Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File:                     QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier:          pOo0gdhWNz+DzfqTbUwqGhaDA1GAgW9X0XPkQKtQdPk=
Subject key identifier:   85:6E:6F:73:50:FF:8D:8C:EC:3B:43:68:EB:8F:43:B2:3F:50:63:40
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer:       /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial:       01962E98C37A3C2B9E525A822E788A57BAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number:          0FE4
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: xIxOBbfWkga8BN6p0pJMljUBbUaMUa43zyHX6b0f49I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c3:7a:3c:2b:9e:52:5a:82:2e:78:8a:57:ba:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=856e6f7350ff8d8cec3b4368eb8f43b23f506340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:8e:ef:f4:50:10:59:10:64:ef:6f:f5:53:
                    74:20:3b:ea:fb:04:75:17:09:3b:74:2b:63:29:4b:
                    1e:c8:7d:ed:38:8b:b2:a8:51:e4:33:f0:48:32:8a:
                    fd:3e:44:89:46:00:20:a7:92:e3:7a:a7:90:27:ed:
                    ce:bf:3a:cd:d6:fd:e0:e4:d3:97:fa:d5:39:44:84:
                    df:c4:b8:c6:4b:b7:1c:d2:56:fe:fc:ab:b2:13:eb:
                    58:e0:00:41:4f:1e:13:e7:00:38:45:56:1a:b5:2e:
                    b9:5d:98:be:5b:f8:e3:14:df:9b:98:e6:ab:00:b3:
                    2a:98:1d:52:ed:6d:eb:85:2e:ae:67:53:d5:1f:a0:
                    6f:50:64:1f:a6:2f:1a:1e:02:57:98:b2:33:7e:0f:
                    a1:5a:90:e5:d7:f4:dc:94:50:4b:d2:53:87:a5:93:
                    f5:71:3b:99:eb:d8:f5:27:db:17:f3:74:fc:1c:6c:
                    38:d6:80:43:48:03:4b:45:25:be:43:b1:75:3a:15:
                    cd:a3:98:3b:31:75:b2:ee:3e:f6:76:41:0c:25:76:
                    fa:d1:a5:11:7d:28:ae:23:76:6d:91:34:7d:36:65:
                    37:74:69:aa:29:61:fc:13:89:12:41:08:f9:3f:cf:
                    6b:2b:b5:b4:b3:52:7d:eb:12:2e:a1:e5:ba:fc:f1:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6E:6F:73:50:FF:8D:8C:EC:3B:43:68:EB:8F:43:B2:3F:50:63:40
            X509v3 Authority Key Identifier:
                keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:61:4c:6c:43:52:47:f9:eb:f7:7c:df:37:32:73:0e:89:ec:
         35:db:19:3b:de:b8:f8:fe:30:ac:a2:f2:41:71:3f:4a:78:f5:
         25:9b:f0:7a:79:4c:f3:39:7d:08:92:7f:2b:7c:9e:2b:df:da:
         66:bd:8e:66:56:08:e6:d9:38:5d:c0:28:25:7a:1c:28:49:bd:
         b7:f0:3b:88:0a:94:82:0c:58:20:ac:8f:61:33:c9:92:99:e5:
         0b:f3:36:d0:63:8b:27:66:1d:0a:cf:c8:23:12:17:9f:50:79:
         b5:54:80:95:69:85:4a:05:a3:17:8e:58:0a:33:71:80:57:f5:
         f3:d1:2e:fe:32:ff:40:45:83:65:28:03:f8:7e:43:b2:35:79:
         50:91:9e:11:46:da:fa:1d:bc:c8:e2:cb:4c:73:de:19:68:18:
         97:ab:13:1d:49:0c:61:89:e3:bf:a2:c4:18:9b:92:f3:87:ae:
         d6:20:cf:e4:5b:ca:ca:1e:34:f7:9e:34:71:7a:d2:c2:4a:21:
         64:b7:89:82:73:c8:4d:fc:69:0d:a9:5f:55:68:bb:f3:30:64:
         63:f5:fc:2c:1d:8f:63:fa:c2:6c:42:7d:95:5b:c9:28:10:32:
         53:7e:74:74:cb:07:06:5f:20:da:e1:6a:a7:cf:18:75:3d:77:
         b5:f1:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----