Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File:                     QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier:          2Q8XCwXsx6WQ4z9As1EBO97mJZ98dpN1atNu7yJn7xI=
Subject key identifier:   E5:06:B7:1A:B9:FB:1D:C6:3F:53:59:F1:CC:D6:1C:8C:CE:B7:21:95
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer:       /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial:       01962E997ACFE889C49A636BC3BE4AA519C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number:          080B
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: mvuZzvlUt5JSsxszoP7VHThe4+SGhHkP9JcFfjlgVlY=)
                          2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7a:cf:e8:89:c4:9a:63:6b:c3:be:4a:a5:19:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=e506b71ab9fb1dc63f5359f1ccd61c8cceb72195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:a6:74:37:c1:0e:e5:c4:c2:12:eb:58:6c:
                    dc:05:ef:92:7e:48:01:33:a5:70:43:67:e4:fc:27:
                    85:28:ae:83:b8:9e:df:cc:b5:08:6b:f8:95:ae:8a:
                    82:fe:cd:46:8c:3e:43:3c:4f:86:cc:4d:26:99:92:
                    1c:b9:dc:d2:d4:3b:66:e7:f7:69:8f:b0:76:da:67:
                    24:f9:35:a2:44:16:be:99:98:fa:84:7a:46:0a:c3:
                    b9:28:6b:43:06:2f:71:10:04:cc:9f:29:f7:fd:69:
                    e2:db:f1:e1:e6:65:07:96:68:21:4c:e0:5d:cd:46:
                    79:46:92:f5:21:53:35:a3:5a:e5:da:dd:52:9a:cd:
                    e2:e7:ac:1b:bf:db:8f:e4:be:2f:63:8f:46:42:fd:
                    2a:91:0c:48:61:8c:82:f7:59:4f:46:de:48:6c:3c:
                    14:a7:5a:20:b2:d7:d2:af:a0:86:1c:e6:54:59:29:
                    d1:ee:ac:c4:b1:07:30:81:ed:a2:c9:ce:18:eb:06:
                    f2:8c:52:02:3b:a4:75:43:78:81:ee:79:e8:e5:21:
                    ac:a4:be:0c:23:f7:2d:53:62:32:e4:d4:d9:94:cc:
                    08:e5:4d:de:d9:33:d6:5d:d9:b1:82:ac:cd:a0:db:
                    19:89:8e:6c:7d:c1:17:97:c7:0d:a0:17:6a:3b:ae:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:06:B7:1A:B9:FB:1D:C6:3F:53:59:F1:CC:D6:1C:8C:CE:B7:21:95
            X509v3 Authority Key Identifier:
                keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:18:dc:57:d8:b7:d6:51:a4:50:b9:0d:e8:c6:81:f6:45:b2:
         20:5d:e5:67:61:f2:b6:73:6b:bc:80:43:ce:89:36:f0:26:d6:
         95:f5:43:7d:93:f9:ea:02:01:d7:1e:6e:92:4f:56:4c:af:5e:
         df:f9:07:0c:d2:ee:16:95:86:67:91:3e:18:cb:97:7f:b3:6b:
         76:10:72:77:2e:b4:17:7f:ed:a6:44:29:70:73:10:96:0f:4f:
         2c:c8:ff:27:74:1b:af:fc:9f:4b:30:f4:ee:c5:c7:ff:e6:e7:
         9b:9e:f3:9d:91:9b:4e:ea:fe:54:c6:8a:2a:ef:f3:e1:33:9c:
         d7:81:56:0e:64:81:49:63:e2:7a:c1:32:f7:72:eb:a5:fd:52:
         e2:ca:15:88:91:e3:b4:20:e7:05:01:4d:0f:25:82:f2:4b:23:
         08:2e:f5:8e:20:82:96:99:5a:e3:24:ce:43:51:d7:51:4f:a7:
         91:7b:14:2d:f8:e0:54:b4:a9:65:91:a0:0c:ed:7a:c9:c6:26:
         6f:5a:22:f0:6f:bb:0f:0b:3b:a1:ab:ad:c7:ae:57:11:a5:05:
         22:44:95:fe:cd:b9:5f:50:58:cc:d4:c3:f7:a3:3e:d3:da:bb:
         ec:07:b4:5a:77:cf:18:03:36:16:13:c3:4b:5e:7f:9b:4f:3e:
         d7:00:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----