Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File:                     QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier:          o6xr3oXCLg9eneLUQpit0BKQtIlv+y2IAM0uG48AnxQ=
Subject key identifier:   8D:CC:AC:6B:15:34:BC:68:C9:7B:0A:5B:3D:85:87:F7:C4:04:D4:2C
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer:       /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial:       01962E61BA853F810BE4B83B685FE80555A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: CwISYOUyldp8pQ67dW5YadpUo5sQ+E317bM45Vco4cs=)
                          2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ba:85:3f:81:0b:e4:b8:3b:68:5f:e8:05:55:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=8dccac6b1534bc68c97b0a5b3d8587f7c404d42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:55:3a:03:d8:0a:f6:fa:6e:80:b1:ff:2e:
                    3d:a8:27:9f:8f:ba:79:4f:6f:5c:e2:7c:0a:e2:2f:
                    59:e9:86:48:70:ed:c9:8a:36:d7:b0:f9:4a:76:f5:
                    44:d9:d6:1d:37:ef:10:a9:b2:cb:eb:fd:b2:17:df:
                    e0:0a:ff:7d:db:e1:d3:ef:50:b9:0a:48:4d:19:31:
                    80:ae:55:bd:ec:92:e7:9d:18:73:95:2d:d1:26:59:
                    8b:e3:1c:a1:66:fe:3e:f4:1f:98:b7:96:32:d8:24:
                    a6:40:1d:bf:66:42:1d:97:1a:bb:7f:33:05:67:26:
                    de:1a:ae:4b:a1:d2:e4:1a:e7:62:ef:e6:26:34:20:
                    28:23:ad:bf:f8:7a:c8:03:68:24:b0:2b:e7:ae:cf:
                    f5:43:1f:af:35:c2:c2:cc:23:90:f7:5a:6a:70:af:
                    aa:a9:99:d7:8d:0a:9a:80:6d:73:5e:63:5e:07:59:
                    fe:2c:0b:8b:aa:f5:39:2a:e7:74:0e:26:67:8f:67:
                    96:a4:66:fa:03:0a:81:5e:5f:e4:95:6f:c8:98:f9:
                    26:9e:4c:b6:c7:cd:c1:69:8c:cf:e2:71:5e:04:e9:
                    9c:fc:21:90:af:de:f5:46:cd:7e:12:48:ed:e4:42:
                    e7:be:36:9d:e8:8d:c9:41:0a:4e:89:83:22:71:53:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:AC:6B:15:34:BC:68:C9:7B:0A:5B:3D:85:87:F7:C4:04:D4:2C
            X509v3 Authority Key Identifier:
                keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7c:71:90:b9:60:6c:f6:d2:dc:b5:a7:a9:06:70:cd:5e:f8:
         aa:fe:32:52:23:69:3a:5b:51:2d:62:61:c1:82:8f:e2:7f:24:
         5b:42:01:d3:e5:ba:50:cd:61:47:38:2b:b5:5f:37:a3:aa:37:
         38:80:80:47:c1:79:42:38:44:74:f9:6f:4e:92:a8:16:2d:eb:
         f8:39:79:e4:30:1b:1f:ca:a0:27:ee:75:c6:7e:0f:53:c6:04:
         2c:9a:35:f0:9f:7f:ad:28:c9:34:36:d0:07:a9:b6:64:50:9e:
         62:6b:8a:f3:d1:b5:db:95:99:50:48:94:6f:9e:68:e2:04:77:
         29:a0:19:c7:a5:00:ce:e8:f7:ad:82:15:8d:25:14:12:ce:cc:
         24:90:15:c6:34:0b:20:b4:07:31:e3:0a:76:b5:02:fc:a9:09:
         b4:6d:79:9e:14:b7:ce:7f:09:d8:97:b0:40:ff:b6:18:3f:2e:
         83:da:8a:b0:83:08:76:0f:48:89:d9:9f:62:34:75:dc:c2:37:
         6e:05:46:45:e3:39:c7:97:62:03:f7:40:2a:0d:0c:b0:9a:e4:
         e6:0e:87:a1:2d:20:a5:0e:29:56:86:38:14:78:f0:f0:57:2a:
         88:6d:f3:0a:6d:60:ec:d2:eb:9c:6e:64:e1:71:1d:19:47:68:
         86:bd:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----