Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File:                     DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier:          2gf0g9R1QZpX4LY3B7GhSk6OKAU1nZkB8dXlXMY9M9Q=
Subject key identifier:   A1:FF:FC:F1:15:0F:E2:61:DD:CC:9C:42:94:4F:0C:39:3F:1D:43:AD
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer:       /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial:       01962FAB2937C2A2FB4DB29E4124AEB15D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number:          10F9
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: wZUhBvTiLFEEcClaQdBencPuCf6VeQfbrhttJnvH+aE=)
                          2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:29:37:c2:a2:fb:4d:b2:9e:41:24:ae:b1:5d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=a1fffcf1150fe261ddcc9c42944f0c393f1d43ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:18:cd:6d:b0:99:c1:ea:c0:85:2e:9e:dd:
                    5d:87:b4:8f:18:2b:e0:f8:df:77:fb:0f:31:80:e2:
                    de:55:58:67:d3:d9:92:fa:67:16:9b:a3:ec:a9:a6:
                    93:1e:6b:4a:fa:25:af:07:0a:b2:f7:eb:bd:9f:69:
                    fb:25:1b:5e:08:55:62:06:09:7e:1b:2c:e6:0a:be:
                    4a:f8:6d:78:45:1d:10:d2:e4:9f:e4:32:6b:bb:c9:
                    7a:ab:d0:7c:61:60:c8:ce:cd:f8:f4:a2:fd:48:ba:
                    20:7a:6e:79:51:6d:47:f6:df:d5:e5:37:80:17:0a:
                    50:15:50:60:c2:ed:a8:f4:b8:17:15:30:1f:20:71:
                    a6:82:2c:5b:61:1d:0b:2a:ea:36:62:78:e3:db:91:
                    1f:8a:0e:7e:ce:de:83:73:72:bf:00:7f:ec:ee:87:
                    f5:79:ee:0c:77:81:2f:c4:63:be:35:87:c0:8a:73:
                    92:f2:9f:39:41:43:26:25:40:fe:15:ef:20:15:22:
                    a0:7f:51:ff:5b:db:ea:a2:01:a5:d3:0d:3e:d6:e9:
                    a9:59:18:02:1d:bc:a1:98:e6:63:55:f3:0b:9a:fd:
                    d9:c6:13:fc:ba:55:7f:65:00:f1:be:d8:d4:06:1c:
                    65:d5:1d:d8:cd:6d:1c:bd:0b:5a:ce:66:e1:19:a0:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FF:FC:F1:15:0F:E2:61:DD:CC:9C:42:94:4F:0C:39:3F:1D:43:AD
            X509v3 Authority Key Identifier:
                keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:61:d2:98:35:ea:a0:45:31:c4:7f:7f:6e:dc:4b:f4:cc:a9:
         31:ce:73:86:23:00:47:2c:a6:f8:9a:62:02:f8:63:e7:60:c7:
         2f:a3:6a:ef:0a:fd:72:3c:29:6d:83:92:9b:bb:06:9b:ed:3d:
         aa:2c:1b:43:d9:5e:63:c1:a6:b6:f3:9a:c7:de:b1:a5:42:ab:
         cb:65:ae:46:f4:e9:cc:97:90:b5:62:3d:66:0c:a3:82:db:0d:
         d8:0a:15:4a:cf:87:b1:2b:3e:e4:53:42:c8:6f:50:d8:09:af:
         a0:fb:3e:95:e9:1a:c0:6f:04:bc:1b:ee:d0:b5:d5:48:f3:16:
         1c:88:50:19:94:3b:1a:7c:5b:e1:15:35:92:1b:6b:84:36:ef:
         74:18:da:81:b7:e5:2e:da:bd:7e:eb:ef:19:c2:9c:4a:a6:b2:
         0e:c3:df:61:9a:dd:3b:d1:af:38:93:c7:97:11:14:10:2a:57:
         8a:eb:28:94:4f:75:bd:fd:fb:e3:33:c8:61:d6:1b:a0:16:59:
         cd:db:e5:11:51:22:25:7a:fd:f5:24:5d:24:f8:7e:e2:cb:7b:
         0a:28:3b:fa:b6:8b:e1:d0:90:5a:57:72:58:78:f2:50:76:e8:
         be:24:d8:cd:0e:d6:1a:7f:a2:47:76:e5:87:61:ce:86:fd:de:
         0d:ac:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----