Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
File:                     CQKHJW4l-jQNOvungOrGDVVq3sA.mft (raw, json)
Hash identifier:          9vo/7mS0kucZsF6ttq6qIULxlMZ3m2Ykq1eOdPQ134g=
Subject key identifier:   B4:93:80:D9:BA:9D:51:5C:A7:2C:2B:A1:BC:A9:62:65:B3:0D:F9:2F
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Certificate issuer:       /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial:       01962E992A15A6EF12443545E2D1F274E75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
Manifest number:          0807
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: CQKHJW4l-jQNOvungOrGDVVq3sA.crl (hash: rlmZ+Iv3EkpDixFeNcrH1dy743jGn7U3YVSDGRCMmSE=)
                          2: EOgnkpCGO25TfSV28ABNiElbHMI.roa (hash: xamMOb/MG2jklBJl6shRJRNZ2UW4izFBKtZBvXEcSVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:15:a6:ef:12:44:35:45:e2:d1:f2:74:e7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=b49380d9ba9d515ca72c2ba1bca96265b30df92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:d0:c1:22:a6:c1:75:ec:ab:ca:3a:a1:4b:
                    92:5e:05:91:c4:cb:a5:5f:f9:a5:a8:e1:95:10:46:
                    ea:aa:89:03:9b:8a:f7:2f:02:3b:a9:1f:96:a2:03:
                    a5:d3:7b:48:a4:ed:31:70:fd:ca:96:8b:04:e8:6a:
                    dd:2a:09:3e:c6:87:94:63:50:9b:17:04:be:89:f5:
                    45:88:a7:c5:4d:71:59:0f:dd:f2:ee:a6:42:3b:b9:
                    61:38:38:57:d8:59:47:14:6b:f4:d0:5c:ed:2c:1f:
                    90:51:2a:1e:e7:1d:db:e5:0e:a3:4c:77:72:37:a3:
                    17:64:5e:6c:43:77:d8:f3:19:c2:5b:45:10:04:ae:
                    c3:1e:9a:de:a4:e3:33:30:1c:b1:42:7b:24:e6:28:
                    12:79:f0:5c:db:dc:9a:ae:0d:eb:0a:78:ac:cc:d5:
                    63:70:ad:b6:67:93:a8:b1:ee:58:cc:56:cf:88:9a:
                    b9:40:91:b8:23:0f:86:ed:da:99:bf:06:38:42:8f:
                    b5:8b:8a:55:2a:17:e3:29:3e:18:09:f3:b5:c3:d9:
                    ac:62:9d:72:d2:37:86:fa:ba:92:ea:10:dd:80:cf:
                    d8:9a:5f:34:91:af:d4:80:c1:f0:1e:ef:d1:24:95:
                    ab:4f:5d:00:8f:1e:54:2c:62:b9:df:49:f5:16:40:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:93:80:D9:BA:9D:51:5C:A7:2C:2B:A1:BC:A9:62:65:B3:0D:F9:2F
            X509v3 Authority Key Identifier:
                keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:46:10:df:22:1d:6a:19:93:ff:9d:cc:0e:36:57:af:4b:
         20:ee:bf:ee:98:c7:3a:4d:73:c1:af:ff:38:25:e1:e8:9c:0f:
         01:e9:10:ea:70:44:8f:a4:24:38:e1:8f:8c:74:f9:f5:34:3c:
         23:a2:c9:80:e6:9a:b1:08:70:2f:c2:03:9a:a0:b3:e6:7a:3d:
         b6:20:9b:a1:9c:73:16:0d:0e:10:27:3b:5e:cd:4e:86:4d:87:
         82:c0:17:16:46:37:6a:93:e1:aa:05:ca:ec:c1:d8:85:d8:5f:
         b7:cf:be:80:e1:8e:b4:d4:27:13:df:7c:28:3e:f3:f4:0d:ef:
         e9:f0:e4:d8:d3:60:eb:5e:ce:16:d6:6f:b6:d8:b5:39:20:6e:
         96:27:e1:6a:56:79:b7:cb:dc:01:21:cd:8c:52:3e:a3:2f:df:
         9c:cb:7d:a7:c1:fe:d0:76:d1:22:26:65:cd:11:8a:fb:7a:92:
         a1:f9:91:53:a1:ce:b5:2b:07:b8:78:e6:fa:77:f5:18:78:d0:
         9d:75:a2:60:fe:4c:c2:37:11:1e:02:da:df:2b:65:91:a0:af:
         27:1f:58:43:1c:51:de:1e:79:ab:5f:5e:da:05:d1:15:0a:78:
         a2:f0:56:4e:35:3e:7a:3e:b2:5f:29:4f:73:8d:d5:42:50:88:
         2c:75:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----