Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
File:                     QY1UtVsZKiSLhHI026US-XYMq_o.mft (raw, json)
Hash identifier:          7i6bsU2C9zN2pjN2+emgA7HFp4rBKNV/AG5uTgb+oFU=
Subject key identifier:   66:F6:8E:C7:8F:7C:9E:84:34:00:2D:F6:00:F2:9C:BB:D3:1B:27:34
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Certificate issuer:       /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial:       01962E2B2DC8AACAAC1BE0FB85C9EE9CFC9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
Manifest number:          086E
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa (hash: ISrdGe09G63GrIhvFHUR6KGbQ/gtnJbbuoeTtm56a1E=)
                          2: QY1UtVsZKiSLhHI026US-XYMq_o.crl (hash: V9fU62Mh8sGJipiPeJK22KOvQHVjglfIsDwmpVKgcCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:c8:aa:ca:ac:1b:e0:fb:85:c9:ee:9c:fc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=66f68ec78f7c9e8434002df600f29cbbd31b2734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:23:da:59:46:9f:ce:58:0d:66:5d:62:cd:
                    7b:df:3f:b6:08:eb:21:22:37:ca:9d:06:21:4b:8f:
                    0c:17:6d:75:5d:ba:1b:51:2e:63:64:4b:a8:1d:73:
                    3a:8a:a8:75:3c:03:4d:4f:0c:f5:84:3c:ec:30:4b:
                    b0:85:04:2b:35:f9:86:74:37:68:9e:fb:fd:c6:60:
                    05:09:86:52:89:91:8b:c9:01:7f:b9:7f:e9:00:bf:
                    97:2c:49:d6:7c:79:d8:3f:b4:64:11:de:f2:fa:f3:
                    68:f4:ce:4d:5a:68:19:0c:6d:75:e7:93:ef:27:a8:
                    71:59:58:16:08:15:ca:29:74:90:c2:93:f5:cb:40:
                    ac:f4:1c:83:47:0c:95:4b:e6:72:01:99:5c:14:ff:
                    2c:69:bb:c5:b7:8a:82:92:8f:ca:c3:eb:a2:49:e0:
                    7c:33:d0:70:99:81:69:a6:00:4d:00:09:dd:86:95:
                    ed:f2:2c:1a:2d:81:46:bf:a4:1d:2b:2b:20:b6:18:
                    5e:cb:d7:e5:25:c2:ac:09:66:6a:c9:fe:6a:e4:6b:
                    02:7d:c9:7c:ca:ca:79:52:09:63:c0:66:33:97:63:
                    b7:26:77:12:41:ac:f1:44:98:b8:c6:e0:eb:6c:57:
                    cd:e2:04:42:0f:f4:14:08:93:53:df:75:18:bf:b7:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F6:8E:C7:8F:7C:9E:84:34:00:2D:F6:00:F2:9C:BB:D3:1B:27:34
            X509v3 Authority Key Identifier:
                keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:af:4a:31:2a:4a:02:18:66:bc:57:40:f0:b1:10:ba:f8:
         04:fa:6e:62:c0:7d:46:5d:a1:99:ff:6f:2b:5a:fc:ef:c0:91:
         1e:5d:05:a6:80:ae:3d:27:d6:56:67:b7:46:51:a5:65:88:9b:
         c0:ec:65:2e:db:09:01:e2:34:78:eb:63:dc:ae:b7:ce:1a:19:
         49:b8:f9:00:58:70:ec:f0:36:21:cc:7a:8d:4f:db:f0:37:68:
         21:a8:cd:9c:03:1d:e1:38:72:31:80:64:e8:65:b0:7f:12:8f:
         ea:37:48:50:aa:cd:3b:6c:e1:a5:6c:f0:7a:24:c7:23:47:fa:
         e7:8b:cb:1a:76:a4:18:55:a3:8a:bb:dd:bc:93:be:a0:ee:5a:
         4d:dc:75:3d:87:95:30:51:3e:8f:f9:05:4e:7f:57:d9:e4:0a:
         c6:88:38:37:c9:f6:52:4c:ec:28:87:8b:0e:e8:30:ad:76:66:
         1d:c8:e3:c5:85:21:11:95:da:1d:1f:35:30:dd:c6:0d:5a:fd:
         b8:02:ba:54:e5:ae:20:e3:fa:96:ff:34:c9:9d:b8:0a:84:ba:
         10:66:e1:a4:49:39:ce:3e:b9:e9:52:b3:f7:0a:d9:90:a2:e2:
         e4:8d:30:bd:5e:1b:35:ac:64:da:9c:3f:26:a6:24:dd:f0:a1:
         a8:b9:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----