Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          BjConPSwZB+9D6t0gcOcePcCID2HzK3MqPCZuodsME8=
Subject key identifier:   CF:12:13:89:02:38:13:7F:44:18:76:91:9B:85:D5:D0:ED:D5:24:D2
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       01962E2AD43EFCB3700E8318E7032A3B96EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0BA5
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=)
                          2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=)
                          3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=)
                          4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=)
                          5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: 6Zl6cX1ZrmRjbQ+Y3iCB47SYVv2kQ9lzELTGJndz15A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d4:3e:fc:b3:70:0e:83:18:e7:03:2a:3b:96:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=cf1213890238137f441876919b85d5d0edd524d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:39:c1:4f:c2:38:07:82:af:ef:e2:7c:35:
                    a3:4e:0c:09:a6:9f:43:8b:ae:50:3d:8b:dc:ab:46:
                    2a:79:58:0d:bf:28:b9:f2:89:e2:83:e9:ba:18:06:
                    7d:08:54:06:7d:c6:35:de:bb:d1:7d:35:dd:cd:ae:
                    81:f3:f5:b9:1f:5b:f8:ae:59:2b:9a:14:e9:1e:91:
                    21:ec:8f:e5:4c:c5:d2:70:26:b9:bd:16:ed:3c:06:
                    ce:6d:48:fc:8f:80:72:38:54:1e:7a:c2:19:86:e8:
                    6b:53:82:0a:bb:e6:a7:de:3f:bb:14:d8:b7:93:c1:
                    c6:48:fc:94:ba:40:04:e5:bc:57:21:18:4c:8d:4f:
                    8f:d8:9f:66:d6:57:3f:70:99:10:cc:1d:02:89:6d:
                    70:2a:7a:a9:a8:ca:32:0e:6d:58:f1:92:8e:eb:69:
                    35:0b:bb:90:cf:bb:7d:e9:c0:34:e1:23:f2:e7:b7:
                    d6:7a:f5:88:b7:15:77:2b:c4:1d:52:63:a5:56:a9:
                    25:fd:d0:4b:ac:4a:4a:3c:47:bf:76:be:a5:3f:a5:
                    ad:95:9f:17:bb:81:02:2d:a3:76:0b:f0:06:3b:4b:
                    3c:17:11:c1:1f:19:5e:97:f9:e2:05:d1:af:4e:ae:
                    66:5f:ae:21:4b:7c:69:f0:a1:e1:9f:9a:27:a9:5e:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:13:89:02:38:13:7F:44:18:76:91:9B:85:D5:D0:ED:D5:24:D2
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:bc:a3:2e:bc:ba:b1:90:d3:97:6e:c1:a2:29:d7:87:4f:
         94:35:e7:95:4b:fe:40:dc:c9:d9:84:3f:51:75:3e:48:32:ac:
         d5:36:8e:08:d9:97:e2:b3:9b:82:6d:09:36:e5:4b:d4:20:78:
         67:38:a0:e5:61:3a:7e:bc:63:a6:f9:94:60:07:24:e8:d7:f9:
         0e:7b:93:ab:d7:8b:31:d9:f2:ae:41:f8:a9:e1:d4:e4:2f:59:
         82:11:f7:e7:47:41:43:86:8a:e3:04:ea:18:d8:02:4a:95:d5:
         41:e0:d9:5e:e3:19:5c:f9:54:08:d0:00:4a:d7:19:ac:97:10:
         fd:d2:1a:4f:42:bb:72:3c:b1:03:46:b9:8d:a0:52:28:12:83:
         fa:43:4e:86:bb:90:0d:3e:df:4a:06:53:49:17:f0:37:46:12:
         45:eb:f0:eb:3c:fa:8e:25:ed:98:c8:e0:5b:bf:87:41:a1:84:
         af:31:14:27:a7:3a:dc:b4:9f:93:f4:87:a3:6a:35:0d:76:1a:
         1c:c2:2e:81:07:f4:2d:c6:1b:04:e1:3f:7d:25:c6:92:68:bd:
         ce:7c:1f:e3:aa:83:4b:93:00:9f:18:2b:18:68:41:50:01:46:
         da:f6:0f:79:55:aa:3b:f7:0d:e8:d3:98:8d:1c:99:3c:19:26:
         a0:f2:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----