Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File:                     qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier:          fg8gEvQoOHpfL9gJUM5cuw86h3kuiq41vgTOJ6fUPnU=
Subject key identifier:   42:DE:7D:59:BE:08:8D:D5:89:41:96:4B:81:D9:9C:BA:29:63:28:D5
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer:       /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial:       01962E618DC33F20E17DF84722AB25C1C5B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number:          14AC
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
                          2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
                          3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: z+aEGp+3JTA4o6GeghC0cPTapnYwIHp5e7QECqU/SoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8d:c3:3f:20:e1:7d:f8:47:22:ab:25:c1:c5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=42de7d59be088dd58941964b81d99cba296328d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:0e:00:7d:9f:8e:3a:c6:73:5d:11:ee:9a:
                    85:ec:3b:71:2e:a8:18:9c:00:b2:bb:91:ab:dd:23:
                    c2:b1:ef:dd:6f:52:02:c9:3d:e6:b6:9c:09:73:83:
                    47:0f:98:bb:63:01:f4:dd:1b:fd:3a:b1:12:4c:03:
                    00:55:32:b9:2d:16:b0:6b:e6:a5:c0:42:31:be:f7:
                    68:68:ef:0a:4a:65:e0:4d:ff:59:c5:2f:c6:c8:99:
                    6f:67:85:c5:e5:0f:4a:8f:22:43:25:b0:28:35:54:
                    aa:4e:43:2e:b8:e2:2c:f6:cb:ce:23:66:6e:b3:7a:
                    9d:65:b1:bd:9c:5a:3b:59:c2:45:cb:76:69:ae:14:
                    7c:76:ea:96:36:f2:3a:8b:85:39:e0:2c:5a:a4:16:
                    3b:5a:f1:ea:4b:19:b6:e1:da:03:97:88:3c:62:98:
                    bd:cc:2a:4a:d7:1c:37:fb:d4:26:c3:e7:60:f0:54:
                    72:ca:70:4a:03:b1:0e:c3:7d:59:a0:ac:b6:53:e9:
                    aa:35:64:ed:29:f8:18:f3:7e:82:11:28:b6:7b:fc:
                    59:9f:67:86:0e:5d:4b:7b:90:32:de:be:26:1c:a7:
                    1b:40:03:ab:e7:d4:9a:73:20:ac:c1:84:a9:09:cd:
                    48:64:be:21:8b:c1:bc:9c:d2:51:56:33:01:24:89:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:7D:59:BE:08:8D:D5:89:41:96:4B:81:D9:9C:BA:29:63:28:D5
            X509v3 Authority Key Identifier:
                keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b0:28:e4:52:c1:b1:38:c7:f0:42:8b:6e:51:1c:14:5f:e0:
         31:61:64:6e:84:b0:60:41:21:af:80:84:2e:2d:d1:ac:85:dd:
         ea:8f:84:21:74:56:ef:06:8d:0b:b0:4c:7a:20:7c:3c:6b:e3:
         a4:02:f0:da:0d:56:03:36:b8:48:7d:3c:f2:86:ec:44:77:cd:
         c0:3f:05:95:46:81:a5:23:90:8e:e1:b0:72:04:d9:c9:ed:9d:
         f2:11:f8:98:e3:55:77:b3:42:bc:1b:d1:b2:52:85:97:5e:59:
         89:58:5a:ef:8a:18:96:39:d8:f5:f0:89:51:b3:dc:dd:ac:0b:
         ba:3b:fa:c7:cd:3f:ce:45:85:95:66:9f:50:a7:3b:df:9a:6e:
         c4:78:4b:2b:4d:c0:fc:e9:f0:17:57:13:9e:7b:dd:3d:a8:b3:
         a7:45:9b:08:70:6e:98:01:0c:ae:04:92:04:57:47:50:78:6a:
         cc:bc:95:16:75:4c:11:51:bd:43:f6:40:f2:4e:1a:71:c9:ba:
         49:cc:86:ee:c9:02:1b:5f:8c:64:ae:56:73:50:aa:02:bd:91:
         e4:2e:0b:01:e5:aa:06:f5:91:29:70:13:48:af:7b:55:dd:8f:
         79:cf:c9:48:05:51:f1:21:50:01:dd:8c:56:34:d2:20:e4:d4:
         b9:5e:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----