Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File:                     sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier:          XFYHocJsCZGfSwv1xGOog3FlLrkOAZDEBYZN7UfW2/0=
Subject key identifier:   23:1A:39:C2:52:51:3C:8D:ED:9B:FC:BF:71:CC:AF:95:A6:83:22:C4
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer:       /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial:       01962DF44B7164CA18A5ADC7B6AFE0ABC016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number:          0F1C
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
                          2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: I1GQoDyOa8JHrgbXYnoc3I9N1iWw9DcgRF6Vy7KoyNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4b:71:64:ca:18:a5:ad:c7:b6:af:e0:ab:c0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=231a39c252513c8ded9bfcbf71ccaf95a68322c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:3d:09:1b:e1:4e:b1:81:2e:86:16:54:0d:
                    f1:82:50:c6:0b:1d:7d:e5:9a:8c:33:64:96:13:c2:
                    36:6b:ed:cb:8a:65:c7:62:09:4b:87:ca:13:6c:74:
                    f7:ef:d3:7f:7e:a0:c1:8c:cc:c8:70:b2:ea:13:9c:
                    50:bb:b4:e7:69:2d:de:ac:47:4b:d8:af:94:09:14:
                    0b:c2:00:e5:f7:08:7e:4e:ac:70:a2:49:0c:ab:0d:
                    9d:a6:02:e7:45:99:e5:14:77:80:63:8a:ba:73:d9:
                    95:c1:cd:b1:75:fe:4d:9f:d6:05:90:f2:d2:c9:ad:
                    ea:a9:87:8a:75:17:6a:89:14:98:a7:ff:fd:b1:aa:
                    2d:3b:1d:ab:16:e5:f6:0c:2a:a3:01:ac:28:4a:4f:
                    25:8d:bc:98:46:b1:53:44:2a:4e:de:bd:a2:e4:1f:
                    5d:e6:8e:0b:5c:34:5b:ec:7b:20:53:7b:02:5f:74:
                    4d:7c:fe:a0:29:54:99:8d:3c:2f:f8:7d:f6:b7:fe:
                    d2:4d:65:21:0b:9f:3b:e1:f5:fd:01:f8:61:3b:2b:
                    e3:ec:69:53:d9:8a:1e:fc:dd:b4:52:60:64:52:cb:
                    37:99:61:db:bd:ea:b0:dc:98:37:5b:d8:bf:10:a7:
                    85:cb:16:06:a8:22:bd:18:b7:19:ad:ee:54:9a:fa:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1A:39:C2:52:51:3C:8D:ED:9B:FC:BF:71:CC:AF:95:A6:83:22:C4
            X509v3 Authority Key Identifier:
                keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9a:5e:f6:e3:ba:d1:04:36:aa:74:47:af:18:d0:7d:01:d1:
         f4:06:a6:28:58:6f:7e:6b:81:87:8a:bb:fe:47:2c:9b:5d:17:
         86:7e:53:18:40:07:1b:29:a4:26:0e:aa:df:22:73:2b:91:e3:
         3c:57:38:a2:69:2e:b1:2f:e2:51:ba:0e:7a:ba:ae:aa:e8:0a:
         99:ae:fd:cf:85:76:3f:c6:6b:ab:7d:b2:49:e6:20:7a:db:43:
         3a:db:7c:27:e2:cc:1e:a9:ef:c6:c0:38:17:1a:f3:19:21:b7:
         65:b0:09:2a:3d:e4:f0:11:95:76:d1:bc:da:8b:6d:be:dc:4a:
         31:bd:f2:20:5a:7c:a4:ce:95:f7:16:c0:1f:af:3d:c9:3b:29:
         70:a2:97:fe:af:28:92:bd:dd:10:e3:60:b0:f6:65:f0:06:1a:
         fa:7e:ec:25:e3:14:94:37:8a:7f:62:6e:ad:e7:34:bd:bd:d5:
         8e:79:6a:09:2d:65:48:90:68:e8:cb:af:3f:9c:47:c1:0a:92:
         33:df:46:f0:f1:18:9e:f7:8a:2d:7d:0b:b8:62:94:dd:a3:42:
         4a:7f:ee:a1:ef:ce:72:c6:11:35:13:05:89:59:40:5e:eb:43:
         e1:99:26:c3:26:ca:23:5c:25:2b:72:53:ee:dd:0e:b2:6c:13:
         40:f6:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----