Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File:                     qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier:          8zaBZ6waL5DXcZsZM6DyPTI/WN3Q8vAONCHx+WZ2NwY=
Subject key identifier:   FE:15:2C:E6:B1:B2:B5:4E:B4:06:33:6E:79:BA:98:AD:9D:C4:CD:4C
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer:       /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial:       01962F06C3AF84F3FD6826F2E5C16C820E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number:          0B7F
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
                          2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
                          3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: klCjDqXLAWz6qV6b5j99Fz6PQPzCJAAs/uZsfHtr/fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c3:af:84:f3:fd:68:26:f2:e5:c1:6c:82:0e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=fe152ce6b1b2b54eb406336e79ba98ad9dc4cd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:0f:d4:ee:56:b8:83:02:bf:c8:a5:29:b0:
                    c1:8d:44:c9:84:9e:07:de:86:f9:4d:9b:28:b8:ea:
                    50:b7:9d:87:54:d6:a1:a2:b8:9e:aa:20:96:f0:67:
                    dc:e0:06:75:d5:0b:ae:92:35:0b:70:b4:2c:6b:6e:
                    9f:65:8e:56:06:d5:d5:cf:4d:9d:38:6f:98:d1:0c:
                    f9:c0:ab:30:c0:c2:ef:32:7d:2c:1b:42:75:f2:28:
                    86:8d:c0:4f:2f:4f:f9:13:2b:15:13:93:ab:0f:9a:
                    c1:73:26:67:fb:40:7b:c2:2b:76:a2:6e:a1:97:e4:
                    61:d9:1a:51:72:b7:5e:73:0f:1c:38:d6:06:a7:39:
                    5e:4f:82:c4:13:4f:1b:33:71:6c:98:28:56:c0:ac:
                    88:26:aa:6f:3d:0c:7d:76:3b:0b:77:c1:9b:a1:5a:
                    a1:1a:da:ad:11:99:16:05:5c:3d:c1:32:9c:42:ea:
                    eb:4a:e2:ab:55:56:1a:d8:1c:f5:ce:d8:c2:1e:ed:
                    eb:f2:da:06:6f:4d:93:00:b4:0c:b2:d9:cf:b8:37:
                    d8:94:15:06:ee:95:87:3e:60:13:fb:0e:2a:7e:f4:
                    97:aa:09:ef:0c:cb:fd:5d:b3:91:ef:e5:7c:04:de:
                    88:0d:76:52:1d:7e:d9:e2:7a:86:91:36:93:eb:d4:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:15:2C:E6:B1:B2:B5:4E:B4:06:33:6E:79:BA:98:AD:9D:C4:CD:4C
            X509v3 Authority Key Identifier:
                keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2e:53:ef:69:fd:08:a9:33:6a:4d:d8:7d:3e:fb:94:1c:93:
         7b:24:35:29:da:0a:48:e7:ab:e9:28:a3:61:e7:af:32:41:f6:
         3f:62:51:cb:50:28:b2:64:4a:ee:83:f3:c5:dc:1e:c9:e8:69:
         23:14:f8:28:d1:f5:22:75:12:0d:15:f8:5d:8f:10:bc:ff:27:
         d8:5a:57:69:8b:43:0a:b9:46:2b:61:23:1f:e4:95:ae:3b:03:
         2b:07:b8:75:b0:7d:a5:40:3b:bc:73:3f:79:41:d5:e3:22:30:
         80:f9:6e:b3:d9:0f:00:c1:1b:f5:cd:79:e2:6e:5d:80:6f:18:
         1a:24:95:6b:8a:73:80:1c:7f:c0:57:50:f0:df:e0:de:b3:e5:
         70:eb:d7:74:8c:31:03:f5:bc:a3:10:57:ba:bc:4b:8b:be:9c:
         e2:6a:5d:97:2c:30:56:75:e9:a6:53:88:43:56:20:23:9e:d8:
         e7:e8:9c:2a:33:36:83:91:68:2a:35:1f:f7:22:01:fb:99:50:
         db:b5:64:c0:27:01:5e:f9:f9:4e:75:39:9e:6a:1e:bd:7c:a2:
         7c:ea:be:8a:d9:cf:b1:df:51:e4:0b:d6:a3:96:b7:08:eb:62:
         3e:ec:6e:82:74:a6:79:f2:41:6c:57:74:d9:d5:6d:a4:cf:b2:
         97:ab:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----