Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File:                     qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier:          7aRKHaVz22lJ/2XXKgodbfKGMemqzS9bavIpnRAlccE=
Subject key identifier:   9A:C1:3D:5C:03:C8:E6:94:9F:2D:EC:51:3E:D6:D6:06:27:08:8D:15
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer:       /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial:       01962E9933837F6C676C49DF27246CD25D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
                          2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: y7SDjevNURKtlpupJ6qnBWZ6Fa3cjFvKEA8Akd/5ifs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:33:83:7f:6c:67:6c:49:df:27:24:6c:d2:5d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=9ac13d5c03c8e6949f2dec513ed6d60627088d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:aa:73:48:71:05:03:9a:f4:a2:67:75:e5:54:
                    59:84:9e:a2:1a:61:56:e3:cd:db:a3:69:50:c5:c8:
                    76:2c:b1:fd:47:7a:be:99:39:05:1f:50:77:c0:c2:
                    57:72:f5:c1:6f:0b:8b:5c:e3:b2:8e:c8:a0:dd:6a:
                    0c:3b:2c:db:f3:72:e8:5c:8c:13:2f:29:16:07:7a:
                    6f:a7:01:1d:d5:f2:27:de:d2:76:26:95:55:ea:d4:
                    5a:24:e1:18:16:83:37:9d:35:36:90:81:44:3e:b5:
                    45:6a:67:5e:2c:62:71:46:01:39:8e:6c:2b:84:2c:
                    98:3d:bc:f1:8e:51:22:e2:91:f3:6a:54:5f:83:8f:
                    d5:46:60:b3:87:32:34:b1:e5:af:4a:0b:6c:b9:2f:
                    86:3e:3c:4e:2b:d8:10:db:f6:7c:40:15:61:f6:9f:
                    e5:a3:ac:c8:6c:ac:a8:91:96:5d:25:a4:3b:a2:74:
                    d7:aa:93:63:f6:43:32:72:d4:be:6a:81:6b:a0:61:
                    0b:96:ba:c8:e5:6e:a5:af:38:0d:3f:9d:bf:99:98:
                    35:75:10:0b:8c:4f:85:35:c6:56:79:c2:b1:cc:a3:
                    13:49:3b:af:ec:de:22:8a:53:06:6d:05:93:ed:c0:
                    c9:ed:d8:69:e5:88:12:26:86:af:73:5d:95:4a:f1:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:3D:5C:03:C8:E6:94:9F:2D:EC:51:3E:D6:D6:06:27:08:8D:15
            X509v3 Authority Key Identifier:
                keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:34:75:9c:69:f2:f2:49:be:5a:aa:1b:bb:03:c1:c8:b6:
         a7:29:b9:59:52:13:85:a1:d4:83:30:c3:7d:eb:ef:d9:3a:5c:
         e8:c9:39:0c:43:1e:e7:73:87:a2:fb:78:18:fa:03:e0:73:98:
         36:99:45:ed:2c:9e:ed:b0:4d:f2:8f:30:dd:65:12:bd:e3:dd:
         f5:2f:de:2f:90:0d:58:49:94:5d:30:5b:83:09:c5:91:3c:cb:
         aa:b0:a0:55:92:7f:9a:94:56:9e:5e:d8:21:e3:72:d6:24:cc:
         fa:b3:7b:a7:a0:be:ef:28:76:1e:4b:cc:64:7c:7c:0f:54:a7:
         de:51:8d:02:da:09:bf:86:83:70:38:8e:ac:bc:13:8a:52:c6:
         71:0d:4a:92:0d:b1:c6:e1:90:aa:33:cd:79:ca:a9:78:b8:af:
         23:08:56:3f:6a:14:8c:91:c3:58:e4:4d:ab:fb:11:a9:f3:c0:
         86:3e:a8:7e:7e:49:57:1a:02:b8:85:17:ad:d0:f7:08:3e:53:
         8a:98:29:51:f8:e3:61:54:b5:ca:09:15:82:cc:8c:9a:d4:14:
         60:0c:47:72:f9:35:fb:65:df:e7:5c:cd:1a:ba:f2:fb:74:3a:
         3d:88:28:b3:19:bc:df:23:67:e2:32:ad:ae:97:35:83:0c:1b:
         2e:e1:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----