Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File:                     qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier:          VPh8ZRK1I31dqF7ZPCbUEWqmkCL9ym9FA/m1bo1HuV4=
Subject key identifier:   5E:12:31:CC:D4:B6:D8:00:B7:94:39:96:2F:1E:5C:D4:70:10:83:05
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer:       /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial:       01962ECFDB128FA07BF00A56E0C0A512850D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
                          2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: BQnAM4Ac7zSIiygh+nVr14wVZn2qThaNLwO2rERXozA=)
                          3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:db:12:8f:a0:7b:f0:0a:56:e0:c0:a5:12:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=5e1231ccd4b6d800b79439962f1e5cd470108305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:da:56:e0:dc:f3:12:1a:10:e3:a8:d5:7a:
                    7f:f5:23:66:ee:09:69:c4:d9:dc:09:78:03:b0:86:
                    73:63:03:b8:2a:74:9b:f6:39:7a:18:68:02:84:be:
                    7d:99:9e:db:0e:20:7a:ce:28:8b:d3:74:e7:a5:c1:
                    24:ed:62:39:95:4e:85:bc:f9:2a:07:e9:ee:4c:d6:
                    9c:06:15:c1:71:a6:4e:6d:cb:8f:f1:be:0b:94:52:
                    a2:6b:10:ff:ca:41:a8:b3:b3:78:e9:f0:5f:4a:43:
                    3e:21:77:50:e7:05:1b:91:12:8b:85:41:45:c7:d8:
                    ca:2b:e3:08:16:2a:9b:7b:86:f2:90:92:29:18:79:
                    8e:b2:99:51:65:9a:bd:a6:a4:59:58:cf:94:91:4c:
                    10:26:5d:51:33:a0:b2:54:8c:02:89:df:21:64:fa:
                    16:25:e9:a7:70:4b:96:2b:62:46:4b:44:26:18:24:
                    67:2d:bd:6b:1b:b7:5b:98:dc:ba:45:63:57:76:52:
                    13:4f:34:99:3d:94:19:d9:65:ee:cf:c3:86:14:d7:
                    0f:cb:ca:7e:65:76:43:02:fb:4f:f1:0a:c0:78:06:
                    d5:aa:b4:bd:7b:82:a1:79:2c:c0:bd:3c:15:65:80:
                    d3:f8:36:88:23:e0:b9:01:4b:33:11:2f:a0:37:45:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:12:31:CC:D4:B6:D8:00:B7:94:39:96:2F:1E:5C:D4:70:10:83:05
            X509v3 Authority Key Identifier:
                keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:3a:71:04:78:47:a0:da:87:dd:74:4a:92:76:db:3d:1f:0a:
         e0:21:14:e4:84:d2:a3:dd:95:0a:7d:74:6d:3c:f6:0e:40:18:
         80:95:9f:3d:e1:7c:b0:c2:5a:13:a7:c1:b0:03:20:c7:47:8f:
         df:6e:1c:e4:53:78:ed:56:71:48:9e:3a:08:86:0c:d4:b4:4f:
         19:9d:73:e0:a3:fc:d1:dc:6e:99:12:ab:82:79:9c:49:a8:af:
         7d:0a:5b:63:49:dd:5a:0b:79:2f:a6:bd:d7:84:75:76:c2:99:
         fc:22:a4:12:83:c3:c9:75:71:a1:e9:0a:ee:25:f6:00:67:04:
         50:1d:ae:cd:64:6a:0d:52:93:01:8b:21:aa:4f:b1:3e:07:6f:
         f0:2a:0c:65:d6:1c:29:b9:cd:ad:e3:87:2a:ff:12:44:ca:c6:
         52:7b:e2:12:51:75:68:0a:09:7b:0c:93:a2:40:92:d0:85:45:
         8a:31:a1:45:fc:c1:36:06:d7:0e:1c:2e:c8:b9:c9:b5:15:7c:
         4a:86:4a:e0:de:9c:f3:c7:aa:7a:65:04:0c:73:fe:85:d1:33:
         06:87:d3:82:c8:e3:3e:1b:16:eb:42:f8:84:73:05:1e:be:b0:
         8f:12:d4:70:a7:4b:8c:70:a9:0e:0d:0a:f3:20:ec:e0:5e:74:
         02:77:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----