Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File:                     Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier:          uuEp+Bp349+ZA1ZXcGtcrOJmmeZ1MlnNvsip1opwKKc=
Subject key identifier:   29:79:A1:5D:93:F8:29:92:CF:A6:63:40:9A:7B:8C:D5:B6:3C:44:84
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer:       /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial:       01962E98E6B4296D6F169672DDA332B1E6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number:          1372
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: igED0BMK3Da7yuzGFfi20CYTg9l3LoKXLuB+tIdbPzk=)
                          2: tCKYdWD2hSQqFlBHMS87DdwFA_c.roa (hash: P2KIjX/YYHmksRirKKz2Fd1xnQFo0kzJQbDUVFG/Ics=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e6:b4:29:6d:6f:16:96:72:dd:a3:32:b1:e6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=2979a15d93f82992cfa663409a7b8cd5b63c4484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:53:a8:7c:c3:d0:05:15:f2:05:4b:8d:af:
                    03:8d:02:70:6b:b2:12:7d:d4:38:e1:72:76:81:2a:
                    40:d4:ad:2c:a9:02:72:2d:ac:5a:b5:82:19:57:f7:
                    56:7c:6b:ca:c0:0a:78:09:c2:bf:f6:69:26:0e:0e:
                    18:97:6f:0c:b5:3c:63:f9:9b:0a:d9:f4:4b:b0:99:
                    b1:32:9c:c9:ad:4d:ce:05:ae:45:3c:23:dc:7c:5e:
                    0c:5e:15:62:01:68:9a:dc:7c:75:59:b6:dc:55:01:
                    6a:4e:2c:d7:11:8a:6d:59:29:8f:b4:dc:ce:81:ec:
                    6e:76:66:5a:e3:d3:9e:94:a8:36:56:32:56:86:fc:
                    7f:95:4e:79:ff:1b:1c:0b:b8:db:84:af:cb:37:6f:
                    9a:d0:e3:81:48:41:9f:66:46:1d:02:66:53:c7:5e:
                    d3:0b:c6:b5:69:be:ae:90:89:65:19:ff:88:5c:05:
                    32:68:21:ec:21:81:d6:0f:52:f6:f9:d8:ce:1d:68:
                    ef:ef:4e:bf:43:b0:f6:df:47:cb:dd:bc:1e:fd:12:
                    0a:a9:72:c3:0d:56:d2:a6:ca:a6:31:eb:6e:87:49:
                    8d:fa:f9:82:8f:30:21:a6:0c:00:3c:b2:99:71:4c:
                    f6:f9:ba:0a:c6:e6:b6:46:7a:ba:c1:07:eb:27:50:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:79:A1:5D:93:F8:29:92:CF:A6:63:40:9A:7B:8C:D5:B6:3C:44:84
            X509v3 Authority Key Identifier:
                keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:02:f3:e8:eb:9b:09:7e:ec:de:27:bf:27:c7:4e:3d:b0:4c:
         e7:20:07:38:2a:a9:a7:31:3e:90:d2:58:1b:94:9d:86:d8:ec:
         9c:4b:57:12:ae:f8:49:2b:ad:02:2c:01:4f:05:3c:28:05:c1:
         39:c6:e0:86:a4:54:0d:87:56:c4:d1:9a:40:33:9c:e0:29:c0:
         ad:60:da:1f:73:7f:d3:47:70:8e:b2:e3:10:35:4d:1a:32:3a:
         02:09:87:cd:04:ae:d1:5d:72:35:59:58:4e:78:4a:9f:02:a2:
         2b:f0:19:29:be:f4:a7:21:19:7f:c4:0c:e6:0d:c0:a4:d3:82:
         82:65:4e:d8:c7:51:d0:4e:a7:5f:10:0b:78:a5:15:66:12:fa:
         f8:83:0b:f0:55:82:d6:42:e7:bb:45:a6:51:ad:be:93:cf:7e:
         6a:76:95:01:99:6d:9f:35:05:48:b2:bb:ce:d4:fd:7a:84:0a:
         39:1a:4a:f6:96:bb:c5:d8:b8:ca:e5:73:c9:e3:d8:86:fd:40:
         9c:67:bc:07:87:72:39:98:8a:ad:cd:4f:25:bb:9f:8f:3f:69:
         9d:18:1a:17:91:f6:32:a3:4b:52:af:93:84:11:76:85:1c:13:
         ce:13:5c:7b:cc:3f:8f:45:b6:b0:c2:1b:b5:d7:08:ee:92:de:
         f7:53:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----