Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
File:                     qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json)
Hash identifier:          SfSwWB8vaVx1uVokp4mOeDAxqgX2rsraMTxqWm03fyA=
Subject key identifier:   46:F5:23:04:7B:8C:37:09:6A:75:88:F1:4D:98:BC:24:86:F6:88:2A
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Certificate issuer:       /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial:       01962ECF5D626349676228A6B6D348EA8025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
Manifest number:          0C0D
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa (hash: Xe6PXCoxFN3TxuAuxssMLTkZiOn7w8CCGbAYJjxvzp8=)
                          2: ICTqfYBG-REglE6QLqLm2DMr9nE.roa (hash: tDqSslkp4cv0xRmwxWP8ihUEHojImR31lIwN5aeFXMA=)
                          3: UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa (hash: WlUQqIFYI5VcIHzcu2H+hLq92ENL7s5Vno3Whj19yac=)
                          4: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: YR6LbKeT/k3A1VObvgKnSQs1uF8mUg3m9Rvy7Hm3e4M=)
                          5: z4IiemcHS1pMiHT-EsPFFeOITkw.roa (hash: 0Cm5tDp/8EqZeA3+YLY/lnsQEFVnqQEXb0poa3VHvws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5d:62:63:49:67:62:28:a6:b6:d3:48:ea:80:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=46f523047b8c37096a7588f14d98bc2486f6882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:db:4e:79:33:80:6d:22:e6:95:25:c8:5f:
                    ac:9d:8f:cb:9f:a2:70:20:be:d4:30:a9:2a:5d:1f:
                    7f:2f:59:9c:56:7a:c5:d1:99:18:15:74:f6:b6:27:
                    74:42:23:e1:bc:9a:2a:64:a4:2a:f5:e7:fb:07:2b:
                    43:32:bc:70:91:7c:df:ef:3e:99:ef:3a:61:af:7a:
                    dd:c2:9b:7b:91:2f:12:63:bd:4f:d3:c7:3b:eb:29:
                    28:81:85:02:dd:7e:d0:b2:f6:63:e0:d2:27:a5:6a:
                    ea:98:b5:16:2f:3e:22:8c:57:2b:fb:38:bd:da:79:
                    a3:0a:fa:ac:89:b9:f2:51:5b:83:ec:b4:45:b8:8a:
                    16:9d:8e:3f:56:6a:c6:e6:12:aa:9e:0b:33:3c:0c:
                    3e:85:67:2a:35:63:2c:c6:8f:2a:0c:57:8b:40:c2:
                    93:11:ad:72:b7:aa:e6:68:6c:67:5c:97:49:09:62:
                    18:06:59:1b:af:1b:a6:b7:1a:d1:83:63:b0:64:73:
                    34:5d:ac:f1:44:be:f8:4c:15:d9:d7:92:a5:b8:c1:
                    4a:3d:8a:64:84:6b:e8:1c:ed:e7:d6:f7:6d:29:f4:
                    85:ab:0e:ce:7b:30:10:95:dc:7b:77:2b:94:7a:8b:
                    43:de:b7:e0:1f:25:a4:48:c6:58:1d:b8:d3:c1:46:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:23:04:7B:8C:37:09:6A:75:88:F1:4D:98:BC:24:86:F6:88:2A
            X509v3 Authority Key Identifier:
                keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bc:72:10:e4:b5:46:9c:9b:b3:25:98:df:45:fc:a1:ed:b9:
         53:86:a2:ea:af:ff:5c:47:8f:a8:e3:4a:7f:f3:f9:d8:4c:c8:
         b0:4a:40:75:e9:3a:2a:07:c3:76:3b:89:ba:cc:43:a6:2d:17:
         6e:70:d7:1f:59:a2:eb:b4:0e:c4:a9:f6:79:e3:52:2a:63:89:
         57:5b:04:ac:df:0b:42:91:88:6b:a2:18:57:b7:d7:60:5f:b6:
         9c:11:07:e8:6e:e8:d0:e0:97:45:b3:16:75:2d:a2:6c:09:ed:
         5a:86:20:73:63:03:2d:90:98:c5:04:a6:c7:61:2f:ed:77:a3:
         d2:d8:0f:23:0c:c9:67:3b:6a:11:f5:3c:3f:41:39:c2:4a:86:
         f5:8a:54:e2:34:2e:c6:d9:25:b7:55:1f:bc:14:07:ec:f1:79:
         14:81:8b:0b:eb:eb:23:10:b7:40:54:62:a1:e1:d3:f4:85:8d:
         46:06:7d:89:a0:26:24:49:9c:52:3c:3e:46:2b:9b:74:ba:14:
         a4:34:1e:b0:5c:8c:44:c9:01:a5:17:d8:2f:0a:d7:8d:13:95:
         89:3f:30:69:69:cd:2e:85:16:e5:a7:9d:83:92:e3:61:f8:d4:
         65:d8:82:94:ac:c9:70:99:de:32:00:1a:97:19:14:08:23:b2:
         b2:61:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----