Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File:                     tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier:          juKoSbr0OXpVq2pLY0H8PCDFVXTSjcjva/6c2uPW7oE=
Subject key identifier:   00:08:C9:61:58:09:87:3C:6B:D9:E0:58:0A:FC:7E:F7:CB:3F:7D:C5
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer:       /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial:       01962E61C261A61D142B557E04CE481A28B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
                          2: p6rvh-AV0bmaoiN047zHywpJoqY.roa (hash: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=)
                          3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: UTe+sBehY8+G2CVAO3JV6nE/cBwQOWjy1OkIpGZ4HHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c2:61:a6:1d:14:2b:55:7e:04:ce:48:1a:28:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=0008c9615809873c6bd9e0580afc7ef7cb3f7dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:dc:47:d8:e8:f9:a1:6d:cf:26:b1:7e:54:
                    3f:ba:4a:1c:13:0f:fe:b6:78:e6:4b:97:e6:16:46:
                    f3:1b:68:76:80:ef:e4:88:df:ba:ff:d8:7e:2a:d2:
                    7d:75:d6:30:b0:9f:21:38:20:6c:49:e0:6a:fe:65:
                    73:f4:d4:e7:ff:50:23:7c:c1:d1:aa:48:62:ac:92:
                    eb:66:55:62:23:4f:b7:a8:94:dc:95:1c:90:73:be:
                    f0:6e:a2:56:13:d3:a2:c0:b3:b6:97:16:58:68:ab:
                    e7:12:b6:5e:15:a3:2e:a1:2c:9a:ad:45:24:cc:53:
                    72:b5:d7:f1:f6:c9:42:e7:2e:6d:5f:b0:c0:ba:5d:
                    dc:ed:a6:19:24:b6:5a:49:76:41:79:f5:fc:06:66:
                    3d:a3:37:b2:0d:fa:db:53:7d:54:98:76:1c:05:a4:
                    87:99:ca:dc:16:95:e1:3d:ee:bf:e6:1c:eb:03:50:
                    2c:81:8e:b2:75:24:c7:63:f6:1e:86:69:1e:48:9b:
                    1d:f5:86:e2:d6:ea:68:b1:18:36:2a:c1:e8:37:cb:
                    06:b8:e2:66:26:1f:15:67:4c:1f:45:50:6e:ee:da:
                    1a:47:d9:90:63:d4:30:14:98:b6:cd:33:8d:3a:68:
                    e1:be:34:66:40:6e:f8:b9:70:f8:83:3c:ad:d6:e6:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:08:C9:61:58:09:87:3C:6B:D9:E0:58:0A:FC:7E:F7:CB:3F:7D:C5
            X509v3 Authority Key Identifier:
                keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:11:a5:51:87:7d:56:9b:7b:a5:80:25:8e:78:ae:24:9a:66:
         5f:f2:8f:61:ee:01:cf:96:68:38:c7:51:60:02:7b:92:ed:d1:
         5b:af:10:1f:f1:23:af:d2:16:e1:3d:7b:55:69:32:f8:63:4c:
         4c:16:02:50:e3:a0:11:9d:d7:92:e0:4d:74:2c:1c:ea:07:54:
         3e:9e:4d:42:db:0a:e3:92:f4:8e:b6:b6:de:ad:b2:fd:fe:71:
         98:b9:29:cd:28:10:15:3f:88:3e:86:ec:3d:9e:ce:45:dd:3b:
         a3:ed:26:68:a5:22:c0:d7:65:a0:78:9c:7f:82:b6:f4:89:11:
         68:e8:f6:04:1a:85:3d:62:f1:2e:d1:5d:40:29:97:2d:ad:9d:
         25:80:ad:28:7e:b5:6b:1d:89:5b:70:0d:d2:0b:a5:f6:ac:14:
         ef:04:fd:98:70:a5:ef:f2:da:7a:45:30:04:b8:60:ff:0b:c5:
         a5:fd:cf:30:94:c6:11:bd:a2:81:75:33:95:82:cf:09:09:78:
         3a:28:5f:b5:c7:da:72:90:f6:db:b6:8e:18:63:9c:4c:ff:e2:
         e0:94:ab:f7:be:d7:ed:9d:24:9a:93:2a:fa:7a:4b:dc:73:b0:
         53:c1:a7:b8:7e:28:b4:23:34:c3:ec:19:4f:24:a4:31:77:b0:
         cd:ca:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----