Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File:                     1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier:          dVBadspiGrJE7G5rQ8GNPAMaV5kwkJJEic/84at6nQI=
Subject key identifier:   25:C2:CC:DF:FE:74:66:1C:30:56:E1:9F:24:62:2D:5F:29:2C:51:44
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer:       /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial:       01962F3DCBBB99E2A3FD4AD7FE0943DF58C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number:          0529
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: +AnLwHeoirnqZCcHeDFVRt0Tqw5q7Tu22kCzXW09Tzk=)
                          2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
                          3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cb:bb:99:e2:a3:fd:4a:d7:fe:09:43:df:58:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=25c2ccdffe74661c3056e19f24622d5f292c5144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:32:39:32:55:b8:4c:f2:da:13:b1:18:7c:
                    86:31:91:9b:e6:31:d2:64:34:89:06:bb:7f:cb:6c:
                    5a:e1:36:cb:13:35:48:2e:8b:7f:13:39:8b:99:3f:
                    45:ad:7c:f8:89:f7:79:40:15:5a:8e:d6:a4:33:22:
                    88:c5:ad:fa:11:ab:8e:bc:2b:a2:c3:8a:17:b2:27:
                    66:49:da:ed:46:89:78:e0:69:94:b6:91:2a:13:0a:
                    98:ae:89:6a:92:ae:b6:e7:96:0d:1e:e9:42:13:ac:
                    bb:93:3a:b2:67:a8:91:a0:80:30:4e:1e:49:5d:52:
                    80:bf:b8:0d:bf:7e:aa:f1:74:d2:72:85:01:37:ea:
                    df:72:d5:f5:66:af:d4:05:12:35:68:88:cc:41:f2:
                    68:47:82:32:45:6b:7f:dd:cc:9b:79:98:ad:d1:44:
                    c4:71:df:02:b7:0c:2e:73:bb:92:ad:49:ee:76:07:
                    5d:5f:89:ed:83:f8:f0:a1:9f:30:f4:e5:8f:ae:2e:
                    e0:9d:4b:ef:15:3a:52:7f:40:2c:89:c1:9a:cc:8b:
                    0e:ad:80:0e:db:ae:70:65:54:29:53:4b:5f:a6:27:
                    18:6f:dc:a1:e1:6a:c3:c1:77:8f:46:8f:69:89:0a:
                    a2:93:6f:7f:e9:b5:12:4e:7f:36:2c:75:70:11:d0:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:CC:DF:FE:74:66:1C:30:56:E1:9F:24:62:2D:5F:29:2C:51:44
            X509v3 Authority Key Identifier:
                keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:70:d5:9f:2f:a3:9a:d5:66:da:72:0a:47:28:09:9e:00:e8:
         90:bd:03:6e:4d:e9:c1:2b:05:44:36:7d:7d:da:05:fb:ed:8a:
         e1:a7:46:ab:73:db:f7:7e:30:40:e3:45:ac:0b:81:73:12:5c:
         c1:2b:2e:6d:1f:63:52:67:07:e8:58:cb:5e:1b:17:e9:b6:66:
         f2:83:6b:c8:e2:b2:1e:66:8c:ca:b2:f8:41:4b:d2:d3:a8:3a:
         1a:72:6c:0e:8c:ea:56:49:bf:13:88:53:00:c5:80:34:4c:18:
         fd:14:f1:d6:20:9f:5d:1c:14:03:a0:b3:3f:6b:45:f0:a1:61:
         ee:10:e0:da:23:d0:01:30:be:e5:27:e8:37:27:c5:e7:0f:92:
         8d:dd:52:d8:fa:30:0d:43:e2:c3:28:e0:24:04:6d:69:87:34:
         2f:45:70:16:b1:af:1c:3e:68:91:78:c7:65:e2:3f:69:17:be:
         50:af:59:2e:e4:2e:7c:80:f0:1d:2f:05:77:bb:2a:2a:1e:7d:
         fe:0f:1d:10:0e:c6:58:63:45:1d:86:f4:3c:f4:ae:91:01:f6:
         92:1b:2d:6e:45:bc:ae:f2:e6:cf:a9:1c:93:54:a5:4b:87:b0:
         10:34:92:11:74:db:3d:04:84:f7:a3:e5:9f:05:23:92:99:69:
         8f:af:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----