Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File:                     rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier:          rOVBTb8YvDNxRsYJMlkV5pPWUsog6pgbc4CWflq+X4M=
Subject key identifier:   BF:FC:D5:54:AB:03:F8:D1:DB:3E:38:89:7E:0E:0D:B5:00:30:26:4B
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer:       /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial:       01962F0744895AE4450754ED535C37801505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: A/sB1LFPeyr3Anf86gaalQyxUxdV20K8a63bH3g3pcs=)
                          2: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (hash: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:89:5a:e4:45:07:54:ed:53:5c:37:80:15:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=bffcd554ab03f8d1db3e38897e0e0db50030264b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:d4:7d:94:d3:43:66:33:39:10:ca:90:e4:
                    5d:a5:fd:3d:88:2e:b1:d5:be:ea:0a:1b:b9:3b:b1:
                    66:bd:f2:39:d9:2b:d2:6f:81:73:1b:9b:81:7b:5a:
                    67:eb:ee:fd:3d:d3:df:4e:2a:2b:46:48:cc:8b:db:
                    a4:f9:5b:e7:7b:3f:e1:74:30:e9:0d:63:c6:29:35:
                    b6:39:08:c3:d7:cb:88:37:29:4c:b9:52:67:3c:45:
                    17:34:ae:bf:8d:bf:93:83:1d:25:60:89:8d:c9:72:
                    ef:11:fc:2b:d2:38:7d:f6:58:db:74:52:5b:8e:26:
                    4c:ef:54:df:71:5f:e0:a9:79:4b:e9:1d:ae:61:f1:
                    14:9a:29:69:55:f4:a7:85:ba:f2:3c:17:bf:19:79:
                    73:f9:4a:3e:12:a1:00:2b:8d:e5:d9:e8:17:99:77:
                    c0:94:77:94:d9:2d:a4:c7:30:d2:59:0b:a8:31:cc:
                    7d:4b:73:74:1c:79:98:38:70:87:cc:05:24:46:67:
                    86:8e:ea:05:11:bb:7a:02:c0:b2:b2:13:67:e1:4c:
                    94:e7:b3:dc:8f:04:13:f9:c7:2a:37:ca:c6:4a:d4:
                    7c:cf:f4:b7:a7:3b:f7:a5:16:a8:8d:75:a8:95:0a:
                    94:e1:08:01:fb:3c:e7:1b:d7:1d:ca:17:55:ea:4f:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:D5:54:AB:03:F8:D1:DB:3E:38:89:7E:0E:0D:B5:00:30:26:4B
            X509v3 Authority Key Identifier:
                keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:db:a8:37:db:09:fe:c5:23:6c:4c:38:46:4d:4f:60:8b:ef:
         a9:6f:b4:c8:32:9c:9e:b3:a3:b3:d4:0e:d6:ff:02:7e:f4:b4:
         b5:81:90:e2:b5:55:bb:6f:3b:f6:59:01:90:84:5f:62:46:fb:
         1e:e3:bb:91:4e:cd:38:e1:28:52:00:51:f8:8d:c7:18:ff:36:
         dd:cf:e0:2a:9d:7b:9d:5d:f9:37:c9:3e:7e:a0:1b:cc:be:aa:
         09:5f:b6:68:d3:8c:b6:d7:d1:ec:bf:f0:dc:a1:5f:72:2a:09:
         1d:7f:ab:66:7a:fd:47:6f:37:7c:9e:47:e8:28:ff:3c:90:aa:
         9c:0b:48:fb:ae:85:dd:0b:f9:04:42:cc:78:85:21:9d:d1:1a:
         ff:dd:16:3d:2f:8d:80:78:8a:ca:b0:69:b3:87:c9:a0:1e:59:
         c3:b1:e8:a4:5a:ad:9a:93:f6:82:31:a5:16:5c:a6:8f:cd:8a:
         88:c7:fe:89:43:48:06:7d:e5:44:cd:ce:d6:85:6a:0f:e5:f2:
         c0:4b:49:08:d7:6c:f9:ae:75:bd:52:7d:65:6c:75:15:80:22:
         25:e0:46:c1:0d:a2:80:84:bb:0b:45:42:c9:59:61:4e:73:64:
         8f:47:e2:38:96:dd:98:d2:32:db:c9:2c:f2:17:b1:e3:42:f9:
         09:38:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----