Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
File:                     Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft (raw, json)
Hash identifier:          ZwX2WarhI3QPDgliU2br3NRFHbdLysNAGTaPKpHdMiw=
Subject key identifier:   B4:D4:28:34:16:16:18:A6:A1:5E:55:AA:DC:E6:51:81:59:00:D3:01
Authority key identifier: 42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
Certificate issuer:       /CN=429fe46633e4d3276251b3b261af727d35d4dffb
Certificate serial:       01962E99ADD3652281C460CF98DACF3E599B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
Manifest number:          0466
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl (hash: gnUHTT/0VXe1rphpyDCO/PUBgcMGJABPYBTTC0d+NLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ad:d3:65:22:81:c4:60:cf:98:da:cf:3e:59:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429fe46633e4d3276251b3b261af727d35d4dffb
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=b4d42834161618a6a15e55aadce651815900d301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:01:2f:ba:af:b2:18:02:2b:19:df:2f:2c:
                    ef:23:34:5a:ea:a0:29:58:46:73:81:7f:f3:a1:70:
                    b7:e2:4a:5d:aa:13:08:bf:04:1b:61:42:d2:29:3a:
                    2e:2a:88:15:00:06:8b:42:24:61:4b:49:bf:01:0c:
                    e0:f0:c4:7f:40:0a:c6:0b:4a:dd:df:48:f4:67:48:
                    12:db:3e:24:5d:02:e7:98:e6:df:3b:83:e8:e9:31:
                    1b:2c:ea:0e:1a:80:33:73:63:5d:ec:09:87:a8:5b:
                    73:ab:0f:9f:99:44:4f:74:a1:fa:e8:95:a3:9b:22:
                    25:a9:cb:a7:af:41:91:26:ed:3f:f1:9b:87:aa:ce:
                    de:c9:5d:f4:57:87:37:47:62:94:b0:5b:e8:eb:e5:
                    e6:fe:b2:75:77:e8:6f:00:c8:89:54:ae:e4:95:35:
                    7f:e3:35:8c:d4:cc:9f:1a:22:55:b6:4b:19:47:30:
                    83:97:19:b4:fe:81:7b:8a:e3:e8:da:46:ae:65:a0:
                    28:ce:31:c5:25:c9:73:1f:71:94:dc:8b:47:c7:bd:
                    b9:ab:6d:ac:95:06:7a:fe:3b:8a:21:72:be:8f:80:
                    ec:95:19:6f:ef:60:ca:a0:cf:1b:bc:da:3e:3f:09:
                    bb:93:4f:58:92:da:19:c1:d6:c9:bf:b9:e7:c7:7c:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D4:28:34:16:16:18:A6:A1:5E:55:AA:DC:E6:51:81:59:00:D3:01
            X509v3 Authority Key Identifier:
                keyid:42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:f4:82:f1:3c:a4:c5:64:94:51:ea:7f:cf:b9:ee:74:46:
         73:e5:03:26:db:fe:ae:56:40:36:d6:98:03:2e:37:75:b6:2a:
         aa:e8:c3:ad:86:a3:66:23:07:22:b9:39:58:a0:f6:22:31:b2:
         d6:9e:44:7b:12:29:24:77:23:bb:a2:21:69:bd:a0:e7:e3:24:
         cd:fb:18:41:67:54:f3:21:ac:00:96:7c:32:e5:53:b2:d0:30:
         09:72:9b:f6:c7:5a:38:da:2e:f8:1b:1b:89:31:b5:01:ca:8a:
         41:45:d0:6b:d9:39:5b:de:f3:86:0e:84:f2:0a:21:df:98:39:
         0a:b5:48:5e:ed:6c:23:6f:43:1d:a3:fc:f0:26:b0:02:f1:c4:
         e9:27:30:dc:8d:d5:a9:ec:cc:20:9d:87:10:9b:11:88:a4:94:
         43:34:be:18:34:f7:73:82:6e:77:de:ad:18:fc:6a:d6:7f:6d:
         9b:f7:88:af:65:81:7a:ca:f4:ff:9f:95:e2:cd:19:2f:39:0f:
         75:c4:9f:3a:a5:64:cf:56:6b:ef:c3:38:63:a3:7a:75:eb:3c:
         90:01:42:96:f3:59:46:75:f5:46:ed:b6:a0:73:44:f5:c3:47:
         b0:71:56:2d:6e:c7:fe:e7:2f:d8:16:7f:21:4a:ed:b0:5a:da:
         58:40:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----