Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File:                     QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier:          d6jhXp8SaUo/yE04ImD7t+Zn4wyLouD77UXb4D4ZioY=
Subject key identifier:   80:27:78:ED:B2:15:86:E3:E1:FB:72:0A:FF:1E:FD:F7:D4:14:86:38
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer:       /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial:       01962E99920AB85B57A1AF5EEAB7FAF7BB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: otsEsCpgWdXl0uxYvGXPBuSxpNV8KPek5hdupssfU70=)
                          2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:92:0a:b8:5b:57:a1:af:5e:ea:b7:fa:f7:bb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=802778edb21586e3e1fb720aff1efdf7d4148638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:a4:8d:f2:cb:f1:08:d3:3e:db:03:0d:2a:
                    86:c9:e4:ca:ed:92:f4:81:ea:8e:f1:73:41:b0:68:
                    c2:70:7d:ba:c3:2f:8e:06:6d:66:cf:e8:55:36:14:
                    c8:da:9d:e7:f1:08:10:24:37:ab:7e:18:4b:de:9d:
                    b5:1e:e4:f8:c1:65:07:22:80:fa:c3:78:54:39:d1:
                    5b:97:2f:dd:09:a6:16:5f:ef:b6:9c:2e:45:36:9e:
                    85:6b:77:52:cf:d8:3d:b5:7f:d6:78:2f:9b:34:62:
                    0f:3a:49:60:4d:e6:97:0d:d1:53:60:69:74:35:c3:
                    cd:e6:8a:f5:a7:b2:d4:77:2f:a1:22:3a:73:be:1f:
                    1d:2a:8c:fd:41:19:88:a9:10:97:6f:26:5a:be:6b:
                    0b:da:47:25:68:52:3f:5c:05:7c:c9:58:43:f4:20:
                    a9:af:ba:fe:89:e8:0d:d6:6a:b6:e7:d7:3a:ad:f4:
                    8f:c3:4e:24:aa:54:b1:f6:f5:d0:e4:81:24:ae:34:
                    31:29:b7:96:16:c1:49:59:97:5e:40:52:53:15:53:
                    77:3b:f9:86:d5:b1:06:f7:2e:22:cd:f2:fa:c9:e9:
                    21:75:9a:b5:0a:1b:58:1b:2e:d8:30:e7:6f:5a:48:
                    b6:28:11:9c:7a:c9:d9:5c:86:38:44:06:ab:1c:8b:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:78:ED:B2:15:86:E3:E1:FB:72:0A:FF:1E:FD:F7:D4:14:86:38
            X509v3 Authority Key Identifier:
                keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:81:78:3c:6c:87:4d:60:ec:0a:0e:d1:47:29:dd:7d:42:ff:
         8a:c7:94:94:e1:27:a2:55:ab:15:df:f5:02:e5:c2:56:ce:4d:
         99:39:bd:0d:1a:5c:b0:61:8e:29:a4:17:0d:2a:16:c9:6e:1b:
         4b:d4:c3:17:a8:c7:7c:fc:03:ee:1f:79:47:db:f0:f7:af:c5:
         a1:11:bc:43:95:44:5e:da:d5:75:58:11:11:3a:7a:32:98:d0:
         00:34:db:c3:a0:d9:ac:2f:3b:0f:01:8c:4f:7b:11:9c:bc:86:
         13:ee:c2:b9:88:e8:de:6c:37:c8:38:de:fc:02:23:ea:5a:7f:
         27:1a:7c:0f:15:69:15:7a:8a:74:4a:05:08:a0:52:91:03:81:
         a4:e2:97:0a:8c:8e:43:51:5e:e7:4a:e9:d4:17:0f:42:a4:d0:
         4b:3d:60:89:53:29:92:64:22:c5:d4:29:8a:29:58:c6:ae:cd:
         53:b1:51:cd:fc:f3:93:a1:64:0a:ba:dc:e6:92:fd:70:c3:b0:
         1e:86:e3:c5:ec:c3:0b:2f:29:10:8d:3d:d8:02:ac:a3:a3:b3:
         9c:0e:43:ac:74:8b:11:6b:6e:7c:56:af:39:75:ef:68:8b:87:
         f0:f2:68:23:58:42:a3:06:82:a4:b8:e0:0c:11:6f:65:64:ba:
         f0:f4:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----