Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File:                     qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier:          Kri2G3uiSp9rMWvaQykyDX+q4D7qiYQfZzRtNkjjBdw=
Subject key identifier:   A1:78:C1:14:A9:35:2B:E5:5F:83:DA:B0:3D:36:0A:4D:42:26:5B:98
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer:       /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial:       01962E994346D0AA52C9E9879E72D9099A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number:          0789
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: 5qk6lDV0QyY/ui7cz0UdBEdM5Ar8HaOKkU9FNeyukiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:43:46:d0:aa:52:c9:e9:87:9e:72:d9:09:9a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=a178c114a9352be55f83dab03d360a4d42265b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:af:fd:68:ee:bd:71:d1:44:e3:d0:fb:c6:e4:
                    2d:e1:a8:68:c0:25:02:ea:47:d4:3b:81:bc:be:39:
                    84:e6:1a:6a:cc:92:45:2c:eb:a3:f1:06:30:1b:e8:
                    87:81:f3:d4:60:db:ec:a1:50:f8:d3:fa:13:3c:17:
                    8a:ee:fe:94:68:5b:80:e0:24:47:da:4a:33:8f:70:
                    f3:ae:e4:68:f0:a4:86:51:20:27:52:ad:ae:99:30:
                    f4:d9:74:4f:64:e5:9c:eb:10:82:17:44:d2:1a:34:
                    6f:eb:e2:b5:68:d8:bb:fb:3e:fb:de:14:4c:b2:30:
                    79:75:8a:f4:1e:82:a4:9e:e4:9d:85:f0:3e:9f:fb:
                    8c:6a:91:7c:f3:5a:34:19:b9:30:f6:de:05:f3:70:
                    85:03:a4:b0:65:c3:0d:4b:32:fa:0d:7e:d4:f0:c8:
                    c0:4f:ba:d7:9b:3d:1b:9e:4c:77:03:fc:a3:f9:42:
                    8d:7f:bc:cf:83:92:46:f6:20:c6:c1:6b:8e:c3:e6:
                    9d:46:a6:88:51:f7:41:c2:fe:eb:f2:55:e2:3a:dc:
                    c8:82:43:c2:c5:42:1f:38:33:03:62:67:be:35:fa:
                    6f:b7:ef:0a:ca:a9:da:10:04:dd:59:16:1f:db:02:
                    0d:a3:0f:cf:5b:95:16:6f:45:73:c8:da:98:a5:7e:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:C1:14:A9:35:2B:E5:5F:83:DA:B0:3D:36:0A:4D:42:26:5B:98
            X509v3 Authority Key Identifier:
                keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:00:65:30:a8:08:16:b2:0d:6e:71:d4:54:a7:66:3a:5e:d4:
         32:d0:c1:29:5f:2b:a2:fa:87:c5:98:9a:69:f5:e4:3d:d1:ee:
         c9:79:1d:7b:35:b6:0b:c7:3a:fa:93:99:ba:7e:b1:31:d7:4a:
         e5:5c:e6:c1:f2:a5:62:e4:c4:16:d5:7a:69:23:55:c5:d5:b5:
         6e:1c:09:eb:43:42:b2:bb:b9:56:ca:5f:cc:9c:fd:ca:71:dc:
         a6:66:fd:35:c3:f4:87:4a:d0:bd:bf:d4:8f:ef:7e:56:2a:c6:
         97:91:5a:d1:7b:e3:84:1c:99:a2:7d:b1:b4:b2:65:2d:5d:3d:
         0c:4c:f3:7b:02:d9:49:d4:be:06:7f:5a:ee:a4:5c:f4:81:11:
         19:31:5e:32:05:ce:0b:a3:7e:f8:9b:7f:5d:6a:99:e2:b9:13:
         83:ad:f5:de:37:95:c4:99:a1:ca:d9:a9:e9:6e:1c:5e:3d:98:
         11:2d:43:28:aa:63:40:09:d4:4f:20:90:d6:5b:bb:6c:1f:bb:
         6b:86:f6:44:c8:92:21:59:37:ca:99:b7:56:c3:14:13:44:95:
         02:e7:cf:82:60:b0:f2:fa:72:38:08:93:b0:34:1e:3a:2f:52:
         51:a3:3d:54:9a:ce:ea:bd:a3:95:f8:61:86:d5:93:d7:f8:5d:
         ff:a8:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----