Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
File:                     a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json)
Hash identifier:          BCZ4hnMxGRv11YuW+dcNkhglSxf9/ST0el3kU9iRiwM=
Subject key identifier:   86:0E:01:9D:3D:59:77:02:2C:3E:E1:C0:3E:FB:D7:8B:B0:BA:A6:55
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Certificate issuer:       /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial:       01962FAB4F632BA8799CA17A17388BE908CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: BBQhgIlZuxW7n5GYvUrLE/F4+jdRdfXDErwczNPhFBU=)
                          2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4f:63:2b:a8:79:9c:a1:7a:17:38:8b:e9:08:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=860e019d3d5977022c3ee1c03efbd78bb0baa655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:0a:04:d1:4a:56:bb:39:a7:be:af:95:92:
                    e0:93:b9:51:51:91:df:8d:42:b1:11:94:1a:03:c5:
                    16:81:1a:04:4f:e1:33:bc:88:e7:3a:f3:a0:d2:1f:
                    8c:8b:71:11:2a:e9:ef:c4:f7:ba:08:2d:1f:ed:c4:
                    90:37:07:7b:eb:b6:73:d9:c0:cb:14:8e:95:54:11:
                    cd:9b:a7:7e:02:14:37:a3:b8:b4:4c:b9:d6:44:40:
                    b8:18:3a:e2:8b:fa:60:3c:59:80:01:61:77:fc:a9:
                    f2:33:0f:49:ba:67:41:cc:9d:b7:1d:58:f6:cf:13:
                    61:e7:f9:57:b9:46:e8:e3:2c:a6:54:9d:2d:1a:0a:
                    38:89:76:44:aa:66:c4:2e:f5:70:00:00:16:3f:e0:
                    79:da:bf:02:e8:a6:74:47:94:84:70:b4:f3:54:95:
                    76:e1:ff:8d:0a:51:a8:b8:40:72:81:b3:8f:fd:91:
                    69:df:47:36:e6:4a:61:13:08:97:52:2d:ea:3e:a6:
                    b3:41:94:0b:07:87:f3:b1:bc:6e:e2:16:90:d3:d8:
                    3a:69:3e:8a:af:86:10:93:2e:a6:85:b4:71:8e:5d:
                    f9:2e:45:e2:14:23:cb:86:ac:f2:90:ba:22:0e:8a:
                    ca:08:49:34:f0:59:40:6e:d9:1f:16:04:8e:d2:30:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0E:01:9D:3D:59:77:02:2C:3E:E1:C0:3E:FB:D7:8B:B0:BA:A6:55
            X509v3 Authority Key Identifier:
                keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:78:f0:1d:5f:55:c0:3c:b9:52:6a:4d:10:c8:8c:d2:08:
         87:13:81:bf:2c:00:17:c8:62:c7:63:15:ff:2a:ba:93:57:47:
         65:2a:c0:36:85:a4:7b:36:d7:4a:f3:69:64:b4:5b:6b:78:5e:
         9f:b1:92:73:35:43:6c:77:cc:00:9f:c8:c5:19:e6:a8:4b:4b:
         31:6f:8e:83:d1:1f:97:84:9e:87:db:28:ad:f1:4b:75:58:0c:
         ca:8a:8d:ec:3e:58:06:00:14:e6:fc:d3:2d:d6:f4:10:a9:e1:
         5c:59:2f:2f:88:cc:40:42:55:37:1a:bb:e6:f4:e8:67:ee:01:
         3e:88:f0:2a:61:2e:71:60:73:62:2c:f7:86:50:15:76:75:b0:
         6b:ea:f8:79:3c:8a:96:f8:1d:8d:c3:51:f7:1c:65:c0:97:03:
         f0:4d:ad:4a:62:3c:48:b6:e1:51:70:96:01:8d:ce:55:f4:fa:
         bf:d9:4b:8a:07:6c:cd:bf:e3:42:da:9f:2d:30:ba:61:6c:a8:
         40:d4:6e:23:70:a2:98:31:30:e2:8a:f2:11:38:9e:84:7c:95:
         e6:97:6c:0f:33:86:ba:85:00:00:53:72:18:df:14:93:a9:e2:
         13:03:fd:0a:b0:6b:84:d6:19:e1:27:2e:ee:d5:38:fc:c7:fd:
         7b:da:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----