Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File:                     qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier:          V409NyuRZKVAynHRVPdqp7GoBp3a08Mn9x9fPxFTSGA=
Subject key identifier:   A4:9B:A3:0D:37:DA:37:49:DC:E0:14:7D:98:AD:54:DD:91:F3:1D:E3
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer:       /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial:       01962F07190D71DF171819BC35DD74D50A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number:          0E07
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
                          2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
                          3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
                          4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: MVc8oeyYC3FhP7MAuOzFQBLFz0GTqa4Y6vspIwAOGG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:19:0d:71:df:17:18:19:bc:35:dd:74:d5:0a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=a49ba30d37da3749dce0147d98ad54dd91f31de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:0e:af:d7:aa:b9:c7:cc:90:3d:a2:d2:83:
                    d9:09:33:e2:c0:fe:d5:25:bf:fe:b5:d9:34:52:28:
                    9e:0f:0f:c2:d9:07:6f:2c:28:8f:df:97:55:32:d1:
                    81:44:96:ce:9c:26:86:2e:36:b5:75:e4:37:cc:59:
                    a6:c2:6f:43:a4:ad:3c:5c:8f:8c:95:88:70:bc:5a:
                    da:91:9b:0b:60:af:5c:36:bd:73:45:ad:c2:34:d8:
                    1f:c3:31:24:57:70:69:b0:5e:df:63:ad:f3:6a:51:
                    0b:ac:03:eb:6c:a9:5a:e0:f7:34:58:ef:53:bb:70:
                    af:b5:c9:5a:2c:a9:36:e4:0c:d6:03:83:90:60:bf:
                    53:91:95:95:ae:70:49:0c:0a:63:4c:e7:a4:e4:dc:
                    5c:69:c9:d5:67:44:79:c5:fc:76:be:65:bc:b0:ca:
                    56:0f:8c:ba:5e:a3:97:0f:fd:e4:2c:cc:ae:a2:ef:
                    c6:7e:15:52:92:c5:32:2c:ef:80:9a:7c:19:98:a3:
                    cb:c2:5f:28:81:b0:de:7c:ed:1a:aa:8c:26:db:a5:
                    25:6a:8b:1b:6c:e7:ac:fd:26:e4:db:72:b9:a8:aa:
                    6c:6b:26:64:b3:3f:7b:64:0e:65:b0:23:ab:2e:61:
                    5c:e7:54:0e:af:80:41:73:5b:e6:7b:e2:5b:74:f9:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9B:A3:0D:37:DA:37:49:DC:E0:14:7D:98:AD:54:DD:91:F3:1D:E3
            X509v3 Authority Key Identifier:
                keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:96:0f:b5:fa:e9:9d:ee:b4:2d:c9:f0:c6:a0:c9:99:17:52:
         c1:ba:30:92:f6:04:18:88:d9:43:c5:4b:93:10:7f:d9:58:eb:
         51:eb:4e:09:fa:be:26:a5:63:e9:4e:59:38:d2:56:de:c6:07:
         d7:13:e7:44:bc:5a:92:1a:c5:09:68:44:7e:f7:bc:d4:b3:28:
         75:80:47:e6:a2:f0:69:f5:53:58:79:aa:52:15:55:de:83:15:
         10:1e:a1:93:a6:77:d7:86:de:10:bf:87:21:9f:43:83:61:61:
         ea:8c:58:5d:ca:88:0f:85:c5:93:88:2d:02:5e:a2:3b:ec:dc:
         c4:7a:72:1e:04:db:c1:73:2b:e3:71:8a:95:d3:ed:a0:90:d8:
         62:f0:1d:06:8f:3c:8f:05:7a:c5:ad:e5:a3:f2:f2:d0:e2:e9:
         8f:1c:b2:8c:b0:47:3a:a8:c4:1e:ac:ad:bb:0f:94:17:21:2a:
         dc:0b:dc:ff:3d:59:14:6c:fa:2b:76:91:7f:65:6d:53:ea:96:
         09:11:e3:02:ba:bc:e2:55:17:63:4f:65:eb:ab:90:5f:20:b7:
         0d:0a:51:08:cc:b5:b0:6a:bf:a4:c0:0b:56:40:fc:1b:ab:d4:
         65:50:02:6c:fb:10:ae:b3:b5:a3:c3:9d:da:5b:bf:3b:5e:df:
         73:0e:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----