Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
File:                     QA-ULrBzNco-f70Y8GwVjbN8_Us.mft (raw, json)
Hash identifier:          QnNiDCjl16dfDv5cU5CyMx3JY+L3Zooitiv/xKdMqSo=
Subject key identifier:   81:C9:07:00:76:01:8A:29:EE:59:B4:86:53:F6:90:3F:D3:AB:A2:CC
Authority key identifier: 40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
Certificate issuer:       /CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Certificate serial:       01962E618EA822C34C46B65A4859BEA35FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
Manifest number:          114E
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: CRyZWe4rqJ2qdiNWuAP-OJQeZow.roa (hash: g+uZ3IirtTKelPa51RylP3yoQBkp1cF9hHY0LUNHp8g=)
                          2: QA-ULrBzNco-f70Y8GwVjbN8_Us.crl (hash: gjk6cWNPBTfhNF0GtqoHvOo++p9K7cHMupQkYoakEP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:a8:22:c3:4c:46:b6:5a:48:59:be:a3:5f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=81c9070076018a29ee59b48653f6903fd3aba2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:9a:ea:d3:7a:6a:c9:53:92:1e:6a:2a:7b:
                    43:dd:a7:13:93:66:3b:ce:a6:b1:f9:42:05:2f:66:
                    09:fe:24:61:2b:8c:99:fa:56:14:66:4f:02:01:31:
                    3f:7b:2c:a5:9e:2d:a0:b3:9b:2e:2d:4a:71:a9:4b:
                    55:06:15:7f:b6:52:c6:35:40:73:ed:0a:59:2a:42:
                    00:15:90:53:8c:67:e7:f4:be:ed:a3:3e:83:26:24:
                    1b:e1:64:26:72:15:05:53:09:6d:1f:40:05:4d:37:
                    ce:24:b8:ae:70:43:25:e2:9f:85:5a:98:9a:35:74:
                    05:ea:f8:ee:be:b9:ff:e6:3a:3c:f8:8e:ed:fe:61:
                    63:45:f7:36:f3:99:e5:a8:45:10:9a:c0:f2:34:e2:
                    07:86:5b:fb:ba:34:44:ce:c6:69:39:a2:4f:f1:4e:
                    62:40:b2:6f:52:7e:17:e1:6f:6d:9e:f4:9d:9a:14:
                    1e:b6:18:d6:e9:6b:93:dc:f5:3b:e1:51:92:14:de:
                    4a:e5:17:22:6b:c7:b7:d0:f5:e9:18:11:ca:13:90:
                    0c:e3:89:22:f8:25:a4:c8:35:41:10:30:c8:d5:65:
                    a8:87:d9:9a:d2:75:25:7d:92:8a:9d:fa:ea:16:0e:
                    ac:5f:8e:81:5e:7b:19:db:c0:9f:88:dd:34:ec:0c:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:07:00:76:01:8A:29:EE:59:B4:86:53:F6:90:3F:D3:AB:A2:CC
            X509v3 Authority Key Identifier:
                keyid:40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:01:75:7b:98:4f:80:7f:5c:b8:d0:4d:0f:d9:95:e5:c4:
         0b:f5:4f:e3:04:ed:06:93:16:12:c8:49:7c:73:e5:bb:f6:c8:
         58:70:18:a0:15:ef:f4:c8:46:f8:8a:b4:d2:73:fe:a7:1d:b4:
         e5:bf:33:2c:67:e8:e8:26:47:9a:3f:53:03:2d:e3:1c:20:71:
         37:d3:0c:60:3f:85:a4:82:6f:d7:ce:a6:4f:3c:26:28:1b:bc:
         9e:98:39:ae:57:35:6c:e6:cf:9a:af:9d:94:06:e9:de:45:6f:
         b9:75:e0:5a:e6:1b:01:42:f9:82:a5:ad:69:b6:7d:cd:11:07:
         21:36:ae:0b:d4:10:9c:c6:c6:bb:4c:b6:43:14:ea:50:33:7e:
         e4:15:a4:34:eb:57:d0:d3:61:08:00:c1:4c:cc:54:7f:9f:c5:
         58:80:1d:6e:76:86:c1:79:47:33:31:e6:90:e0:d0:a8:c2:e2:
         c0:4c:61:39:5e:0d:08:87:8a:15:83:bb:df:22:a8:a3:d1:8d:
         49:cd:90:36:54:0f:f0:41:a4:45:a7:ad:fb:e1:5c:a0:fb:ae:
         54:30:aa:56:1f:c0:f0:ba:51:e9:0a:18:63:a0:82:85:6c:53:
         d7:6a:5f:e8:d7:08:c4:33:bc:af:2c:9c:18:02:73:0f:f5:86:
         89:10:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----