Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
File:                     qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json)
Hash identifier:          JRozeCHzQ8mFjOPrXWNVR4lBcHvlVOvSSg0g16/eSG0=
Subject key identifier:   6B:43:09:E1:06:EE:97:EC:2F:E5:D1:B3:86:EA:F5:72:89:9F:C1:AC
Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
Certificate issuer:       /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Certificate serial:       01962E99B7BCBBF2254BB4437F4344EF011C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
Manifest number:          0948
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: +ZI7NDakWwhdUbP5jnfkvaXZKLznujeOt/m6WzFQ16Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:bc:bb:f2:25:4b:b4:43:7f:43:44:ef:01:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=6b4309e106ee97ec2fe5d1b386eaf572899fc1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:a6:ef:49:2d:22:ee:08:8e:c1:a3:b2:18:
                    a1:d7:80:ed:7f:23:5d:42:b6:29:b9:77:17:f3:a0:
                    cb:3c:ab:6b:34:32:33:2d:55:d1:a6:25:08:af:57:
                    82:7a:fb:4d:5f:6d:e2:3b:fe:62:eb:3a:ee:f9:6c:
                    22:50:f3:d2:0c:00:fa:2c:43:c9:a5:8f:83:5e:f5:
                    7f:a9:32:88:01:ff:f2:c9:c6:82:df:40:56:bd:de:
                    17:dc:cb:fa:25:b1:e0:f5:14:bc:cd:53:62:1c:1b:
                    5a:86:f1:46:b1:84:27:c7:d0:7e:9c:ec:b5:0f:d4:
                    f6:27:34:07:f0:56:37:9e:87:1c:02:6a:c4:ab:04:
                    79:6f:24:e6:81:fc:b7:dd:ff:7d:2c:40:ae:a1:bc:
                    e3:a5:83:d0:5d:0e:c7:34:8a:85:ed:78:b8:06:a9:
                    bf:f5:a1:79:9e:61:1c:7d:3c:fb:bf:48:c4:39:e3:
                    30:3a:92:37:f8:b2:31:cc:0e:6c:96:e8:d9:ac:3b:
                    07:d2:41:c3:16:2b:75:07:6e:3b:e0:52:c7:99:c0:
                    b7:08:0e:a2:ec:33:d9:1d:ec:ba:2f:4a:87:88:9a:
                    90:ff:f6:bf:20:7e:7a:9a:dd:fa:e0:c3:05:a4:c1:
                    d5:df:79:02:0e:9c:c9:72:8a:ed:c5:1f:a9:5d:ac:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:43:09:E1:06:EE:97:EC:2F:E5:D1:B3:86:EA:F5:72:89:9F:C1:AC
            X509v3 Authority Key Identifier:
                keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:99:de:a3:80:1f:6d:10:60:f9:94:b3:34:4e:9a:04:2f:f3:
         0a:e5:f1:67:d4:9c:0c:dc:c2:42:9f:90:ae:62:7b:58:ce:76:
         22:64:e9:b1:b2:ee:fd:ad:8e:04:9e:ac:a2:da:50:79:50:82:
         ca:ad:c7:4f:a2:db:28:ba:57:56:bc:e9:07:26:2a:04:6d:7c:
         0b:35:36:ac:9f:93:4c:3e:41:45:92:73:e7:0e:39:24:0e:03:
         c1:91:21:47:db:64:08:4e:db:70:f1:b2:13:cc:06:c3:b5:06:
         e2:61:90:b4:ee:40:b7:df:8d:8e:33:ee:d5:f6:aa:76:45:d0:
         28:24:2b:5a:a9:8f:85:57:24:a9:d7:de:a1:06:2c:b6:4c:aa:
         38:e3:5a:c2:1a:f6:b1:15:42:7a:24:bd:c9:22:3b:42:34:a9:
         18:fe:d0:2c:91:db:37:64:48:81:69:84:b5:f1:0c:85:eb:0e:
         bf:de:2b:a5:ed:5e:e9:fa:b3:b3:cf:4a:58:45:13:1c:29:17:
         16:66:9f:fa:79:ee:bf:4d:33:4d:5b:cf:f2:0c:fc:ca:bc:44:
         7e:ed:a0:4f:26:2d:a2:ff:b4:8d:5e:af:db:60:9d:1f:43:b4:
         55:86:27:7f:79:65:df:63:7a:a3:da:b5:fd:bc:18:43:b3:95:
         b7:c5:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----