Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File:                     qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier:          3nwGyk6aHqtqNa/hFGB8z2KYzPYgqELJci7RYy1XGv4=
Subject key identifier:   6C:F2:2E:A9:81:F8:0D:CE:D2:31:6B:31:D7:F4:36:30:F7:4E:3A:0A
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer:       /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial:       01962F74A2D9ED6FCC795490F64A8F7501BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number:          0790
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: D4LqwpKjbPmiCtB1FBgrs5av22QVPwX3Nds/LHb4XLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a2:d9:ed:6f:cc:79:54:90:f6:4a:8f:75:01:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=6cf22ea981f80dced2316b31d7f43630f74e3a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:d1:5b:85:3f:f7:35:89:90:79:8b:be:9e:
                    7c:08:79:27:0c:60:bb:e3:58:04:db:b1:12:d8:0b:
                    ee:1b:d1:f1:8f:76:36:07:28:ae:8a:d2:3c:49:4e:
                    24:58:4d:c9:ac:03:68:29:2b:24:9b:0e:24:1b:5b:
                    7e:91:7a:3c:62:60:0f:af:49:a9:68:ad:97:21:7e:
                    76:c8:41:c3:ba:cc:b6:05:4b:8c:c8:6f:3e:b3:19:
                    d5:37:58:0e:bb:73:09:dd:c0:90:90:26:ee:3f:82:
                    c9:be:13:48:42:5e:27:c3:17:ee:ce:85:c1:40:14:
                    2c:cd:34:f1:02:d4:10:83:6a:d5:cc:da:f7:2d:0b:
                    81:fd:66:23:a7:6b:2c:80:29:a0:0f:3d:b4:c1:eb:
                    44:47:cd:58:d6:9e:e9:72:58:e2:a6:57:dc:a6:83:
                    fb:7f:89:98:d5:70:0e:d2:fc:09:1f:64:a2:95:4a:
                    97:f9:6b:f8:78:59:6f:28:af:44:ca:81:25:f6:3b:
                    b4:33:29:0c:31:1f:5f:e1:33:91:1f:d3:2b:27:bc:
                    8f:ca:2c:25:0b:bf:ad:2e:bf:94:99:73:23:a2:d1:
                    95:b2:9b:30:75:06:ac:1c:f7:aa:fa:de:77:be:53:
                    bc:44:c7:f1:71:48:1b:f9:c7:69:bb:f3:28:86:66:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:2E:A9:81:F8:0D:CE:D2:31:6B:31:D7:F4:36:30:F7:4E:3A:0A
            X509v3 Authority Key Identifier:
                keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:73:c9:11:d3:3c:f7:5f:40:4a:22:f2:4d:3b:b2:39:9e:
         5c:06:87:5b:2a:3f:1b:a1:af:af:8f:07:81:59:d1:33:e6:90:
         96:7e:58:93:b6:1f:ad:f5:87:5f:ae:e6:6f:12:f9:25:96:db:
         77:19:d3:94:1c:f1:01:e3:2b:ce:ea:74:f6:b4:7f:33:84:7c:
         fd:e7:32:ca:82:7a:d8:77:ed:35:5b:57:64:f9:80:9b:cb:a8:
         fc:07:b8:a8:f1:51:b6:56:62:83:96:61:23:0f:3a:29:75:da:
         19:66:ac:1b:db:cf:a2:aa:31:b3:a5:ee:e1:59:41:c7:8d:45:
         1e:a0:2a:8e:46:ca:cd:53:1e:d1:2f:f3:37:30:f0:2b:51:9b:
         0b:b3:7a:e9:89:39:5a:c8:f9:57:7e:03:dc:1d:65:c4:76:1f:
         74:9f:e7:a6:fd:21:00:39:a8:5c:45:aa:c9:43:94:2e:c4:72:
         fb:18:48:cd:95:fc:95:60:d2:7e:98:6c:69:27:35:7f:ee:c0:
         7f:88:fb:21:63:43:10:12:0f:2b:36:93:da:07:d3:62:4f:f5:
         df:40:22:3c:0c:89:81:1a:e2:b8:48:b1:e9:63:6d:a1:b6:93:
         51:26:3c:30:8b:cc:a3:e4:9b:88:b1:56:5d:2f:8f:00:f8:9e:
         09:d4:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----