Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File:                     qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier:          dr/bhqBcWFmEeMmh+gUO7T7MQwheJi120P7XPO/Y/yc=
Subject key identifier:   2E:46:60:03:18:AF:78:D9:97:63:B6:71:2B:16:91:58:35:85:5D:88
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer:       /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial:       01962FAB9DB5BAC2AA8E8F2814E1C2327BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 16CgswubAdPMVdO4tgEfY5qKNrs.roa (hash: n5RFNLHwGdJjAY6bUd3g0velwE7SisBVqsbQRj3nQN0=)
                          2: XnHSd3VergE-5i8djUYaPVthHRw.roa (hash: uQ/MzKJnXoMvhw4GTUaONVGqEgrAqEMlJbP8etG5Lic=)
                          3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: iDy84hSQGJmq+vdETHOdGeaTVutXBTyrJwFnZssROs0=)
                          4: rIq_k7twwBEbcOVYDic1qJC6tII.roa (hash: Tg0LY1U/RM7mfyNDRaQJFL93vVjMEcfzKcJNDGxepYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:b5:ba:c2:aa:8e:8f:28:14:e1:c2:32:7b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=2e46600318af78d99763b6712b16915835855d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:8b:99:94:c1:30:30:8d:8a:d2:86:87:16:
                    56:70:1c:ec:a5:d2:1a:bf:85:f6:24:05:6a:82:99:
                    6f:66:ad:78:a8:3f:b2:92:16:36:27:cc:c9:7e:55:
                    2c:c0:da:4f:04:c0:30:c0:f5:fd:fa:32:66:d3:4f:
                    2f:6c:56:71:17:ca:11:61:aa:78:47:57:69:ed:c7:
                    5f:c9:27:d3:23:95:b7:df:ac:2e:1d:4c:07:71:7d:
                    6b:b6:a5:bc:b6:80:19:e6:7f:26:c4:a0:45:6c:35:
                    b1:45:b9:dc:8c:ed:cb:65:dd:83:ca:ae:93:7a:36:
                    c9:36:06:2d:28:96:0e:9a:31:47:07:e3:bf:61:db:
                    09:8b:ef:d2:84:93:29:dc:97:56:75:1a:90:57:6f:
                    39:9e:ed:da:5d:03:6d:cb:3c:26:29:02:2b:35:97:
                    83:16:cd:50:d8:ab:55:35:c8:c0:b4:b1:c3:b3:10:
                    e8:17:3d:68:e7:35:78:b3:21:83:50:72:a8:8f:7e:
                    27:1b:e9:5e:79:10:08:35:ff:35:af:82:4f:a1:04:
                    05:cf:40:16:2b:1b:b8:b9:2b:f9:f8:1a:2b:9d:75:
                    dd:52:52:ba:fa:56:91:ac:45:7b:06:85:e2:d0:e6:
                    6a:6f:fe:de:c5:6c:5f:0a:97:d0:af:b8:99:3a:ac:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:46:60:03:18:AF:78:D9:97:63:B6:71:2B:16:91:58:35:85:5D:88
            X509v3 Authority Key Identifier:
                keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:49:f3:eb:c2:9c:f4:5c:ad:e0:0e:6a:7e:a0:ed:bb:a0:cd:
         27:f2:69:55:6d:29:61:f6:27:c0:88:9b:e7:56:a7:69:6f:6b:
         dd:1b:ef:35:f6:b5:e5:f2:2c:67:b2:fc:6b:f6:71:2f:37:9a:
         b0:3b:8e:b4:ee:65:93:a7:b9:b5:3b:32:03:13:2d:5b:f0:b5:
         87:5d:49:ba:30:e3:29:4b:bc:dc:98:e7:3e:a5:cb:85:bb:95:
         ba:91:51:04:5c:d5:03:fe:50:03:a7:a6:c9:dc:a9:de:a9:6b:
         d0:ed:41:9b:13:47:9b:fb:07:da:5c:c3:c8:6a:e0:a3:5f:6c:
         fb:a6:39:8d:5c:05:4e:92:32:c8:a3:c5:ec:fa:c4:56:fc:9e:
         ee:a2:93:9d:b5:19:ed:bc:7a:3a:7e:43:3d:45:e2:84:78:9f:
         53:2a:73:8f:d0:7d:b8:93:ff:b6:d7:24:b0:b3:bc:51:10:e6:
         05:e1:54:b1:ae:d4:9a:6b:a4:6b:6e:32:b5:a3:f1:7f:ef:e1:
         2a:11:d9:c7:28:3f:8f:ce:7c:f6:14:19:99:45:96:56:1e:92:
         d8:9f:5b:12:4d:54:0c:60:e8:2a:27:53:32:41:e2:f9:e9:2e:
         32:c0:7a:d9:e2:99:a2:ff:3a:03:fa:29:69:82:f5:93:f7:35:
         77:e7:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----