Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File:                     XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier:          oLo7yCPwMlX+spGAK2SPf4RNk04HBg/NddMf+QVSwL0=
Subject key identifier:   96:0B:BC:52:80:20:95:F2:58:51:B2:FD:FC:45:88:14:3B:2C:6C:D8
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer:       /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial:       01962E2AEF9BFAE7CC060C136C359FA5A4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number:          03B2
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
                          2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
                          3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: efX330REBLZb2xXGyZdNjCffpbXOLNXK7qfd646HTso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ef:9b:fa:e7:cc:06:0c:13:6c:35:9f:a5:a4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=960bbc52802095f25851b2fdfc4588143b2c6cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:02:22:c7:13:da:ac:3e:e5:e9:d3:00:a1:
                    a0:7b:ae:34:64:99:99:ce:78:f4:fd:79:5a:61:2b:
                    75:6d:f2:02:72:64:d0:b7:81:07:f5:d0:7a:35:5c:
                    12:b2:3a:8b:1c:9e:0f:13:70:26:90:4c:36:31:46:
                    1b:09:79:67:0e:f0:e3:69:f1:00:a6:93:98:23:30:
                    9d:97:13:66:be:ae:db:b5:4c:7f:5b:da:85:e9:85:
                    b4:7b:6d:e2:f5:99:02:98:ab:21:d0:c6:10:08:97:
                    5e:f6:61:c1:7a:bd:a8:d1:64:9a:13:d8:b7:05:b9:
                    a8:47:5e:e1:2e:c3:52:14:b1:ee:39:be:a6:c0:22:
                    d7:a0:fc:87:7b:29:45:61:03:28:67:80:18:2f:08:
                    3f:17:d9:1a:cc:a0:53:a7:1e:ac:67:77:b0:81:c9:
                    79:ff:6e:9a:49:b4:3e:39:c5:eb:46:26:25:3b:0a:
                    ad:a6:e2:b3:70:cc:c6:69:ba:d6:94:83:dd:4f:e3:
                    97:54:7b:9b:16:56:d1:24:2e:b7:08:6b:2b:2c:41:
                    37:34:eb:f2:0c:f2:13:a8:81:ff:78:72:09:86:b4:
                    ab:2f:78:02:13:18:05:b5:4c:d4:70:94:9c:ce:dd:
                    9c:f2:a9:47:8a:f3:66:74:ba:27:2c:8b:31:6d:e7:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:BC:52:80:20:95:F2:58:51:B2:FD:FC:45:88:14:3B:2C:6C:D8
            X509v3 Authority Key Identifier:
                keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:50:ea:10:62:04:2d:39:d8:57:c4:63:ab:69:95:e0:53:05:
         ed:71:4f:c4:83:18:42:d4:6d:84:05:9d:2b:bd:e9:e7:cf:bf:
         3a:34:48:45:b8:cb:3f:4a:a8:5b:81:75:1c:e4:b7:09:30:56:
         d6:09:f4:9a:45:cf:4a:cc:f4:12:2a:2a:7c:0d:75:8d:06:53:
         76:21:a5:8e:15:bf:05:57:c5:40:10:7d:58:ed:58:a1:89:82:
         0f:37:d2:93:44:58:1d:b9:db:20:77:d6:fa:e8:44:01:df:43:
         4d:b4:a3:60:05:b0:ee:3b:da:e9:03:be:25:8a:b4:b9:2d:9a:
         22:4b:d4:17:ba:fe:3e:ff:9c:f6:40:f0:33:87:14:0b:66:4a:
         50:5a:4c:b3:f6:e7:10:5f:c5:74:6e:8f:2a:bb:7b:cd:f7:15:
         fa:aa:f5:25:b1:86:f0:a5:ac:67:6b:2d:18:61:35:58:1c:b5:
         e5:fb:84:ec:1b:48:e6:3a:1d:bb:6a:4b:29:f5:9a:39:81:65:
         79:f5:a2:e1:17:75:f1:fe:5e:ac:d2:40:da:99:6c:a0:c1:18:
         2f:df:b3:d7:dc:5f:be:b5:69:68:31:0f:e3:cc:75:68:e0:44:
         b2:e9:8f:7a:63:e8:e8:c9:66:17:23:e2:f0:aa:0e:28:7c:93:
         da:fc:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----