Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File:                     QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier:          2hGSfofWFbyhc7mGcIhbf/CiWWYcuwzaLP1rJyjzFz0=
Subject key identifier:   A9:8A:FF:88:1E:0B:FE:F6:8B:50:41:FD:CF:2A:4E:A4:12:4B:F3:B1
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer:       /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial:       01962E2B4F1E5C38C796047ED21C31A30F92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number:          0C0A
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: 6rV9eDtLqjrWZLXprUqcr99pZaA.roa (hash: dlsrhoQ5PwXdAjp/9r3Vgwhl3pAOBofCxgLlYlDOE18=)
                          2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: IkoI2Pm5GbC02hqOpG7JmaPhYUW8AbnEYafzLPqsC0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4f:1e:5c:38:c7:96:04:7e:d2:1c:31:a3:0f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=a98aff881e0bfef68b5041fdcf2a4ea4124bf3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:8a:db:34:76:98:09:6a:6b:38:59:3d:c9:
                    70:cf:fb:4b:d7:1e:0d:2a:46:ee:5d:ba:96:bd:5f:
                    93:c9:68:3a:94:6f:74:ec:32:d6:c6:ce:54:85:96:
                    04:41:9d:17:46:56:1a:ea:b8:67:62:4a:23:be:5b:
                    28:f5:3c:f5:0b:d7:e6:c2:c9:a2:1a:00:ae:da:9c:
                    c9:44:ad:f7:58:42:70:70:5e:a7:e2:b6:7e:7e:b3:
                    56:11:b2:d9:70:be:98:cf:3f:40:04:dc:38:1f:40:
                    d8:ad:d7:f6:c5:2c:02:01:0c:a9:0e:30:26:1b:40:
                    e5:18:7a:ef:aa:0d:94:1c:dd:26:38:be:e0:59:2a:
                    3a:86:2a:e8:ca:33:90:65:97:c1:a6:2c:c1:92:dc:
                    53:f1:3e:8b:62:69:0a:2c:1c:ce:79:40:9b:0e:d1:
                    3e:13:f9:ea:4d:c3:0f:cc:00:41:f0:5d:34:7d:6b:
                    ba:ba:b1:11:e7:02:b5:89:78:a3:da:39:8d:4f:df:
                    a5:c1:3a:be:d0:f2:a6:20:e4:df:18:a5:51:a7:e4:
                    41:85:f1:ad:f0:2d:ec:78:c0:61:cd:db:35:94:8d:
                    d5:dc:04:fb:50:74:e4:97:35:ba:99:4e:de:a8:c6:
                    c8:5b:ce:73:ae:15:3e:89:c7:99:4d:2e:29:f5:c3:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8A:FF:88:1E:0B:FE:F6:8B:50:41:FD:CF:2A:4E:A4:12:4B:F3:B1
            X509v3 Authority Key Identifier:
                keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a4:6e:32:e3:ee:6f:54:cc:e1:ce:2a:d0:7e:3c:68:55:15:
         1f:ea:5d:7d:5f:98:80:1a:e7:59:8a:49:d8:a2:ed:ba:0c:36:
         39:78:8f:60:da:72:52:81:4a:b3:ae:c8:4f:1f:87:40:66:a0:
         47:81:bb:5b:8e:3a:69:b1:fe:45:92:21:2e:f9:6a:73:9d:b0:
         87:ea:8a:b1:a5:86:e2:35:89:5e:c5:a6:f6:68:16:9e:aa:0d:
         1d:ca:d0:93:f2:c0:49:51:3c:83:24:0c:a1:9f:93:ab:63:e8:
         b0:c4:6b:41:8e:f1:49:9d:ab:1e:22:cc:b5:1b:a5:42:90:98:
         6c:72:ce:27:ff:df:cc:8c:99:bf:1f:92:77:e1:fd:3f:99:4c:
         95:e9:df:82:f5:b3:30:6b:fe:b2:6b:58:a1:7e:e1:00:6e:8a:
         df:47:ee:52:c8:dd:5e:1e:81:b3:37:c4:2b:35:3a:7e:b8:99:
         04:fc:05:95:32:94:2c:5a:42:b8:cc:23:15:20:f6:b3:99:4e:
         22:1c:d8:67:71:85:55:ea:5e:f5:4f:8f:d9:6f:ea:74:19:18:
         9f:17:e6:a7:5d:8c:ea:6e:5b:91:de:a4:37:27:61:fc:16:00:
         c9:ab:7c:a1:b2:e3:b5:3e:68:bd:e9:07:4f:09:8f:c0:46:b2:
         78:04:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----