Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File:                     qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier:          WJUSB5aBm3vrHL6dv1l4guZywkdFbPVO9KiqCZSs7bg=
Subject key identifier:   9E:35:D3:6A:5A:DC:9D:A7:59:7C:A2:4B:BD:28:5A:68:EF:4E:14:AF
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer:       /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial:       01962ECF8C07079F0F0C4911AF4AD1EF3D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number:          03D3
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: n5eJkZFicuorP_7YUyglUyaxuUw.roa (hash: X7lChHAuDqiBzbpN9aFseejb0s7SiAcnR2Lo7vuWZMI=)
                          2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: Sk5nfM6eXsmioR24MNsf3Na3S3akHeYuqjA16UQLw2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:07:07:9f:0f:0c:49:11:af:4a:d1:ef:3d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=9e35d36a5adc9da7597ca24bbd285a68ef4e14af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:41:aa:4d:d0:c2:74:e8:2a:0c:ac:eb:cd:
                    da:ef:b6:f7:91:71:21:db:af:b4:32:93:2c:ad:a2:
                    af:80:59:22:68:71:44:5a:2b:b4:88:de:2e:ff:2f:
                    ef:bd:9e:35:fe:e6:b2:35:91:8a:11:fb:95:82:ee:
                    03:59:42:ce:fb:5e:9e:d3:1b:f8:3e:11:ae:3d:4a:
                    a4:34:e4:23:28:f4:f1:ae:27:68:3f:a3:81:b9:62:
                    e8:64:a4:23:12:86:cf:2b:88:71:27:a5:4e:0a:9d:
                    6e:3a:36:64:f3:cd:35:9e:ed:1c:4d:eb:cd:9a:7a:
                    16:44:b6:a4:eb:72:9c:cc:9f:3c:fc:11:78:e2:51:
                    77:85:47:76:c3:8d:53:e8:4d:df:f8:e2:c8:60:6b:
                    55:97:9e:8b:73:a0:83:ad:1d:9e:37:99:b4:62:e8:
                    16:7a:36:76:bc:eb:ba:f5:05:22:91:64:81:9e:3d:
                    24:ee:5b:8e:a5:e2:91:c3:ae:82:ba:53:a4:9b:ef:
                    dd:cd:17:be:18:52:5a:ff:81:2d:54:70:c4:be:d5:
                    16:74:99:84:e8:eb:54:4e:1d:c0:2d:72:cc:9b:95:
                    32:dc:13:4d:b1:c5:00:89:3a:06:9b:6d:d9:ed:3b:
                    b3:a1:ca:f8:f9:88:32:ec:4d:f3:99:63:8e:22:7a:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:D3:6A:5A:DC:9D:A7:59:7C:A2:4B:BD:28:5A:68:EF:4E:14:AF
            X509v3 Authority Key Identifier:
                keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8c:03:b1:37:ae:84:5b:75:2c:aa:c3:11:7f:8c:43:ff:82:
         db:5c:28:72:48:c6:1f:09:14:14:ee:3c:dd:4b:a3:e9:16:67:
         41:47:c9:24:b8:dc:c7:60:f7:ea:95:e3:e3:3f:6c:4b:a0:3f:
         3c:2d:38:0d:4c:21:b2:10:3f:37:22:1a:89:5c:39:54:39:22:
         23:3f:84:a6:12:7d:4d:8e:cd:64:7b:70:f1:69:a9:58:14:97:
         ba:c5:63:d7:3a:4a:a5:af:e6:d7:eb:a6:51:ca:ad:fd:fa:da:
         ae:13:00:e8:97:8e:f7:24:8c:80:92:d2:62:8e:d3:ce:9c:b8:
         40:25:59:04:49:eb:43:b1:c6:21:9d:af:2e:d8:f7:57:a2:5b:
         fc:05:d7:ee:44:14:6b:ff:47:97:d4:06:42:56:e7:03:61:b4:
         17:ce:ce:4a:a9:00:8e:d8:61:ad:c4:64:2a:15:57:c9:a7:0e:
         d5:bd:55:be:dc:40:cf:0d:71:17:90:35:ad:85:a6:a4:2d:1d:
         f2:8c:e6:ac:b8:8f:2a:92:3e:86:53:bc:84:d1:31:65:98:fb:
         62:c3:a9:5b:b5:6f:24:fb:ae:f4:f5:60:6b:66:15:b3:63:32:
         28:bf:6b:77:aa:8f:16:e4:68:dc:63:8b:9d:68:a4:1d:23:f5:
         62:92:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----