Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File:                     Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier:          orWI5nnTSWPd0aH4EQmuNi/25miPaCPXmo+F/qCojIE=
Subject key identifier:   41:AB:19:21:82:5A:1C:8E:BE:4E:9E:E7:57:85:F0:5F:83:D9:7B:D1
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer:       /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial:       01962FAB27FED6BE4EA6DEDA98B3CEF5341C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
                          2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: FCjtvgE8uv0/+/XLSjlzeEo2fa+yMikwrj9U/DbeHJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:27:fe:d6:be:4e:a6:de:da:98:b3:ce:f5:34:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=41ab1921825a1c8ebe4e9ee75785f05f83d97bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:73:3c:10:50:25:ec:4b:23:b2:0f:56:1c:
                    ff:1c:62:8b:d2:6a:09:c8:28:a7:c4:5a:ae:94:43:
                    27:0f:fa:2b:28:70:31:af:37:e2:00:69:1b:8d:87:
                    0f:a0:66:76:55:eb:28:99:fc:c6:3d:c4:4c:98:f6:
                    29:36:a6:7f:d9:53:61:2d:7c:4e:5a:f4:54:7f:c6:
                    a9:ea:73:0a:7e:5e:1a:2f:56:80:95:8e:02:f6:2b:
                    39:5b:b4:82:2c:19:c4:a6:93:2d:4e:aa:e9:f0:cd:
                    2e:3b:8c:7c:df:1f:8a:be:fa:34:62:bc:db:aa:e7:
                    ca:ba:0f:55:a8:72:39:4f:57:52:70:a1:53:42:77:
                    a0:40:40:5a:21:38:32:bd:ee:48:62:b2:f7:02:7d:
                    3c:df:20:b5:40:4e:9d:da:70:f4:32:7b:89:29:11:
                    bc:89:9c:8c:6f:3c:a2:b9:13:26:c9:4e:80:c3:0a:
                    6b:0a:c3:71:92:02:be:59:fe:4c:af:77:7c:8a:5b:
                    2c:28:b8:16:b1:d0:c9:6c:b6:43:d6:f2:6d:f0:96:
                    df:a9:85:43:a3:b3:87:70:22:ad:4b:e3:98:52:f7:
                    15:cd:f1:92:89:d5:29:32:2f:a0:6e:26:25:fc:1f:
                    6b:50:e6:a2:ab:ad:af:cc:9d:0c:86:56:37:5f:35:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:19:21:82:5A:1C:8E:BE:4E:9E:E7:57:85:F0:5F:83:D9:7B:D1
            X509v3 Authority Key Identifier:
                keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4a:6d:82:ab:87:48:f9:e9:e2:ce:ba:57:be:b4:cc:58:cc:
         30:4e:7e:77:a7:fc:32:ff:1f:b2:58:53:47:6c:30:8d:52:16:
         90:b9:d2:85:5f:ca:9a:91:3f:d8:51:c5:91:27:ec:eb:5d:4d:
         e5:22:62:1f:07:09:5e:45:b8:a3:5c:83:c7:cf:d7:e9:f0:6e:
         6e:f9:23:35:cb:e9:fe:de:aa:f0:76:33:36:1c:a0:ee:b5:18:
         90:35:13:ad:58:ea:d0:e5:b9:68:e1:3a:60:46:25:3c:5d:22:
         01:ea:61:e5:ff:ee:b5:87:d6:47:ec:9f:79:97:ac:f3:cf:6c:
         cf:62:6b:83:27:d6:56:f4:4c:a7:4b:cc:8c:ca:39:de:79:3e:
         e6:1d:3c:6a:2e:a2:29:89:66:b5:01:2e:be:20:f0:60:04:c9:
         36:d4:b5:ea:94:8e:f3:de:63:e9:26:7a:d2:13:fe:91:f6:b8:
         45:2a:4f:29:e3:a9:e9:0c:3b:9e:e0:dd:8d:db:f8:b1:9c:05:
         c2:79:96:30:cd:d1:bb:95:63:82:44:67:ac:0c:c0:59:cb:5c:
         88:90:15:24:e9:84:97:3f:ed:a6:26:e2:65:68:e9:dd:04:d3:
         f5:54:98:39:5e:30:c2:a3:6f:a2:21:74:e2:52:00:db:15:37:
         0a:b3:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----