Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File:                     Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier:          SHixCriIxA5YNPDjyw0o1xMIkQ/xv56dfBlAb0gqhE4=
Subject key identifier:   C7:38:C0:AF:17:8D:EF:1C:45:A8:99:8E:D6:AF:17:37:13:C2:3F:B4
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer:       /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial:       01962ECFCCBB80695C0F27D773C5961EFCA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number:          1203
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
                          2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
                          3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: 8/aTbnD7v1Xb0APOBPhF7Fl7EbHM2QCYcn9tOEPLHi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:bb:80:69:5c:0f:27:d7:73:c5:96:1e:fc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=c738c0af178def1c45a8998ed6af173713c23fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:c2:e8:01:0d:ed:db:89:44:01:9d:ab:dd:
                    83:a3:3a:63:55:0f:3a:b2:5a:5f:4a:ec:46:33:cb:
                    42:79:14:d1:89:19:65:41:9a:47:c9:aa:4a:2d:28:
                    a7:e3:ca:9f:c5:d1:80:9d:b9:77:fc:a8:7a:50:dd:
                    22:6f:d6:6d:8e:68:db:2d:e1:35:8a:f0:25:cb:7c:
                    f5:f9:58:57:24:8a:0e:ab:0a:bd:14:ad:ce:77:92:
                    06:5b:92:75:6c:1f:78:56:db:cf:4a:e7:4a:77:46:
                    99:cf:19:3d:82:35:49:ea:76:66:08:d0:e0:4a:36:
                    3e:6e:07:64:12:8f:09:a3:49:1b:dc:e4:f3:19:31:
                    b8:f7:57:ef:a1:9c:62:9b:a2:2d:11:5e:3b:ca:bf:
                    4a:12:00:b4:db:5f:08:b0:39:02:ee:63:1f:ac:d9:
                    c9:a6:ec:d4:3b:c8:14:23:93:07:20:97:31:72:ad:
                    a5:79:f6:6e:bd:17:81:1f:f8:e0:54:03:02:a1:48:
                    c3:a4:9c:8a:c4:f4:b1:50:ef:46:15:d9:5d:23:55:
                    5c:54:dc:97:a5:d4:1f:8a:aa:47:68:8e:0f:4c:24:
                    77:7d:d0:28:7e:6c:37:f9:c1:bc:b8:32:1a:d7:4e:
                    d1:d4:39:fe:4b:9d:c0:cc:e6:91:34:97:d1:13:a8:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:C0:AF:17:8D:EF:1C:45:A8:99:8E:D6:AF:17:37:13:C2:3F:B4
            X509v3 Authority Key Identifier:
                keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:6c:b9:a1:1a:63:ad:8a:53:6a:be:82:a3:3f:57:f4:7d:
         b1:84:7c:82:36:66:1b:30:d5:b4:38:0c:5a:46:5a:e1:5f:3f:
         15:cc:da:4b:eb:47:ce:2f:5f:e5:e0:e4:ce:b4:ae:d1:01:93:
         5c:06:33:22:38:dd:4e:be:ad:d2:94:56:6a:86:0b:f0:3b:0a:
         c0:d9:37:76:ce:9b:a0:f8:e6:4c:64:6b:8f:4c:94:e2:74:51:
         f8:63:70:7d:12:38:5f:7a:65:17:28:19:f2:0e:cb:c6:de:b0:
         e4:c3:26:88:b4:df:52:a7:46:ba:47:45:2f:a0:31:5c:17:8c:
         80:7b:ca:82:b8:45:40:e6:30:4b:ce:d6:c6:bf:28:a1:cb:71:
         ea:2c:dc:b6:e8:6b:74:21:1b:90:e6:13:54:97:e7:4f:79:b9:
         72:ed:4e:a0:f8:2e:dd:67:35:0b:c6:0c:6c:fc:82:73:97:ee:
         e4:5c:46:6e:ac:41:02:b5:22:e7:d6:3e:e1:cf:f5:e1:af:bb:
         b5:cc:ed:3c:ff:1d:09:c7:28:dd:d3:19:2a:79:27:93:55:fc:
         a7:6c:a2:c3:26:ba:1d:6f:2c:90:d6:99:67:37:f2:6b:7d:9a:
         06:b1:cc:f7:5f:a6:ac:95:e6:36:b6:2f:71:48:3d:4b:8a:6e:
         1e:7d:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----