Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File:                     q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier:          dWSihp3kgeums8R3sFqzz0JKfq49l2A9+bjv4ep8tlE=
Subject key identifier:   D1:87:FB:66:A9:7C:04:4F:7F:F9:4B:A1:E2:5F:BA:66:28:6A:FA:13
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer:       /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial:       01962DF3A41D27ACB801A55F0D0FE53ED277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
                          2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: oCg3Ii6/pimdP7SRA34dt2g+u+eQWrfBwJB9LXqhrg0=)
                          3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:1d:27:ac:b8:01:a5:5f:0d:0f:e5:3e:d2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=d187fb66a97c044f7ff94ba1e25fba66286afa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:ac:7f:88:9f:3e:66:e3:b1:12:82:97:9b:
                    7e:55:99:a9:65:f6:7a:80:d1:73:13:4f:36:f9:86:
                    0a:87:82:8b:b5:c1:eb:8d:f2:5b:6d:80:9f:d2:5a:
                    78:4a:df:b6:ae:0e:f1:51:94:69:9a:db:80:36:25:
                    cc:52:39:85:a9:6f:4a:a2:f5:74:c2:84:f5:eb:90:
                    f3:44:2e:c5:1b:ab:f5:61:0f:59:2d:90:04:d7:1d:
                    52:07:da:2e:3d:84:99:31:4e:65:56:ac:9b:37:b5:
                    59:c7:7b:3d:c9:ed:ff:1b:9d:00:02:aa:5b:7d:87:
                    38:d3:3b:45:39:07:e1:23:c1:17:f8:50:81:cb:63:
                    55:de:c1:aa:cd:06:47:1c:f9:4a:ec:a1:64:3f:39:
                    37:a5:82:a0:25:38:92:af:29:d9:c3:61:1c:0f:dd:
                    15:ad:cb:df:89:c1:38:8c:0e:af:d1:27:f2:55:25:
                    ee:bc:eb:31:94:37:f0:b6:36:d7:a2:db:37:59:d7:
                    cb:3a:37:62:5f:9d:bf:8c:e1:03:19:0b:01:8b:be:
                    3c:ac:45:39:0e:6f:d0:be:ce:77:11:8f:d0:71:2a:
                    bc:b9:f5:b7:df:e3:df:c7:2f:93:ff:b1:74:93:32:
                    8f:90:b1:71:12:59:57:5c:13:bb:7b:c2:3a:48:27:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:87:FB:66:A9:7C:04:4F:7F:F9:4B:A1:E2:5F:BA:66:28:6A:FA:13
            X509v3 Authority Key Identifier:
                keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:73:8b:52:21:db:52:16:9d:9f:a5:a5:38:d8:bf:6d:a4:b3:
         89:06:55:2c:e7:96:4f:68:4d:ec:dd:1d:cd:0d:9f:83:56:3e:
         4d:e1:50:d4:ae:ca:17:74:07:93:87:84:b2:4e:9d:fa:9b:48:
         ce:c5:6b:26:38:63:19:70:86:31:cc:f2:22:fa:ee:a0:77:30:
         e7:08:c0:83:c0:82:86:c8:54:f9:61:fb:8e:d8:dd:56:65:d4:
         53:75:37:cf:84:13:3e:64:24:26:89:6a:d6:cb:ec:34:fd:71:
         07:74:a9:6d:b7:97:e7:58:18:92:35:e3:ce:fe:0a:ba:aa:ee:
         73:8c:9b:f3:82:18:84:29:5f:4c:ae:54:b0:63:54:f7:f4:5b:
         75:58:08:3e:a8:35:f9:4f:2c:25:3c:10:ea:22:49:37:44:a5:
         18:99:b8:cd:db:97:89:62:03:51:15:8e:40:1d:86:e9:e2:4a:
         cd:fb:e6:f1:01:83:9a:89:27:a7:42:f0:39:4f:8e:63:80:6d:
         8c:b3:fb:d8:95:2a:47:b8:6b:1d:82:eb:2d:52:d1:8b:c6:6d:
         17:34:19:3f:7a:0b:27:95:94:01:ab:4c:6f:a4:ff:d7:8a:4c:
         10:43:48:72:a7:08:85:fc:5d:c4:87:4b:70:32:54:1d:b2:96:
         c9:32:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----