Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File:                     Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier:          rivYxfTvok6tEItm6XTfBZg2SvjXik2ckv9puibAQEk=
Subject key identifier:   2E:44:F4:16:89:9F:91:CB:52:0A:55:C2:A4:A4:5F:F3:24:C1:80:CF
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer:       /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial:       01962E61D121F8E9EBDE4F6EE57A906FC449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: 43EIk/eJx5XLtqdJKR13WdVCXuf6mjITXEA2qbkojac=)
                          2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d1:21:f8:e9:eb:de:4f:6e:e5:7a:90:6f:c4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=2e44f416899f91cb520a55c2a4a45ff324c180cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:fa:de:2a:22:1f:9f:a6:fd:f5:2f:6c:50:
                    b2:89:c7:c7:d5:8b:3e:cc:14:e0:57:93:9f:44:4d:
                    6b:04:88:e3:ec:a7:3a:8b:74:6e:47:84:66:fe:1c:
                    ca:71:64:c3:9c:67:c4:3b:47:10:8c:10:10:43:35:
                    ba:27:5b:f0:a5:4c:28:4c:7d:32:04:2a:77:90:7f:
                    31:20:35:ba:96:ab:02:d4:23:41:17:ca:e7:af:45:
                    98:18:47:d6:c1:8d:6e:50:d4:2e:4d:16:bd:35:12:
                    a8:22:43:be:6e:b0:fa:96:59:9b:0c:a8:cd:1b:f8:
                    dc:b0:14:23:ec:05:b7:4b:c2:97:7b:48:da:36:80:
                    62:6e:c0:cb:47:8f:72:1e:12:19:3e:b8:44:8f:27:
                    91:bc:7c:29:59:ed:f5:7c:24:b2:9e:83:0e:2c:d9:
                    de:73:39:92:f3:dd:97:02:c0:5a:70:fc:cf:21:bf:
                    da:b8:0b:7a:22:ec:0f:ba:5d:73:d0:e5:fc:93:a2:
                    35:0a:fb:a5:b5:6e:43:23:c5:13:31:c3:4b:c2:f1:
                    1b:8b:dc:74:65:a0:1e:a8:06:0f:c3:e3:10:6a:9a:
                    3d:2b:b6:6a:b0:cf:e1:a5:ef:06:4a:bd:87:26:75:
                    b5:17:4d:e6:be:8c:a8:e3:aa:6b:29:35:b7:2a:88:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:44:F4:16:89:9F:91:CB:52:0A:55:C2:A4:A4:5F:F3:24:C1:80:CF
            X509v3 Authority Key Identifier:
                keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:95:5e:9a:be:45:8e:55:f2:2e:8d:63:8e:96:e8:78:c2:8b:
         06:0a:84:6a:52:57:31:71:9a:c3:36:cc:44:d9:42:80:fa:2b:
         f8:2f:df:34:25:89:72:c7:ac:a8:d1:d9:5d:0c:dd:3c:eb:f0:
         fc:be:73:01:5f:a4:0a:79:64:8d:a2:db:aa:cd:9d:7e:50:86:
         80:b1:22:12:e7:83:67:50:06:34:cc:d9:31:38:f9:a9:91:3d:
         f7:2c:e1:7c:e5:df:71:83:7f:dd:dd:ad:dc:9a:53:a8:b4:fe:
         1e:3f:60:16:15:bf:ff:91:44:13:57:d6:be:20:16:26:0b:ce:
         7a:04:41:36:a4:b4:b0:72:20:7d:cb:6d:46:39:87:9e:f9:3a:
         74:86:e6:dd:9b:3c:a0:69:27:9a:8c:2a:cd:34:e2:ca:19:30:
         56:aa:ca:64:71:e9:2b:e7:27:a2:92:86:9a:8d:70:a3:f6:8f:
         1e:f1:65:32:5a:71:d4:a2:05:81:51:d6:73:fb:81:9e:e2:38:
         7b:f7:fc:88:79:50:42:18:a7:7a:b1:ec:ed:ed:ed:b7:9c:4d:
         0d:88:2b:25:46:70:bb:c0:4f:f0:ad:44:af:26:e2:7e:51:16:
         ce:34:49:00:04:5a:18:1e:7c:22:0a:b6:c0:f3:cd:cb:4e:15:
         fe:f6:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----