Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File:                     qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier:          HwIaWPT+QqEFQvOO3iTkwLhtc5dLuJVydbOZ49DF8L0=
Subject key identifier:   B4:9C:4B:1D:33:C2:61:C6:37:E4:C6:AB:DF:E2:AF:62:3F:C5:D7:BC
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer:       /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial:       01962F74C497B57E99F1DAF44C6D1EB871F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number:          11FA
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
                          2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: 6rfPnrIG7ivGOeT9XQXnGYnJzWvBFh1Hqea3Y7hWhqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c4:97:b5:7e:99:f1:da:f4:4c:6d:1e:b8:71:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=b49c4b1d33c261c637e4c6abdfe2af623fc5d7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:92:b4:4d:6a:5c:d0:35:74:4e:68:82:d2:
                    24:54:49:ee:fc:7b:f0:3f:1c:46:fb:79:32:43:b4:
                    03:12:80:96:e5:f2:88:b3:4b:54:13:ce:02:d4:b6:
                    53:9e:e4:4a:9e:0b:d6:36:d5:c3:3a:16:7a:ab:65:
                    d8:28:2c:d8:ca:db:a8:7d:cd:06:c4:9a:3a:98:96:
                    d5:5e:71:1c:f1:d6:d4:e8:a8:67:fd:53:64:84:d8:
                    31:44:0d:c6:90:3a:b3:24:3e:5b:f3:6e:80:c4:e8:
                    57:7a:ec:61:10:25:8c:dc:e1:2d:b1:da:f6:af:9a:
                    4d:ca:b7:4a:d7:51:f9:cd:6f:b6:6f:b1:0e:d6:ac:
                    df:d4:77:ea:ef:ce:22:60:a3:16:75:f4:92:bc:3b:
                    f5:19:23:bd:42:59:f4:05:49:4d:30:be:2e:09:45:
                    ba:ff:0d:c4:15:47:3c:95:d0:98:71:87:cb:7a:d5:
                    28:f4:d1:92:1b:f5:f5:53:92:12:5d:f9:27:2e:61:
                    69:44:81:ff:25:71:0f:5a:51:be:b6:8e:15:4b:d3:
                    42:d9:88:60:96:41:e2:23:c7:6a:36:a2:7a:10:aa:
                    38:43:ea:9d:80:29:53:76:e6:8c:91:91:af:16:1c:
                    59:06:a8:6a:68:53:91:cc:5e:b5:8b:ac:5f:d4:d3:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:4B:1D:33:C2:61:C6:37:E4:C6:AB:DF:E2:AF:62:3F:C5:D7:BC
            X509v3 Authority Key Identifier:
                keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:12:2d:85:18:10:4f:43:cd:2a:47:d3:95:a3:91:61:68:7f:
         2b:6f:ca:6a:e8:80:c1:e3:c7:55:17:b5:59:5c:b6:2a:6f:d2:
         37:f5:a0:2e:cf:9c:1e:b8:ef:aa:a2:2f:30:d5:88:be:34:50:
         18:9a:c3:9b:75:d5:42:76:cc:a0:e2:c9:05:22:bb:3f:46:92:
         9e:02:d3:f7:72:5f:0c:d5:4f:27:67:48:14:e6:44:cf:ca:bb:
         63:be:41:b9:42:91:56:be:7e:68:dd:c8:2d:f4:71:e9:4b:eb:
         08:88:f1:74:4f:7a:62:34:bc:f5:ef:eb:36:72:1f:69:7d:39:
         61:8b:6a:8f:fa:2d:c3:b7:46:f8:50:67:2f:d4:ef:6f:4b:d0:
         64:09:2e:0e:d6:47:d7:08:62:9c:5a:25:29:a0:f8:a7:95:21:
         0b:18:cf:0a:9e:9a:40:34:de:6e:e5:e3:bb:3b:c7:26:04:45:
         f7:de:2f:7a:2f:b1:6b:6f:9d:48:ed:f9:58:4f:b9:00:91:5b:
         da:30:09:5a:dd:8b:29:58:5e:c9:f2:fa:a0:bb:58:0c:15:62:
         31:4a:8f:42:59:03:63:c1:d7:96:33:ba:8f:7a:1d:92:90:cc:
         de:a2:c2:94:6f:f1:e4:32:6e:b9:dd:9f:09:92:65:e2:c9:b3:
         d2:3e:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----