:01:75:57:ce:81:42:6a:8e:71:78:dd:77:b4:ec:
                    9c:44:a8:94:29:7a:c5:23:9a:06:ab:a1:1a:19:3d:
                    50:ef:3c:1a:f1:e2:c6:e9:6a:47:a6:73:65:ac:c3:
                    02:24:0d:28:ed:b7:c9:23:48:50:fa:5e:f6:e4:0f:
                    0a:98:25:9e:65:b4:c2:2c:c1:a0:ed:98:dc:8d:70:
                    5e:db:89:99:95:41:1c:f4:aa:2a:91:b4:21:5e:78:
                    ba:5d:2c:db:b2:6b:28:20:37:4c:58:1f:2b:c4:04:
                    99:09:89:39:b8:4e:af:72:61:3c:2a:12:18:79:82:
                    80:58:d1:f1:b6:28:3c:83:c8:07:ba:df:3e:11:6c:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:03:5C:A9:55:C2:0A:A7:0A:1C:4E:63:A3:1E:D9:1F:6D:6B:46
            X509v3 Authority Key Identifier:
                keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:24:f0:fe:dd:54:3d:a8:4d:8c:b7:26:86:d3:f0:ca:06:4e:
         f7:9b:6f:0e:7c:d3:d4:c4:7d:87:04:ca:19:45:9b:f1:6d:d4:
         6d:82:31:00:64:a0:58:4a:b2:6a:0a:2e:7b:40:51:cc:2e:e9:
         e1:c8:bb:a4:28:85:88:55:86:f7:95:42:64:a2:91:03:78:b4:
         84:32:9b:fe:74:c7:4f:fe:f9:47:a8:19:0c:9f:a9:b2:56:cb:
         85:be:dd:25:f4:1a:bb:4b:14:ac:d2:84:8a:b1:fe:0c:80:00:
         58:45:c2:90:95:78:36:a1:97:29:48:7b:e4:84:19:64:00:76:
         1f:ab:d2:6d:01:9e:0c:93:ca:63:df:1e:45:38:c8:47:d1:98:
         d3:c3:25:73:b8:09:36:8f:42:b1:c9:2d:4b:88:59:a7:f6:6b:
         88:55:c5:3c:79:64:2c:f7:66:03:35:f6:4c:3c:cf:63:9b:08:
         1b:6f:df:f0:f0:72:66:3e:09:4c:5a:e1:c7:76:2e:9c:00:4f:
         02:7d:28:d5:fe:47:c7:f6:dd:76:a1:89:f2:7d:fa:1c:01:91:
         5f:a6:b5:77:1f:21:1b:a4:68:95:11:a6:95:bb:72:42:1f:53:
         10:b2:81:fb:fe:81:c0:ae:44:49:d9:36:ea:73:85:2c:80:bb:
         90:ee:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----