Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File:                     _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier:          02ECSHlR9DrU60S/Tcl/DuvLRVk8piNgW1tc0Z/V3ec=
Subject key identifier:   3E:26:D6:82:04:6D:4B:80:5B:BD:C2:B4:74:25:03:42:C2:70:72:C6
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer:       /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial:       01962F3DA3C3707378FC8B348708EE0DB633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
                          2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: Fvm8J11+BWggpbF7CvVjeouZMb2NMqR9zjqcPvz895Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:c3:70:73:78:fc:8b:34:87:08:ee:0d:b6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=3e26d682046d4b805bbdc2b474250342c27072c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:7d:4c:83:92:e1:a0:ca:1a:1d:cc:73:a1:
                    72:4e:2b:40:f1:81:a5:0a:18:09:2b:9a:25:f3:93:
                    35:28:41:89:25:42:f3:82:f8:d0:3b:92:b9:78:14:
                    e7:ee:23:fd:60:df:1f:14:01:71:b3:cc:57:a7:10:
                    97:fe:5b:96:92:8b:b3:87:31:a1:02:3d:5e:32:e4:
                    a3:76:d2:31:65:11:a2:74:2f:5c:6f:4c:c8:06:1c:
                    f0:44:a1:22:f3:76:3b:08:7a:90:b2:e0:a4:69:cb:
                    a7:9f:57:7c:f0:ee:ec:b6:38:8d:92:76:15:9e:61:
                    43:fb:72:5d:22:68:24:64:d0:2f:44:83:00:1d:88:
                    9e:23:d4:84:29:04:a7:3a:b4:ea:60:ab:d6:2c:88:
                    6e:5f:b5:a1:e0:a3:5b:2f:19:3e:97:b2:e8:78:b4:
                    b1:cd:12:3e:6c:4b:5c:cd:54:63:b7:c2:4a:02:b2:
                    b9:e9:74:b6:09:41:d1:4d:67:d5:d8:c3:34:11:c0:
                    0e:46:5c:c1:bd:12:de:3c:ba:b4:f6:d2:0f:9c:6c:
                    88:c6:bd:59:b9:9b:99:de:8b:1d:75:cb:2b:9b:40:
                    33:d1:2f:64:fe:8e:60:91:ab:c4:d0:ba:d4:cc:86:
                    e6:c4:d5:bc:f7:2a:96:c0:b7:fb:64:0f:62:f6:dc:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:D6:82:04:6D:4B:80:5B:BD:C2:B4:74:25:03:42:C2:70:72:C6
            X509v3 Authority Key Identifier:
                keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:80:3c:f6:3b:21:ec:59:c4:d1:90:9d:bc:d5:7f:29:54:20:
         18:46:c0:87:d3:a5:71:35:29:15:be:28:c3:9f:e8:6e:10:7d:
         4d:5c:ae:74:50:77:88:cb:34:f5:58:b0:2d:6f:8a:bc:63:15:
         81:f2:50:c7:a4:79:65:e6:4e:a6:5e:d8:e3:c1:9e:c1:99:dc:
         ea:f5:6f:4c:0d:52:8e:81:fc:94:fa:32:5d:16:13:97:80:16:
         70:44:04:0f:81:c1:0e:77:48:c0:60:17:0a:2b:90:1e:25:41:
         12:7e:44:0d:35:fd:bf:8a:43:37:f3:da:1e:8b:99:a5:b8:4d:
         9a:72:e6:a2:72:30:a1:d0:fe:13:00:2a:0c:d8:ca:2f:06:e6:
         26:3d:4b:3e:40:d6:a1:c9:a9:20:dc:d4:1e:33:05:15:fd:30:
         53:8c:7d:b0:89:bc:3b:ae:50:58:e3:42:52:76:ec:d3:81:85:
         0f:cf:3b:2a:66:47:65:88:55:73:e7:5c:2d:50:33:f3:90:c9:
         f0:df:d2:ce:35:41:a5:9b:04:92:1d:ba:07:51:eb:9a:71:ae:
         a2:e1:65:af:18:95:6d:33:d5:cd:82:94:18:7b:22:87:13:34:
         e9:1a:fa:7e:ba:59:ca:9b:44:96:bc:1e:ff:7d:ed:bb:5a:37:
         8b:19:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----