Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File:                     QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier:          gj26YWYjvJmjgMoNvSKRdxLNbHmAwb/MVWmkNtvMf4k=
Subject key identifier:   CD:4D:1F:72:53:77:34:70:60:38:D7:26:52:72:77:D8:25:6A:C0:96
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer:       /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial:       01962E98B9927EA535EC81ECDDF38613F752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number:          1384
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: QcGFC1jvbkiCufcPxn5SS2/tnRRxUfOhHp6k0Ktta04=)
                          2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b9:92:7e:a5:35:ec:81:ec:dd:f3:86:13:f7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=cd4d1f72537734706038d726527277d8256ac096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:55:65:86:da:ed:08:ee:62:c7:7f:0e:a6:
                    92:51:89:87:a6:2e:4b:c8:98:d8:6c:c1:5b:3f:38:
                    80:eb:9e:9b:3f:4a:70:8e:d4:e1:7a:ae:99:1e:48:
                    60:5a:66:01:c3:aa:55:64:b8:e4:3f:fe:8a:ae:c8:
                    87:88:77:84:cc:8d:76:eb:49:aa:fa:25:86:ca:ba:
                    8c:66:5c:48:61:c1:2d:0c:d6:f0:39:f4:a7:42:6e:
                    88:e5:bf:ba:93:1a:b1:3e:d7:15:a3:3d:e8:1f:a6:
                    99:80:3a:88:e4:58:d0:9d:b1:93:cb:65:85:f7:0e:
                    dd:82:3d:cd:96:c8:6b:6a:89:f5:dd:63:35:e5:24:
                    ad:8c:2e:f9:74:6e:3c:07:f9:ac:5d:52:47:6c:77:
                    ae:8f:0d:db:d6:d8:97:87:bd:38:bd:2f:a4:a9:5e:
                    94:bf:85:b4:88:2c:9c:d6:14:91:32:17:61:58:f9:
                    ac:b0:b8:83:5c:0f:49:6d:5b:26:02:e4:94:97:eb:
                    0e:f9:72:83:b8:61:d4:cd:55:56:53:41:d5:5e:28:
                    f0:3b:4b:fb:7c:b0:25:fb:03:cf:e7:e7:7a:67:92:
                    ea:92:ea:bb:a0:26:8c:98:b3:86:68:bf:eb:d0:c0:
                    1f:09:24:bf:ee:03:a0:af:65:a8:86:8c:e6:eb:8a:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4D:1F:72:53:77:34:70:60:38:D7:26:52:72:77:D8:25:6A:C0:96
            X509v3 Authority Key Identifier:
                keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4d:c5:4a:de:de:fe:ca:6a:30:94:63:42:3e:14:a4:11:19:
         86:a0:c2:55:91:a1:03:1c:ca:5d:09:1b:e5:ef:a2:72:23:ba:
         af:21:cf:b2:93:6a:a5:38:dc:64:c3:9f:50:ce:40:39:06:9e:
         22:56:8b:a5:9a:79:cc:87:6e:f1:a2:76:fa:e8:ab:d9:34:9c:
         f4:0f:25:8e:be:b1:f4:97:29:7e:27:af:33:c8:b4:b4:d4:6f:
         56:06:fd:53:05:0b:dc:dc:ea:c3:b7:97:3f:76:c6:33:ff:07:
         87:d7:28:95:3d:cb:65:7c:e5:26:da:bc:bc:2c:35:9d:49:f5:
         1d:c0:8f:f4:91:19:a6:6a:e8:26:26:a9:49:b7:21:30:66:10:
         30:5c:13:92:69:ec:f1:96:f6:51:c0:e7:dd:5b:d3:27:7b:5a:
         50:d9:25:b0:fe:98:df:c9:4c:17:f4:eb:e0:58:7d:02:70:36:
         4d:4b:8b:52:b3:bf:6e:98:35:15:0b:ad:94:a0:ef:ea:a9:76:
         08:67:41:d8:61:12:ab:51:bc:c8:95:73:c0:fd:41:a2:fb:54:
         3d:da:d8:fc:d1:f5:c3:89:18:9a:40:d8:53:d1:91:3f:df:02:
         6c:87:e0:ef:9d:01:66:14:5b:4d:37:85:ad:a7:67:97:ae:17:
         59:42:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----