Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File:                     Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier:          AC4TIkA8WfZ+jNW8PEseeatjPW1CcBZAlh/mI25VbqQ=
Subject key identifier:   41:7F:07:39:5F:68:63:FE:71:BA:14:B9:69:A1:BC:E1:F5:5C:03:37
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer:       /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial:       01962FABA6C1931DB95E4E9C7C1FBF2A77C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
                          2: KX5-b8tfIxZ9QaObI34wusMJAu8.roa (hash: E8pkGADzxdyLbNBpzexYq9jUYKSiA426sagviGcATi8=)
                          3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
                          4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: t8KTZM3CdWNM2b8sW4uHDNE5YcRQ5zrGOs4r1xmawRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a6:c1:93:1d:b9:5e:4e:9c:7c:1f:bf:2a:77:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=417f07395f6863fe71ba14b969a1bce1f55c0337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:1d:1d:fe:8f:bc:00:6c:03:d6:90:25:9f:
                    a1:56:d6:17:d9:51:1f:35:6a:a3:39:1f:ed:58:32:
                    1b:b7:79:14:cd:da:3b:a6:cb:42:bb:ac:e6:46:fb:
                    77:7e:54:7d:fe:06:2d:c5:40:ed:b7:34:f7:e0:c6:
                    ff:6e:91:7b:e8:2f:4d:ff:fc:da:1c:22:1d:c7:3e:
                    85:6d:04:f6:aa:73:6b:88:50:25:35:19:36:3a:10:
                    bf:f3:23:06:f5:a8:62:ed:79:8f:0e:29:69:de:78:
                    a6:f7:44:25:c3:9a:61:a3:e4:26:1d:a2:8b:52:2a:
                    12:87:f4:12:3b:a9:cd:b3:57:42:e2:27:5f:09:a2:
                    f3:58:c1:85:f8:0b:07:c6:8b:91:22:c7:81:61:13:
                    6f:0f:01:0a:fb:8d:46:0e:f5:10:17:d5:9c:19:2b:
                    e8:27:02:9e:ac:c9:ab:45:c8:67:1d:27:0c:81:13:
                    26:60:de:39:98:ab:ce:e4:45:8c:2f:cc:73:c0:a6:
                    b6:5f:cf:e1:78:77:69:2f:d3:75:39:a6:73:9c:7b:
                    09:e9:ec:f1:07:ff:c0:d5:a5:7b:f9:57:a6:63:bf:
                    39:70:a3:d4:f5:b0:86:58:49:e2:5b:63:b9:4a:8e:
                    8d:75:58:ce:7a:c7:fd:d9:4a:f8:56:f8:4f:d5:b8:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7F:07:39:5F:68:63:FE:71:BA:14:B9:69:A1:BC:E1:F5:5C:03:37
            X509v3 Authority Key Identifier:
                keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c9:50:e5:ca:55:b0:4e:0c:32:8a:8a:b3:e8:51:87:e9:77:
         9a:dc:6e:04:e4:79:fa:82:6f:b7:9c:74:0d:3b:35:eb:94:37:
         f4:55:5a:f5:36:de:e3:b4:e1:15:ce:e7:c6:d2:ee:1c:f4:ba:
         d6:1b:7d:ea:f8:12:fb:08:db:1d:72:bc:aa:85:68:48:98:1d:
         35:9d:77:6b:12:56:9d:b9:1f:50:d8:14:4f:43:01:1b:3c:7b:
         31:ad:60:eb:eb:69:eb:77:05:ef:b6:86:a4:c5:b3:be:9f:03:
         62:3b:32:3c:68:01:1b:48:e1:4b:21:78:e8:40:da:8d:20:b7:
         90:81:6a:30:e0:36:9a:5c:32:89:b6:99:85:32:ee:2c:35:8d:
         83:ad:ad:4b:4b:9d:ef:da:15:52:a8:7c:2e:8e:fb:0a:91:ed:
         eb:b3:f7:92:2d:d6:05:6f:28:99:58:9a:0a:84:b7:6d:ce:45:
         89:8d:83:28:87:c0:6d:b0:9d:9f:8a:37:e9:7c:15:15:d3:56:
         fa:31:9e:e0:de:c0:19:7a:03:3f:72:3a:f4:87:2a:33:3f:0d:
         c5:6e:35:90:ec:6b:d3:7a:7b:cb:23:86:22:e2:e7:06:9a:b5:
         e1:2c:f2:7d:ed:84:b8:71:4c:7f:80:b6:a8:ea:ef:60:39:7d:
         57:53:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----