Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File:                     QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier:          z77obzrtKriEAFwl4nq9z1Q2mFT2O6dMApaIaLy3B/A=
Subject key identifier:   B2:D2:E0:F8:91:7B:DD:2E:77:31:58:F2:CE:C5:DD:9D:7E:6D:B8:73
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer:       /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial:       01962F0740A32D74BCBAC6D47F5BDCFF5C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number:          04F8
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
                          2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: DGM/QbMWGTU8YJPOROxnLYNNPmX8qNy5Bs9x7lBvDAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:a3:2d:74:bc:ba:c6:d4:7f:5b:dc:ff:5c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=b2d2e0f8917bdd2e773158f2cec5dd9d7e6db873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:57:fa:75:85:8c:c3:4c:e6:46:15:34:10:
                    67:b8:f9:a2:0f:02:86:7a:e3:4c:21:fb:d5:00:e4:
                    7e:a7:8a:c5:e1:e0:57:30:fb:13:0b:62:c4:46:5d:
                    c0:62:11:ab:55:af:54:fd:d2:73:cc:9a:43:6f:04:
                    43:75:38:af:c6:ba:2e:0b:c2:f2:15:cd:ac:bf:88:
                    23:81:c6:de:32:2d:96:5d:a6:26:24:9a:4d:ef:76:
                    15:4c:04:1f:88:93:5e:ac:dc:79:bf:51:8d:cc:b4:
                    86:19:16:c8:70:1b:f3:c0:a7:84:b3:3c:04:4e:40:
                    c8:4d:c3:f8:a8:fb:06:ac:5e:98:6c:74:05:3b:71:
                    cb:42:15:21:d9:ce:e4:5a:cc:a7:0f:2a:9f:65:8a:
                    05:2e:f7:ad:ed:cd:ab:0d:bc:a5:7d:12:71:31:dd:
                    1d:a2:e3:9c:2e:47:76:b6:09:48:a5:ce:2f:51:fc:
                    8c:72:4f:db:2d:a7:c1:5a:9e:4f:a0:f3:ed:95:3b:
                    51:5a:1e:df:51:69:87:ae:1c:11:13:18:1e:47:08:
                    0e:11:0e:28:82:2d:4e:25:44:cf:1f:7f:b5:64:32:
                    fd:66:7a:ce:ba:ec:8a:17:19:ed:1f:2d:cf:36:fe:
                    76:b3:26:d5:1b:37:5e:27:85:35:74:71:c2:17:ae:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:E0:F8:91:7B:DD:2E:77:31:58:F2:CE:C5:DD:9D:7E:6D:B8:73
            X509v3 Authority Key Identifier:
                keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:09:5b:ef:66:6e:95:db:af:bd:47:fe:e6:0c:fa:c9:2f:
         91:79:f0:16:65:26:77:b7:75:89:61:9a:85:74:13:33:06:c8:
         f5:a6:df:7d:b3:da:a1:b3:f3:ac:71:d4:66:b0:97:c7:ab:1b:
         32:59:66:16:70:b0:70:48:f3:b8:25:86:c8:6f:2d:47:bd:61:
         0d:7e:8b:a3:c3:81:a9:f7:7c:67:6d:e3:72:47:4c:3f:db:5f:
         1c:30:72:19:74:c9:fb:98:2b:83:9f:d0:6f:a1:56:ba:e9:05:
         52:d6:f4:88:82:c9:1f:08:e9:d0:64:97:f2:7d:ba:6e:c8:e8:
         25:0e:d4:87:ff:9b:a0:c0:73:12:60:1e:a2:d3:0c:fe:a5:70:
         82:fb:cf:80:b2:7e:86:09:e3:d1:5c:5a:c3:63:e9:22:b4:f7:
         5e:7e:29:bb:0d:8a:0e:20:0a:b1:74:33:d3:f6:57:c6:e5:c2:
         df:98:47:17:b9:95:fc:a9:9d:f3:d5:0f:dd:1c:5f:34:71:03:
         f6:66:d4:08:96:53:a1:6a:68:7b:b3:bb:62:23:d0:e8:60:2d:
         5d:30:b3:18:6a:a5:ac:7e:a7:8f:68:d7:e6:86:44:6f:a3:54:
         b7:6a:64:6d:89:43:17:f0:bb:c2:11:83:16:5d:79:18:91:bb:
         a2:2c:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----