Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File:                     QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier:          spkM1TUiFeigwSZPKvz0hAMDsVLNqDK40iQV3Z1WJwE=
Subject key identifier:   97:1E:A9:80:9B:72:B6:40:31:45:AA:71:E9:AF:87:2F:BD:87:AB:21
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer:       /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial:       01962F74DF2ABB6258900DF727374284E1A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
                          2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: szVEvXTnLHDB6Gth4vWhQxLagwGc4SlfQqPhEfHMk8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:df:2a:bb:62:58:90:0d:f7:27:37:42:84:e1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=971ea9809b72b6403145aa71e9af872fbd87ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:79:77:ab:e8:3a:6e:5a:57:46:78:09:40:
                    b9:3f:21:23:98:a9:19:54:49:bb:95:43:c7:e6:8b:
                    3a:9e:f7:8d:69:77:28:6f:8b:dc:17:c9:de:ee:02:
                    f1:2d:8a:c6:d5:97:f3:6d:50:e5:52:97:23:62:6a:
                    b3:ad:26:d2:bb:90:0e:68:c0:f5:e9:75:e0:f0:8b:
                    58:ec:e5:1f:92:7e:dc:9b:78:70:7d:70:cf:68:a4:
                    9e:a4:6a:8e:d1:6f:d6:c5:bf:b9:83:5f:58:bc:ed:
                    cb:57:b6:e2:2c:03:ed:d6:aa:05:13:38:33:d7:57:
                    68:17:77:e4:64:15:f3:93:09:32:18:58:9f:ac:9e:
                    69:78:64:68:fa:7c:94:0a:2f:a8:78:96:47:0d:f5:
                    3e:98:5f:5b:02:9a:75:86:07:ce:71:93:95:79:01:
                    84:84:f0:ca:4f:9f:30:c9:fe:6d:e0:5a:7b:fd:93:
                    1a:33:bd:61:33:8b:43:97:71:8e:54:b3:d6:5b:c8:
                    00:92:59:ad:83:c0:f7:3f:3f:96:e5:09:6a:b4:e7:
                    bd:63:30:35:a4:38:3a:2b:98:af:3b:1d:30:90:36:
                    c1:b1:74:3b:0a:59:62:10:c9:8b:e5:d2:62:d3:70:
                    85:94:e0:53:22:cf:c4:ab:cb:c1:28:bc:f1:5c:7e:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1E:A9:80:9B:72:B6:40:31:45:AA:71:E9:AF:87:2F:BD:87:AB:21
            X509v3 Authority Key Identifier:
                keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:5b:86:50:f8:c6:b0:83:91:8c:08:c9:3a:3b:a1:4d:a5:
         c3:91:f9:60:3c:cb:33:8e:60:81:41:fe:30:65:e8:fb:0a:5f:
         0e:a8:dc:2f:c2:a0:22:3c:d8:ac:c0:41:49:51:d8:73:05:0b:
         49:0d:2e:16:ee:2b:22:47:03:03:c8:af:5b:bb:e8:2c:e7:87:
         db:04:3a:35:5d:db:47:f3:5e:80:6a:72:12:ae:13:cb:19:c2:
         a1:16:80:87:e1:99:ad:b5:8a:ec:47:95:8b:3e:ed:3a:bb:7b:
         21:ad:cb:e7:db:81:7f:e3:31:28:b5:a1:20:a3:9f:4c:36:fd:
         61:6b:b8:84:93:16:21:e5:b5:6d:d3:5e:76:5d:33:d8:56:11:
         5c:d9:5f:2e:50:0b:00:fc:4c:81:14:00:67:f7:8b:9b:0b:d9:
         01:e2:3a:4a:96:45:68:60:84:c0:d2:a6:f3:f0:53:bb:2e:cd:
         56:24:15:0f:d6:1b:85:df:e5:7c:5a:34:11:5d:17:be:83:e2:
         80:05:de:51:72:52:59:07:d9:4a:59:6a:8a:09:fa:0e:b2:07:
         c1:9a:22:c8:57:a5:18:c5:85:03:1b:37:6e:1e:f6:69:7e:6a:
         31:92:33:7b:d0:d8:42:79:ec:55:b6:7b:f7:2d:19:49:05:06:
         20:0f:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----