Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File:                     QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier:          u9U5xNBJCCy2A0AvpWbM1LLa9BUKQLc9TKE1ooT344g=
Subject key identifier:   1C:73:88:4A:A3:2A:01:0E:59:8D:A3:46:C7:79:78:20:9D:B2:CA:2E
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer:       /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial:       01962E9864524E4AEE3323A7FE6B8840DDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number:          1242
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=)
                          2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: s3e/ZE7It67zfxlGi87b7cgJn/WMyL32BA4AZ9fg+EA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:52:4e:4a:ee:33:23:a7:fe:6b:88:40:dd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=1c73884aa32a010e598da346c77978209db2ca2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:d5:f2:a0:5c:39:46:e9:fc:36:c9:de:d4:
                    dc:af:28:94:e0:d7:3d:29:27:9d:50:ae:0e:78:a8:
                    14:ef:ff:d5:7b:80:f9:ab:d3:42:e8:55:61:f8:f6:
                    27:82:ee:b1:6e:3b:39:d0:76:f3:e5:68:f6:44:0b:
                    5b:d6:2d:7d:d0:41:b6:60:2c:e0:3d:49:a5:56:e1:
                    8a:d5:d8:8b:4e:32:f0:33:7a:4e:10:a6:e6:ac:0e:
                    8f:c2:d8:a7:ad:b2:2e:54:b9:34:b5:06:be:0f:09:
                    0b:1b:1c:91:48:69:c5:e7:fe:09:d3:11:23:9a:78:
                    48:40:bd:04:5b:12:dc:b4:28:c1:84:ee:f6:3b:4b:
                    10:1f:25:87:12:0c:56:57:ed:31:d5:4c:6d:c6:ce:
                    c6:72:7e:09:22:f0:d9:b8:f5:bf:8a:e9:ba:8d:1f:
                    21:14:ca:4d:94:05:a6:46:4d:73:ec:83:33:ef:8d:
                    be:c8:f9:eb:db:70:12:98:48:f4:3e:a0:07:92:b1:
                    84:fd:35:61:a5:80:44:f1:9b:06:e6:88:8b:c7:b5:
                    10:e2:be:cf:13:5e:03:52:a9:62:aa:85:47:33:78:
                    e7:1f:e7:ad:ca:47:95:1a:3e:9f:f0:5a:92:43:0c:
                    e1:e7:d4:fc:4e:5d:35:0d:d6:df:aa:05:93:74:68:
                    7b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:73:88:4A:A3:2A:01:0E:59:8D:A3:46:C7:79:78:20:9D:B2:CA:2E
            X509v3 Authority Key Identifier:
                keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:31:ee:ee:76:f3:a7:57:34:81:48:78:81:a1:d5:e9:57:4b:
         b1:69:2f:3b:42:d2:0f:bc:ce:41:46:d0:90:0a:60:02:bf:76:
         ef:8b:9b:8f:c4:f5:0a:ba:43:44:1a:73:b8:8c:27:64:37:b3:
         0a:68:0d:98:96:ed:69:ed:0a:4e:97:bc:30:7f:6a:c3:13:36:
         41:a8:9f:a7:4f:36:ac:45:27:08:cb:c1:26:c4:01:f5:9b:52:
         51:20:42:0d:85:ca:b7:e4:10:cf:73:61:e3:ee:b7:62:44:8f:
         5b:e2:0b:78:dc:46:74:fe:f5:68:e3:b9:38:38:67:93:65:9e:
         5d:a8:b9:d6:20:5c:58:7d:29:ce:bf:61:ae:ba:02:2f:94:36:
         bd:ea:2d:f8:54:82:b7:88:69:47:ce:93:01:45:9a:e3:ec:f0:
         19:63:84:d9:aa:37:f4:ed:18:71:7a:80:6e:4e:cb:e0:73:67:
         ce:77:98:be:a4:50:f9:56:91:79:ef:6c:6c:93:a2:3b:5f:30:
         95:81:19:f1:a9:0f:90:bc:5e:89:02:07:50:03:49:ff:55:cf:
         dc:34:1e:38:d4:47:42:a0:c0:0f:57:ec:14:f3:71:63:ee:d0:
         38:9d:0c:21:89:90:78:bc:4b:e7:b5:af:01:aa:17:05:04:14:
         2d:56:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----