Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File:                     qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier:          evrHEdy1jbSlBAqH8CwhGIQI7+CYIYAfcsV1oEf+nYQ=
Subject key identifier:   DD:15:9D:0F:44:8C:16:62:EF:27:6D:E8:88:E2:7E:37:7B:0D:26:C7
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer:       /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial:       01962E61D50CACC26D79E6177F7C42BDC422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number:          12B9
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
                          2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
                          3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: oMv+z0WYx5zyvUCzdaA4f6rP72AYOUvth1Pc8bZjofs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d5:0c:ac:c2:6d:79:e6:17:7f:7c:42:bd:c4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=dd159d0f448c1662ef276de888e27e377b0d26c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:cd:c9:76:85:9d:22:77:47:bd:c7:f6:4c:
                    d0:dd:92:58:b2:85:a5:1a:e4:17:23:e5:96:cf:15:
                    29:ff:96:75:2f:3d:e6:08:cb:03:b3:d9:2b:4d:75:
                    eb:96:fe:ea:e6:c1:ce:4f:40:40:46:6e:f6:70:e6:
                    56:f6:a7:fe:a8:f3:69:b7:ba:e0:18:89:40:35:f8:
                    80:a9:f9:b2:51:d0:d7:70:e4:0d:66:b7:e0:96:8b:
                    2b:76:11:36:19:67:e6:2b:9a:d4:5d:4d:2a:b7:c3:
                    cf:4b:1b:73:8a:dd:dd:ba:85:ad:a4:3e:94:fb:da:
                    01:06:af:c7:7b:13:f8:57:12:ec:61:48:af:cb:08:
                    4b:e4:7b:43:31:37:32:db:2d:e3:f9:75:5d:c1:6f:
                    59:d6:1f:a9:89:bf:ae:ea:ec:c4:d5:50:d7:02:5d:
                    e9:4c:fb:de:63:ad:8c:ac:5c:dc:8d:c2:c0:21:99:
                    31:89:cb:5a:81:55:62:49:11:dd:94:dc:0d:a5:a1:
                    15:e0:10:59:d7:27:93:89:9a:db:fd:8a:ad:b7:d7:
                    94:29:29:d6:23:63:79:6e:b8:ef:51:81:80:a6:33:
                    02:75:80:e4:a2:d6:3a:0b:ed:37:11:19:1d:3b:09:
                    ff:c3:86:62:37:e9:f4:8f:5c:a5:96:78:09:29:da:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:9D:0F:44:8C:16:62:EF:27:6D:E8:88:E2:7E:37:7B:0D:26:C7
            X509v3 Authority Key Identifier:
                keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:87:39:18:c7:8b:fb:89:e1:71:34:c9:75:e9:d9:9a:69:
         3b:0d:05:30:a5:a9:41:6d:74:4d:c5:c7:65:ff:b8:bb:e0:9e:
         0f:12:37:50:36:6f:99:db:e1:66:be:30:f6:eb:7e:c0:03:dc:
         e8:ba:e9:30:38:58:0b:16:a4:4d:7f:9b:dd:c8:0f:40:83:2c:
         0f:1f:3a:78:c7:55:21:8f:28:ec:9d:f2:8c:97:70:4a:c1:6d:
         67:61:9d:99:bf:4d:c8:77:9a:85:3c:42:ab:52:df:a1:dd:b7:
         67:21:90:42:ba:dc:05:4a:35:3e:7b:84:05:c7:ab:6d:fd:d2:
         dc:95:f0:fd:1d:c9:2c:8c:54:63:e2:db:a5:34:8c:85:24:83:
         5c:e2:97:ff:e8:95:01:73:97:6f:43:34:d7:09:26:a1:3d:54:
         4c:b9:30:4d:a6:9c:08:61:2f:78:68:5f:c5:ac:29:6a:84:dd:
         9e:d5:2c:12:16:25:db:37:f3:40:5b:96:d1:43:10:aa:8f:44:
         07:19:b0:18:8e:e3:ed:72:c7:d5:ff:15:cd:09:27:49:10:93:
         00:57:ad:4e:f9:de:4e:bb:6d:53:69:6b:8f:8e:a3:4a:cc:d6:
         95:f2:4d:62:4c:fe:be:82:90:b9:e7:49:9e:27:12:1d:3d:51:
         86:13:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----