Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          8OrLglB6NSUXEZnY9mp3GOZdowlg4QfQySl9JIil4ow=
Subject key identifier:   1F:E3:83:27:ED:06:47:6D:C0:AA:FB:E2:E8:F4:F8:A4:20:BF:A7:3D
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       01962DF457DC5D933E5F21B1D448F8F4EA4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          035E
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: 2-PCYSmoRYP78bU8-tuVZLZOhCE.roa (hash: aSC0E7m4wW6P1G+DA0HfmnfnwGNL/CMWhL2kiTYQvoc=)
                          2: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
                          3: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
                          4: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: NjG7viCPASZKzSdcUOXWtWZ/JZfAUUZFQFnx7nUhylI=)
                          5: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:57:dc:5d:93:3e:5f:21:b1:d4:48:f8:f4:ea:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=1fe38327ed06476dc0aafbe2e8f4f8a420bfa73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:6f:1c:ac:e0:ad:62:a8:04:ea:53:c1:04:
                    a6:1a:51:2d:10:26:65:b9:2c:d0:98:1f:4b:d4:d4:
                    c1:fd:0a:60:51:ba:49:af:3f:af:26:dd:9b:e0:c7:
                    b7:5b:61:3d:3b:fa:e4:3e:0d:16:6b:87:8d:fe:fb:
                    73:d7:47:8f:0d:80:26:b9:e0:76:68:65:81:a7:1f:
                    9d:cc:84:60:f7:33:f2:a6:fe:61:5e:34:02:e5:b6:
                    bc:01:48:f0:2e:49:a9:5d:e5:cd:b1:84:26:31:07:
                    b1:b3:57:70:19:15:a1:8e:49:cf:7f:de:0f:aa:1d:
                    9a:e9:0c:39:3c:21:52:47:9a:a8:1a:cb:f1:fe:94:
                    d2:bf:12:57:00:c0:ca:71:60:98:93:2e:b0:d2:6e:
                    5b:e1:f0:c8:af:0d:1a:dd:ac:4e:ad:9a:7e:48:91:
                    e0:77:d5:94:f4:55:4a:17:19:0d:1a:51:bd:4e:5f:
                    23:58:a7:72:6f:a7:af:02:95:cb:d0:16:87:af:71:
                    e5:6c:19:f0:d1:4b:46:1b:95:3e:77:35:ee:a9:6d:
                    88:32:12:22:ff:83:57:e9:d9:8a:54:a1:d9:b1:eb:
                    4f:2d:7a:d8:7c:c2:87:e8:cc:c1:29:54:2e:b3:33:
                    19:fc:1d:ac:93:14:38:c1:33:85:e8:92:c2:51:94:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E3:83:27:ED:06:47:6D:C0:AA:FB:E2:E8:F4:F8:A4:20:BF:A7:3D
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b0:7c:a0:10:75:c1:23:2a:d7:c2:4a:c5:de:8e:46:bc:c7:
         49:ec:d0:12:d8:da:4a:4d:79:13:32:b8:8d:e8:a5:89:85:5e:
         18:1b:f1:23:10:cd:98:7a:39:57:49:9f:58:24:3c:23:ae:60:
         9b:78:4a:c0:25:5c:43:39:bc:fa:b2:84:3d:f3:ff:6e:2b:81:
         a8:60:f4:75:6d:f8:5b:59:00:5e:ff:2b:ad:2a:e3:c5:4a:bc:
         82:4d:c1:f1:d0:e8:40:3a:96:7a:2a:4a:f7:4f:48:b1:73:3b:
         10:c1:71:74:ab:45:2a:08:0b:74:94:d2:a7:01:3e:ee:4d:3d:
         c9:bd:6e:5d:8c:5c:be:00:b2:0f:b5:c9:cb:0a:fb:74:c2:46:
         55:04:72:75:b3:b5:cc:b5:8b:98:b4:4b:fe:c7:d6:d1:43:77:
         9f:be:c7:a7:77:44:6c:33:62:1b:5d:35:b4:11:e3:ea:ad:d7:
         75:60:8e:3f:20:17:9b:dd:1d:c7:15:71:01:5c:23:1e:23:bb:
         94:c1:7f:d5:b0:74:74:b7:47:60:54:15:fa:f6:cb:9c:b0:06:
         e6:f3:66:1a:06:0e:bd:e4:0f:8d:9f:41:71:ed:8e:81:1c:bd:
         ed:87:b9:ed:09:44:e2:75:eb:2d:6e:4b:b6:ec:10:63:65:5b:
         1f:b4:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----