Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File:                     1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier:          NLNyWNaCWUG6T6vAcdqWfN7zoEG9rm4TE+R8inPlyYQ=
Subject key identifier:   6E:EA:4E:99:4A:3D:F1:54:4A:89:45:B3:14:BB:EA:35:71:D1:EF:35
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer:       /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial:       01962F07219D386E739A627CE655B8127B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number:          0FDE
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: 4c/SIS+QqbGXMJdMFGuTDO4ne2wJYHoWU7u7SXVCoPw=)
                          2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
                          3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
                          4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:9d:38:6e:73:9a:62:7c:e6:55:b8:12:7b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=6eea4e994a3df1544a8945b314bbea3571d1ef35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:49:7d:01:3c:3c:c2:96:0a:ac:60:50:3d:
                    ab:d1:4c:a2:a6:c9:ab:74:13:89:ba:68:27:f8:30:
                    31:82:71:8a:22:1f:25:d2:11:b7:c2:f4:74:51:94:
                    cf:a9:43:0a:46:5d:e6:b1:f7:9c:97:4a:16:4a:5e:
                    64:da:ea:37:0d:9c:23:1d:d9:ee:dc:78:d9:6f:c9:
                    a4:f4:f1:f9:0a:2e:6b:a4:04:b5:14:d7:ed:45:95:
                    8a:8d:a8:f6:54:1c:68:11:d4:2a:0c:46:9e:db:ba:
                    6b:19:12:d8:6b:66:1a:94:a1:28:4d:6d:1a:cc:d9:
                    18:df:4a:92:43:9f:f6:42:a1:80:68:fe:d9:e3:86:
                    68:75:f5:48:85:56:a3:5b:c5:d8:a1:6f:5c:ef:a0:
                    9d:36:b2:d0:de:7d:a9:fb:90:50:f1:ee:29:0c:cc:
                    0d:58:3c:7c:b9:4d:73:90:90:07:77:1a:54:0c:91:
                    cb:a9:1f:45:a3:78:6e:7d:52:16:72:98:9e:6f:57:
                    1f:af:28:cb:c3:7b:88:26:ab:e4:9b:b7:70:52:5b:
                    c8:e9:bb:f2:e7:02:4e:26:33:22:6b:86:0a:ad:e7:
                    a1:53:35:6f:b2:58:1e:e8:3a:f4:2a:5b:f4:2e:a5:
                    30:12:d6:4f:eb:e4:ff:af:e7:de:ec:1c:60:92:aa:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:4E:99:4A:3D:F1:54:4A:89:45:B3:14:BB:EA:35:71:D1:EF:35
            X509v3 Authority Key Identifier:
                keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:0f:02:e4:98:2c:b8:d6:11:78:a3:e4:b6:93:48:0d:a2:
         bc:49:a3:c7:4a:d4:ae:07:d1:43:c5:c5:e2:4b:3f:09:49:19:
         fd:a7:0b:59:80:a2:50:06:23:fa:f3:b0:eb:01:7a:89:c9:a4:
         7b:dd:e8:6d:65:2b:40:6f:48:e6:e1:f6:79:59:6e:51:6b:04:
         50:ce:eb:81:be:c1:84:61:62:b0:87:d5:ce:19:ec:f6:e8:31:
         e1:81:a5:12:a0:4a:ad:5c:8d:c8:00:c4:75:02:b6:8f:a5:d3:
         64:4c:b9:57:e1:27:7c:3e:74:11:0c:75:84:55:3a:73:37:48:
         1e:22:e9:56:7b:0c:11:c3:cd:59:03:52:03:4b:54:92:04:e3:
         3b:95:60:6d:ef:44:2a:cd:6f:67:ae:a5:a8:f6:cf:6c:6c:8e:
         4e:77:32:3c:c6:4b:23:87:d5:22:c2:75:4a:05:e0:33:4c:31:
         12:68:6b:b6:fd:45:54:97:a6:fd:f8:8d:72:8e:7c:44:70:e5:
         b5:44:75:ea:11:16:17:ff:d5:07:1c:85:91:78:04:82:40:7a:
         2e:7a:31:ab:11:e6:b4:37:b8:4e:9b:96:64:8a:02:1f:40:90:
         78:0c:c8:3b:39:11:a6:e8:78:e4:7b:fe:df:89:2f:67:10:4b:
         80:54:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----