Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File:                     qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier:          IHEYAtbkxKmJruuuZLDQUC3FA420z7UrI82eYahM4XA=
Subject key identifier:   AD:43:F3:9C:5A:7A:4B:C4:32:D2:2C:EF:9D:D1:66:7D:56:55:82:AF
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer:       /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial:       01962F066ACEC50C64EAA6B3B7AA3E194EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number:          08E4
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
                          2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: ZxHxREk9XV7Z6PmDCRZ2TrjwGsYuwh8KJ7I6e7wq7ZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6a:ce:c5:0c:64:ea:a6:b3:b7:aa:3e:19:4e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=ad43f39c5a7a4bc432d22cef9dd1667d565582af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:ac:c4:f4:fd:3f:e6:d4:62:08:19:87:5a:
                    38:89:aa:72:02:c7:ef:f0:da:85:5d:76:3c:db:a4:
                    27:8e:9e:5a:5f:bb:38:57:9e:9f:73:92:e7:4a:24:
                    6e:65:49:ca:80:d3:21:54:9f:57:2f:49:ad:1d:84:
                    13:b2:9a:7b:ba:9a:1c:ab:4e:bb:6c:f3:0d:31:de:
                    0e:c7:6b:38:34:c9:72:d0:ca:98:a6:fc:d4:65:47:
                    ec:6a:59:a4:6c:e0:cb:7d:06:ce:1e:28:46:a1:22:
                    65:d2:bb:80:5f:d2:91:13:45:c7:85:d6:02:bb:58:
                    b3:67:4d:a3:bf:81:a1:e6:0a:63:00:90:9e:d0:a4:
                    16:31:43:fd:13:f3:e2:5b:00:72:ac:d5:81:36:0b:
                    5f:d3:61:2e:7c:2a:69:09:fb:4a:e7:a9:0c:b1:93:
                    50:f6:9c:e6:2a:f5:c5:9b:c4:b9:76:a9:4f:05:77:
                    03:dd:bd:1b:25:2a:e8:dc:f0:e0:3d:35:49:a1:10:
                    4c:8e:b7:1b:0d:e0:19:69:bb:ae:98:5e:9c:05:0e:
                    e7:55:0d:07:ff:82:66:b3:ef:fc:7a:99:74:5c:77:
                    80:8d:a7:a5:87:9a:8e:fb:c4:a3:66:50:72:d7:8e:
                    0d:11:3e:1c:2b:5f:fe:b7:d4:ee:12:42:bf:b2:09:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:43:F3:9C:5A:7A:4B:C4:32:D2:2C:EF:9D:D1:66:7D:56:55:82:AF
            X509v3 Authority Key Identifier:
                keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:6d:74:9c:a0:9a:58:ad:54:37:00:f2:e2:9f:b2:ed:3b:
         b7:0c:00:ad:72:c0:d5:a2:ac:06:ac:38:ef:66:c7:bb:2f:14:
         f8:90:d8:fb:d7:c3:66:92:7d:56:a8:61:03:8d:40:a7:7f:39:
         7d:61:fe:97:40:14:53:ce:d8:7b:8c:09:1f:0a:22:56:9c:24:
         70:48:1a:31:ed:92:ba:ee:54:96:e0:ad:74:2f:b4:0b:46:11:
         38:ce:cd:20:8d:f0:cd:a0:29:0d:a8:6c:83:75:83:03:29:91:
         5f:5f:f9:d4:a7:27:ba:85:3d:d0:dc:3a:ec:e5:0e:59:f2:98:
         ce:29:57:87:45:22:22:4e:a7:a4:b7:0f:1a:d9:e1:32:b8:62:
         8f:ce:a3:a4:4d:aa:c1:1f:54:7c:21:e9:49:52:0a:ba:ec:05:
         1f:2b:4c:92:9d:ef:38:c0:81:89:a9:70:89:bb:71:fd:88:68:
         4c:a0:fe:ee:08:f6:3d:ca:4f:14:7a:be:6e:e6:75:21:84:72:
         7c:af:1e:05:46:b7:ff:4a:05:74:05:3e:b5:bc:8c:0d:33:18:
         9d:4b:2a:f5:a9:52:8d:4a:06:69:8a:c8:65:c6:cb:66:5a:5e:
         9a:20:72:0c:df:0d:c4:5b:af:fe:10:c8:bd:98:c9:39:06:8b:
         79:53:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----