Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File:                     q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier:          KrGHQL+o8YnPkdl8t78xRMbTXlikkZc8zC+GnMzh7Zg=
Subject key identifier:   EE:22:9A:14:45:C5:F3:F9:37:A8:EE:AB:32:9F:57:14:28:09:D8:31
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       01962F067910EDE849B293D0189A24C30C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number:          0A50
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=)
                          2: HHYTxAvbn4nuCD1NEky4HWGAtGc.roa (hash: t9aKBjKzundXNxaOe/jFb9HR2pns+s0n9RcDSD2onl4=)
                          3: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=)
                          4: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=)
                          5: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=)
                          6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: vYPchow4+XNJsPk8/qRJOXAtB3WZgWVPCjVWkTdSf+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:10:ed:e8:49:b2:93:d0:18:9a:24:c3:0c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=ee229a1445c5f3f937a8eeab329f57142809d831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:5e:ae:d4:eb:f1:b1:dc:ad:62:6e:4c:2b:
                    14:4b:b0:a7:fd:d9:1a:18:3c:86:06:c6:97:94:1b:
                    f3:25:04:d8:23:20:ab:5a:fe:fa:1f:65:8f:fd:19:
                    81:83:e0:6e:4a:a4:90:51:2c:d0:e7:26:02:52:b4:
                    b5:b9:5d:d0:19:bc:b8:58:cf:46:7b:da:d1:69:0e:
                    d8:17:67:97:f5:66:7f:d1:0e:49:6c:9b:86:33:84:
                    a3:86:c9:bc:f7:9b:d9:10:9e:2a:49:71:31:41:b0:
                    6a:56:23:13:ef:4b:1d:9f:e4:05:77:62:b9:b8:dc:
                    53:66:28:b8:d6:7f:82:ce:0e:d2:10:3e:e7:ff:b5:
                    d4:b2:e2:df:ad:f3:40:c1:1d:4b:b3:3b:2c:20:a6:
                    cc:09:bf:8e:9e:b5:da:36:7a:de:b0:ea:31:d7:79:
                    06:b9:ff:58:a7:42:d8:cc:fb:b2:e1:42:b4:f0:e0:
                    9e:99:35:5f:f2:7b:b9:15:5a:f2:96:07:06:21:54:
                    ed:ac:3e:05:85:d2:e8:a3:31:33:80:7b:28:01:d1:
                    b0:b9:37:59:22:68:80:80:73:bc:a3:73:0e:98:e3:
                    ea:2f:c3:b7:42:0e:b7:80:ad:84:0a:a0:0c:3d:a3:
                    5e:5e:e6:4c:37:a3:7c:bf:bf:59:9c:2f:68:32:34:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:22:9A:14:45:C5:F3:F9:37:A8:EE:AB:32:9F:57:14:28:09:D8:31
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:76:f8:13:4e:66:ac:b2:93:a0:04:78:97:80:33:97:f2:
         01:80:84:df:51:f6:47:2d:ad:d0:5a:de:92:d2:a3:a1:e7:a1:
         8d:87:91:72:99:08:9b:cc:28:2f:10:24:0b:4a:07:ff:93:79:
         ee:ff:9d:a2:07:a6:73:a5:c7:19:8c:e6:55:5b:d6:3b:80:5b:
         9c:a3:6b:4c:06:30:bf:56:98:c5:45:11:42:c5:14:d1:8a:39:
         44:eb:8f:49:dd:8f:d4:78:0f:68:3e:e5:7f:3f:2a:05:27:82:
         fb:57:52:81:6d:30:7d:0e:c8:ea:81:f6:da:20:47:02:bd:d0:
         af:70:d7:a1:25:d9:af:fd:bc:e7:9b:06:7d:11:c9:bc:dd:05:
         0c:34:82:fa:d7:e2:bc:a6:ac:b6:bd:4b:d9:86:7f:08:61:bf:
         e2:7a:19:64:88:5a:41:7c:aa:14:b2:73:54:5d:27:42:d1:37:
         77:26:0f:22:1d:67:c1:ad:cb:be:61:88:d9:93:7d:ee:86:95:
         8b:a2:18:e4:90:b1:60:8c:b9:76:dc:42:63:4d:9f:ee:c7:b1:
         2e:5a:85:c1:04:b8:51:87:80:2c:dc:3f:1d:8d:3e:1e:c2:3b:
         88:7e:f1:a6:e5:7c:2c:de:ab:34:7f:bd:e3:9c:54:78:51:53:
         a1:ff:65:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----