Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File:                     qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier:          zhJXAvZpwJpH1aALTx/iZWSIE0womFDrpdn02zNvnCA=
Subject key identifier:   57:3E:D1:21:1C:AF:3A:79:25:88:B4:01:E5:42:70:59:EB:3F:6D:47
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer:       /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial:       01962F748985948362E31267E78E248B6FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number:          0883
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
                          2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: M25zX8Zs5H+Cvtb7LxHdvlcNnq+uSSPdqNgCUx25Un8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:89:85:94:83:62:e3:12:67:e7:8e:24:8b:6f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=573ed1211caf3a792588b401e5427059eb3f6d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:8e:e5:82:c6:f3:0a:98:19:a3:9d:e1:b1:
                    06:56:56:e7:3b:9d:95:32:c8:45:2d:03:21:30:25:
                    c7:13:fb:24:86:23:40:bc:a3:98:7b:b5:d7:51:2a:
                    ad:5a:ce:db:60:9d:23:b9:bf:8e:65:e3:4f:cb:18:
                    d6:62:69:ef:38:c5:68:e0:d5:ea:06:54:17:3c:20:
                    14:a5:6f:e0:cd:7e:3d:b9:4b:6a:d0:5e:0a:c3:e6:
                    eb:e9:38:fc:24:8d:6f:2a:62:f0:5c:54:bb:03:0c:
                    b2:9f:2d:a7:2d:bc:96:cb:af:8a:d0:0c:ef:5a:e0:
                    e1:89:72:f5:9f:95:4c:8f:06:37:f6:f8:0e:e2:f8:
                    e0:79:42:00:52:9b:96:3c:44:d2:75:15:da:32:0b:
                    0c:aa:92:02:a7:5a:fe:02:ea:65:a1:0e:d5:17:55:
                    df:f6:6b:a8:13:37:69:7c:10:bc:a6:7d:40:d6:2a:
                    df:f4:8a:b2:8c:df:4e:da:ab:f8:26:6c:cb:fe:cd:
                    53:79:96:64:80:4b:21:6e:c6:98:5d:98:7f:42:70:
                    48:e4:2e:0a:38:5a:93:80:70:ce:d8:22:66:6c:bd:
                    3e:18:44:ef:5b:71:d3:c1:bd:3a:5e:7d:75:d5:8a:
                    dc:ee:53:b2:d3:0c:87:b1:cd:ce:7f:7b:00:e9:9f:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:D1:21:1C:AF:3A:79:25:88:B4:01:E5:42:70:59:EB:3F:6D:47
            X509v3 Authority Key Identifier:
                keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:41:ea:ea:fe:50:7e:23:1e:29:62:2a:34:a0:24:79:54:
         97:e6:ce:25:c9:d1:2b:54:7c:b3:c3:d9:af:2b:d1:18:a5:e9:
         a2:ed:d1:d3:7d:b2:06:96:e6:3d:7a:ad:24:80:7d:7e:68:73:
         16:93:8b:8c:31:f7:dd:fc:64:86:32:4f:02:bf:56:df:de:f4:
         4d:bb:dd:15:55:db:5b:a5:15:e9:24:1b:14:60:92:96:e2:13:
         d6:22:9c:1c:49:7e:03:61:4d:ca:4e:b4:f5:8e:07:cf:72:7d:
         98:84:cb:ad:df:a7:2b:06:12:94:ab:df:9d:13:4d:69:cb:81:
         4a:b3:2d:81:cf:11:b7:af:0d:12:31:71:9a:90:7f:8f:3f:c5:
         4d:0c:04:36:a3:c9:8e:b0:e8:e6:37:09:0d:15:e2:f7:ea:03:
         b8:46:d7:da:f9:31:3a:78:12:f6:b8:97:27:da:19:0c:9b:a8:
         16:bf:c9:17:e6:1a:34:a8:1a:67:d3:6f:36:82:dc:47:3a:dd:
         5a:eb:57:73:14:19:22:07:c0:33:80:4b:86:f4:81:ac:1e:1d:
         ed:26:57:ce:77:91:c1:c3:35:d1:b1:6d:32:7f:f1:70:e9:4b:
         55:17:dd:fc:00:4e:d3:cc:72:d0:94:66:6d:c0:69:9b:66:d7:
         fa:15:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----