Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File:                     DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier:          fni0zXnCQCW6PCd7BL3uL07wlGADZpQoknpcXPowC2s=
Subject key identifier:   96:1C:2E:E7:56:24:FE:98:4E:39:76:92:04:D6:C1:4C:7A:C6:79:5A
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer:       /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial:       01962E61ECC2AD1C39AB0BD68AF2155B8C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number:          02AB
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
                          2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: 2VComsgZe10Sb6Jk8RcQHZl2rDrztXGPcDKTAuhMwNU=)
                          3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:c2:ad:1c:39:ab:0b:d6:8a:f2:15:5b:8c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=961c2ee75624fe984e39769204d6c14c7ac6795a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:55:ec:5c:e2:d6:3f:8d:85:28:75:f8:84:
                    ed:4d:b2:8a:a2:25:b7:0e:c0:b9:87:52:b4:7d:f8:
                    82:4f:f7:ac:d0:a1:a6:e2:8d:b0:5c:20:5a:8e:0b:
                    d5:bd:ca:fb:17:d1:de:f8:c5:91:c3:c3:74:cf:16:
                    ce:65:7d:98:c7:ad:ff:0d:3d:85:5a:c7:f4:64:9a:
                    69:19:7d:a5:5f:a3:cd:61:e0:01:57:36:f9:7d:6c:
                    9d:b7:4c:54:b0:59:08:4f:67:f7:ca:03:26:f8:8d:
                    a6:f6:2b:45:a2:8a:55:84:56:fe:50:6c:30:83:b4:
                    a9:cc:3b:c9:a5:fa:10:70:bd:cb:95:c5:12:20:d9:
                    8a:58:db:77:8e:68:3e:fe:35:c6:dc:6e:ac:50:71:
                    2c:03:16:c0:eb:b5:e8:ea:19:50:2a:c9:1b:73:3e:
                    e4:f0:d3:bd:3c:12:1f:43:7d:16:6b:0c:04:ba:95:
                    41:dc:c6:e6:bf:84:0f:d1:bb:05:b0:14:c9:45:1f:
                    01:f7:24:a3:d0:83:cd:7a:e2:51:0e:2c:bf:61:29:
                    05:cd:22:2f:1a:ce:bd:9f:14:fd:6c:30:a8:b4:82:
                    da:ed:be:08:d5:a6:c9:5c:f9:7c:60:21:2d:ce:82:
                    fc:00:30:57:20:d8:b4:4c:57:f3:0e:25:c2:b8:75:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1C:2E:E7:56:24:FE:98:4E:39:76:92:04:D6:C1:4C:7A:C6:79:5A
            X509v3 Authority Key Identifier:
                keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:eb:87:61:25:1b:03:d6:23:32:62:46:03:f6:95:ce:b6:
         e1:f5:e4:f0:fc:59:d8:60:64:0f:20:eb:36:38:58:a7:08:6f:
         e7:84:87:dd:c9:27:70:66:86:7d:30:dc:b2:43:d2:ec:64:f1:
         2f:fc:01:1f:ad:1a:f1:0a:ba:63:71:28:be:03:e9:17:c5:35:
         7b:51:46:1f:e2:52:4f:20:71:b7:3c:7e:65:78:cd:fd:0b:22:
         dc:ad:e9:75:d5:bf:ce:aa:b6:97:5c:22:02:10:b3:16:af:3b:
         02:8e:c7:5b:2d:c8:88:64:06:cc:31:a7:5e:a9:a0:36:41:e8:
         89:f1:a7:50:9f:3c:72:25:41:4d:fe:0f:56:1d:35:9c:c7:90:
         87:25:7b:b8:a8:54:45:af:e1:40:ff:53:44:fc:e5:3a:12:d2:
         e5:45:b9:93:ae:0b:43:35:f9:99:b4:e4:54:27:18:a8:f9:1d:
         b8:dc:24:4b:4b:7c:33:b6:f6:44:de:6a:52:6e:08:52:76:a1:
         8b:b8:6d:4c:12:5b:8c:a5:8b:80:94:93:7c:87:d6:43:b6:94:
         de:3e:03:4a:77:5e:16:2f:a7:d8:25:1d:b2:cb:dc:d2:6f:51:
         34:6d:82:7c:5a:b1:c0:4b:ab:5d:75:c0:6b:82:0e:c6:34:66:
         e6:74:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----