Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File:                     cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier:          6iGCv72pDZhOZpLLSj9JLvsi87ix2RZtehKXYCrWeJE=
Subject key identifier:   4E:23:27:8F:68:1C:17:FB:51:CB:F6:AA:9B:3A:AF:F1:AD:F4:50:71
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer:       /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial:       01962F748D279AE209C11F075E54C6228E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number:          0D17
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: Ev6OfiY59NkEWUd2EJIADAKkvPaiScGX7Ne7xElBweA=)
                          2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=)
                          3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8d:27:9a:e2:09:c1:1f:07:5e:54:c6:22:8e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=4e23278f681c17fb51cbf6aa9b3aaff1adf45071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:9e:19:dd:c9:33:e2:3b:04:84:c6:74:21:
                    92:88:c3:1f:f7:b5:3c:1c:95:01:b1:af:e7:60:a0:
                    95:39:77:9e:92:2d:40:79:23:86:e1:03:5c:0a:4a:
                    7f:24:6c:e2:1c:f3:d0:83:ae:a3:f7:08:33:90:1b:
                    36:55:38:8b:81:a4:ad:93:d0:2e:3d:9a:9d:60:e3:
                    b0:d3:65:0b:3f:7b:ae:4a:c9:a3:22:6a:83:d6:f4:
                    69:6a:a4:3a:84:c6:f3:85:a3:ad:09:cf:f3:f7:96:
                    01:35:81:b0:5f:8b:b7:e5:7c:e9:65:e8:1a:4f:0f:
                    fc:5b:46:54:c6:c9:33:83:4c:c1:f4:5e:f8:7e:e8:
                    47:d7:5d:6b:c6:65:21:c4:b5:c4:d8:5f:f0:4c:3b:
                    5b:86:5d:88:b1:cb:2f:87:7a:78:4d:26:bc:09:86:
                    e0:18:66:6e:c7:21:99:20:d6:3a:82:94:be:69:7f:
                    2d:b2:62:e8:c6:1d:c8:1d:5a:71:14:6b:d1:79:8a:
                    9d:68:1f:0f:a0:fd:22:8b:28:84:92:0c:34:f8:a4:
                    b1:e6:7a:61:a8:be:62:8f:1e:d3:df:ff:70:e6:a6:
                    27:a9:dc:40:d4:ef:c1:38:43:8c:5e:72:f6:f8:6c:
                    79:be:8c:3a:53:49:02:5c:c2:2c:fe:5e:df:b6:35:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:27:8F:68:1C:17:FB:51:CB:F6:AA:9B:3A:AF:F1:AD:F4:50:71
            X509v3 Authority Key Identifier:
                keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:ac:56:60:95:38:d4:68:32:78:83:d9:14:88:be:0b:c6:
         c6:19:cc:d0:c5:a4:a8:26:80:09:1b:9c:10:8e:e7:93:47:05:
         01:7e:0f:64:4d:99:5e:b4:df:de:a2:26:67:f0:05:cb:e9:56:
         cf:77:56:8a:a6:49:a1:6b:ff:c9:3e:6b:dd:c8:16:46:ad:18:
         8f:7e:85:64:c0:3d:ca:af:bb:4f:4b:b3:22:6d:9a:3c:f0:93:
         b8:7b:c1:4e:57:70:89:dc:3e:a1:9d:a2:eb:02:ce:bb:83:5b:
         d4:41:7c:fc:9e:87:1c:66:76:ed:0a:56:b7:8a:52:08:57:8c:
         21:15:2d:25:1a:9b:a2:94:1c:7f:a0:e3:64:a3:cd:a9:39:33:
         f6:23:11:b7:42:f3:cc:05:be:7a:e0:dd:42:fe:de:e7:23:03:
         0f:41:87:25:81:44:e3:d7:fd:70:6e:46:f4:40:ef:44:19:4b:
         27:f0:f9:64:a8:5f:84:f4:cd:be:16:d9:8b:47:ec:97:af:c7:
         fa:8a:cb:ba:aa:29:28:92:64:44:5b:db:56:9d:c9:77:2f:8c:
         15:67:78:29:49:5d:ca:0c:2d:ca:53:66:6b:9d:37:92:85:86:
         2c:ee:eb:63:e1:5f:2b:f8:db:74:44:c6:47:5b:0d:63:77:d3:
         67:7d:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----