Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File:                     eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier:          xJtgNIu1/7ePNFf6IeFaSvqJ9JjooBNmx16lNC2kdIg=
Subject key identifier:   6F:C9:7F:50:FF:66:A6:5C:57:AB:05:5C:C8:C2:20:09:76:77:4B:D5
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer:       /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial:       01962ECFAEC0B7E86A4B612DFE37005B98A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: yB2kZZJVKgp/g/hBDcFXWe/FbbASdjtuZ5/pQeoeby4=)
                          2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ae:c0:b7:e8:6a:4b:61:2d:fe:37:00:5b:98:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=6fc97f50ff66a65c57ab055cc8c2200976774bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:e1:4a:29:d0:b8:60:d7:21:c4:00:14:96:
                    44:13:24:d5:6f:1c:52:7d:56:c1:8b:9b:7d:65:00:
                    38:54:5b:7a:05:c1:f4:90:38:08:88:81:31:75:bc:
                    31:f3:7b:99:2e:fb:52:ab:80:43:bf:58:ed:13:3b:
                    89:73:6f:77:a9:da:d3:a2:13:b0:22:bb:d2:0f:04:
                    fe:7a:37:77:f8:08:03:92:a3:41:4c:5a:24:66:03:
                    2c:ca:50:d4:83:44:24:99:43:47:65:b0:dc:6c:58:
                    ff:fa:49:80:40:d9:92:b6:78:81:b5:fd:a3:f0:99:
                    5d:2b:4f:f8:ef:22:39:e8:5f:31:66:e5:74:67:51:
                    91:96:99:fa:32:d7:76:7e:0d:63:42:65:94:cf:ee:
                    cc:b3:50:71:48:51:e7:a4:7b:c3:43:8d:a3:63:bd:
                    08:7b:50:45:cd:32:7a:d5:2b:be:27:d9:c3:e1:1c:
                    65:69:40:32:6b:17:45:5c:19:9a:0d:e5:48:8e:64:
                    c0:fa:13:0d:74:96:28:ee:4c:3c:bb:38:37:cc:b0:
                    ac:79:e3:a1:19:aa:51:76:dd:bb:bd:41:eb:93:f4:
                    a7:e2:de:1e:81:85:2e:9e:08:a7:d0:54:21:b0:dd:
                    64:0e:51:2f:89:c4:1c:5b:4e:68:bc:29:20:c2:b9:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C9:7F:50:FF:66:A6:5C:57:AB:05:5C:C8:C2:20:09:76:77:4B:D5
            X509v3 Authority Key Identifier:
                keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c3:ca:be:e7:c3:0c:8a:00:b6:c1:2e:94:5a:e0:3d:ad:18:
         fb:86:d1:2f:cf:64:26:d8:c4:7f:b3:1f:4f:6c:4a:5d:4e:f4:
         56:67:76:0d:f9:54:48:11:9a:0e:6b:a1:75:25:f1:c5:cc:a3:
         aa:e7:1f:29:0e:72:cc:31:84:73:3c:d1:f4:31:d2:92:5d:fc:
         7b:ec:c6:d0:b5:1a:27:20:56:61:17:01:79:e2:3d:6d:66:1d:
         74:32:90:f4:70:83:14:9f:16:b4:a3:3e:4d:c7:c9:79:81:f4:
         f8:06:ac:89:1e:de:e1:33:cb:74:6d:cc:57:e9:7a:1b:e4:bb:
         c5:51:d3:9b:27:33:6a:24:6c:da:6b:88:29:b2:fd:89:f2:1d:
         f4:76:95:c8:33:c4:93:bd:a4:84:64:8b:a1:30:8d:f1:de:29:
         36:50:e0:00:c6:fe:79:eb:30:a1:87:29:d5:03:50:08:01:10:
         99:db:a8:a1:a5:91:05:1f:d0:f4:82:59:48:cd:07:b5:36:5c:
         3b:8c:2f:37:42:da:b4:e0:04:c5:f1:8d:98:b6:77:1f:3c:25:
         cf:c3:83:d6:48:4a:54:77:d8:f6:20:9f:04:98:8d:47:d0:c5:
         55:f8:65:24:ed:c9:84:3f:d1:c6:28:6f:55:50:2f:d7:83:fb:
         b7:d7:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----