Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
File:                     qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json)
Hash identifier:          rONdePnXb2Fmumpj/CsALlYbSkV1vkjOWri6xH16sJQ=
Subject key identifier:   29:2B:91:F0:69:C7:E9:27:9D:2C:2E:C0:85:31:6A:3E:B2:DB:B4:59
Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
Certificate issuer:       /CN=a97246fc431933f0b2820ced965c7851180b15ee
Certificate serial:       01962DF3B34B961E9AD7A7FC44D2F43D7973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
Manifest number:          0892
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: f4bBj1w+410CV07gfH/7EW3Iv49Wg7EIqnBZ6Qjp2HE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b3:4b:96:1e:9a:d7:a7:fc:44:d2:f4:3d:79:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=292b91f069c7e9279d2c2ec085316a3eb2dbb459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:db:dc:7c:c3:bb:51:01:87:e7:93:ab:f4:
                    e6:ac:f5:06:82:24:d9:66:7b:46:95:8d:7c:aa:41:
                    ed:a1:f3:89:0e:44:66:ac:7a:1f:c3:26:75:c9:36:
                    47:8d:c9:f9:28:17:c8:7f:88:27:01:9b:fb:10:43:
                    3a:59:0b:20:12:f7:8d:94:6b:b7:6d:5e:64:fc:00:
                    c8:a9:97:4f:00:43:e0:c4:09:52:20:2a:f1:0c:c9:
                    81:76:4d:33:a7:d4:89:20:ba:71:f5:55:d6:00:e1:
                    fb:36:4b:ca:a1:62:2b:65:1a:5f:a0:7f:64:ff:7a:
                    83:ce:9f:fd:c2:ea:e9:12:45:29:52:0b:80:2e:34:
                    6a:3e:71:2f:33:bc:10:13:69:0b:9a:e5:2b:01:29:
                    be:14:02:bc:3a:31:74:33:21:ee:3e:5f:f2:62:58:
                    46:fc:de:6d:8f:8b:e0:42:62:f1:8e:8a:ff:92:be:
                    92:79:96:04:0d:5e:4f:e7:6b:7e:d5:42:bc:4e:4b:
                    ab:41:bf:42:8a:99:5a:31:80:98:47:8f:a3:d4:2b:
                    7a:f5:8f:52:f8:bd:56:9d:05:2f:d6:27:e4:49:f0:
                    e4:dc:17:82:3c:7d:09:fe:32:e3:a5:5b:da:50:2d:
                    97:c5:94:07:4f:6e:3a:57:ff:3a:55:2a:09:72:ba:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2B:91:F0:69:C7:E9:27:9D:2C:2E:C0:85:31:6A:3E:B2:DB:B4:59
            X509v3 Authority Key Identifier:
                keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:f6:dc:dd:90:42:00:47:38:b5:9d:ea:06:15:68:fc:f9:
         76:f4:56:e0:ac:bf:d6:83:47:61:4b:ee:53:4e:87:45:77:0a:
         0d:f8:67:c2:08:a9:01:40:d4:db:d0:42:ff:1d:cc:58:25:b5:
         41:c6:39:a6:4e:c4:6d:70:f7:2b:27:09:70:7b:ed:3e:83:26:
         c7:fd:f4:1a:0b:41:d1:31:87:f8:05:4e:ab:1c:d1:69:d1:32:
         3f:18:68:25:dd:5e:da:29:08:03:3d:37:aa:74:88:3b:c3:7b:
         62:55:62:65:5d:00:0c:d2:7f:e1:99:f6:37:79:48:ea:7e:10:
         8b:46:61:0b:d6:9b:85:04:9c:e2:3e:cc:4a:5f:56:82:24:a0:
         8b:67:e8:8c:5c:33:cf:7d:6c:71:8b:6f:be:b2:4f:51:2d:01:
         48:07:08:14:18:0f:b3:ee:db:6a:0a:85:f4:a6:9c:fc:85:f6:
         cf:39:3a:ae:39:41:d0:22:23:b6:2e:4e:70:53:26:dc:b7:50:
         cb:59:6a:4b:74:fd:ce:48:34:85:49:64:08:2b:48:67:0a:fe:
         49:fa:61:30:15:c0:dd:72:71:ad:1f:1f:9f:98:26:40:4e:4e:
         d4:2c:db:13:d1:b9:8b:fa:fc:0a:4d:cd:6e:a2:25:48:88:fe:
         33:85:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----