Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File:                     Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier:          nnZyYfoViuRF05CduZ3La+oqyRLGVcAjA9940qmbiKU=
Subject key identifier:   FB:77:1A:27:CB:C5:B0:70:76:09:A9:25:B9:43:6D:18:F0:07:1B:F2
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer:       /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial:       01962E98ABA22540DD0288772BA262A3DCE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
                          2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
                          3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
                          4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: AeDliDe/N5i1aFIoKOZzHV9XnUZTH3pE1QdGlAqQK1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ab:a2:25:40:dd:02:88:77:2b:a2:62:a3:dc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=fb771a27cbc5b0707609a925b9436d18f0071bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:83:bd:81:c6:a3:a7:db:5d:fe:b3:35:0d:
                    48:4a:c8:3b:d2:02:2e:0b:0d:86:d8:4b:99:bf:a2:
                    ec:34:7f:e6:49:2b:19:fd:db:75:14:bf:35:3c:3f:
                    c0:a3:3c:62:de:13:b4:19:d2:fa:8e:42:2d:b0:b2:
                    5d:2e:8b:70:ad:7a:c4:7f:7f:1b:a3:3e:a5:70:6d:
                    07:0e:62:09:01:bd:56:ec:cb:43:e6:c0:19:92:07:
                    a5:69:fd:e3:38:a7:34:2f:29:26:d8:23:98:fb:ac:
                    49:ff:25:24:2a:ff:cd:68:9f:52:d9:58:b9:5c:99:
                    56:2f:95:28:17:d7:31:e9:19:98:62:78:56:5a:90:
                    1f:eb:d5:49:af:ac:5f:96:82:c8:fa:03:f1:9d:d1:
                    73:27:91:2f:ad:ba:1c:d2:8d:d2:e3:46:19:c4:00:
                    a3:90:b8:be:08:62:31:59:ac:ae:6e:54:4f:17:41:
                    c3:7c:8a:7b:f0:89:bf:04:29:cf:49:6f:9a:b1:30:
                    20:1e:b0:94:2e:4c:71:8a:cb:21:13:7d:f2:37:28:
                    0e:4a:2c:fc:6a:00:ac:2e:b3:f3:7f:9a:33:92:80:
                    ec:88:e9:32:52:20:dd:15:f3:36:10:97:ca:62:56:
                    9d:30:1f:a9:10:09:fb:81:3d:60:b9:ac:05:24:45:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:1A:27:CB:C5:B0:70:76:09:A9:25:B9:43:6D:18:F0:07:1B:F2
            X509v3 Authority Key Identifier:
                keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f6:8b:ef:2f:f5:2f:0f:c3:2c:97:f5:4f:29:fc:70:13:3d:
         09:d6:8a:dc:0e:2b:68:bd:4c:93:25:bc:60:5b:f7:da:2f:0a:
         92:45:95:86:b9:36:6d:f5:19:71:a1:e7:3f:24:ef:9e:22:26:
         83:ac:cf:10:04:12:48:14:d1:f5:a2:06:b5:22:9a:6d:63:97:
         c8:68:cc:eb:e2:1e:35:4e:76:4b:f1:a9:d3:88:06:d5:1e:83:
         a0:67:bd:71:c7:ad:6e:bb:9e:88:51:0f:3d:f3:e1:81:a5:df:
         7b:6e:6f:ef:af:80:ad:f3:97:bf:b9:66:ab:60:32:e2:5a:53:
         09:9d:04:4f:42:17:5f:1f:72:76:0e:3e:cb:9c:0f:ee:98:f9:
         b9:ed:af:bf:55:07:05:c6:1a:d4:88:b9:be:c1:3f:a3:24:b1:
         c1:e6:0a:00:63:f7:cb:e6:78:4f:f3:45:ed:ea:e2:21:8c:ad:
         66:0a:a7:43:1c:b4:9f:e8:29:f7:e3:66:c9:3c:39:1a:43:11:
         a6:26:b4:31:cf:43:87:88:d6:2f:13:83:e9:07:4a:a8:04:5a:
         db:68:3a:91:e1:ab:70:75:41:2a:30:46:96:37:9e:e3:a6:35:
         eb:4a:7d:b9:f2:6b:d0:18:54:80:4d:e6:54:3b:f8:24:3f:68:
         cf:5a:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----