Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File:                     cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier:          OdCWBBAc/z1J0bLphjC7GXzz3crY36rAShOjPtaq6/M=
Subject key identifier:   4A:7F:CC:BB:44:8F:6A:F6:6A:36:43:2B:96:09:5E:9D:9B:D9:A0:C1
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer:       /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial:       01962E2B380E7FE215294FB1C0E8CFC15E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number:          030D
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=)
                          2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: ejHiB8eTjwUAmojyWx6956umNnqRRlrYJlc5VCvqTm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:0e:7f:e2:15:29:4f:b1:c0:e8:cf:c1:5e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=4a7fccbb448f6af66a36432b96095e9d9bd9a0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:c4:00:b0:80:7f:86:d7:db:b5:f9:c8:0d:
                    4d:ed:fd:dd:12:b7:58:af:03:f7:9b:60:56:54:61:
                    c7:16:f5:5f:4c:16:04:4b:d6:3d:f6:2e:2e:31:b5:
                    37:2d:1a:0c:89:09:11:74:01:4f:a3:9c:b0:b6:7f:
                    01:8a:5c:e8:da:f0:d7:e8:6d:31:53:cb:c0:28:c9:
                    6f:a7:1d:d2:31:22:c6:28:a3:23:b7:12:71:bf:4a:
                    af:31:4c:44:e7:0d:fd:01:b9:54:62:be:42:51:50:
                    af:58:fe:62:d8:70:db:5b:d6:f8:85:5c:07:9c:63:
                    fd:99:1b:5c:fe:fc:69:98:f4:70:cd:64:3f:2a:34:
                    37:04:2d:ff:ce:b7:7f:92:91:9a:6c:a6:0f:fa:0f:
                    b6:c2:03:6e:cb:42:7e:e6:59:b2:aa:41:96:98:7c:
                    76:04:79:a5:ea:44:20:66:79:71:9b:a4:e2:9f:43:
                    70:1c:91:6e:a2:a6:7e:e7:86:e2:36:f1:bd:bb:6c:
                    36:6f:77:89:77:ed:c1:3b:7e:db:64:3d:9f:2f:86:
                    fc:20:f7:9d:b9:3c:a4:6e:b4:e6:e9:bf:1e:cc:e9:
                    10:5d:4d:31:a0:bd:23:db:aa:e4:3c:96:74:f1:8b:
                    55:ee:ff:33:ec:dd:b8:fe:bc:44:77:69:c4:33:ea:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7F:CC:BB:44:8F:6A:F6:6A:36:43:2B:96:09:5E:9D:9B:D9:A0:C1
            X509v3 Authority Key Identifier:
                keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:ae:0a:d1:13:99:4b:bb:df:94:dc:d5:5b:89:d9:e9:62:
         d8:b9:e0:b3:50:9a:04:f6:fd:06:ae:c8:08:08:3a:ce:ac:32:
         3f:bd:f6:f2:bd:7b:84:2d:07:b1:d6:db:6d:2e:91:a3:06:50:
         84:dc:cc:2b:57:50:8a:85:8e:60:8f:88:6e:0f:fc:c4:45:99:
         8b:b6:4a:a8:f2:7d:b7:ab:42:d9:5a:89:f3:09:13:04:b2:d3:
         bc:89:0e:db:7c:1e:32:52:ac:fd:10:e5:83:c3:da:ce:7a:23:
         88:41:85:26:9f:10:c3:e3:a6:05:13:d6:5f:cf:a2:14:f9:1c:
         8a:06:67:fc:3a:5a:67:ff:59:34:e7:7d:58:5f:75:75:c0:e6:
         4b:82:8b:45:f7:a6:62:6c:89:e7:1d:35:8c:ab:c8:70:db:8e:
         bf:82:f4:f2:a4:ad:08:18:d6:fb:a3:1d:1d:d0:ca:40:83:ab:
         90:f8:11:34:70:34:45:86:7d:ac:3a:fe:88:34:00:80:95:f9:
         4f:1d:05:e4:27:d6:2a:36:7d:6d:78:14:74:f6:f2:51:e0:02:
         22:d1:1e:dd:c8:ae:40:0e:d0:22:76:da:97:dc:64:68:a9:84:
         4f:5d:4d:b0:31:8d:e1:0b:57:49:4b:23:87:36:4f:9c:17:9c:
         6e:65:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----