Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File:                     CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier:          12GKE9+4pyQtgot4Woa5wuu+y9c45eIj9ZkPkgYYYtk=
Subject key identifier:   C8:AE:54:3C:78:2E:F4:97:7C:F3:85:88:18:A4:91:8A:23:ED:9E:23
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer:       /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial:       01962FAB93E4BA999C4E9579B8482ECAAFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number:          0D0A
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: 6cGpWKTjtOZkiuTJN2d4fGYXWioNnEd7Lrtdp1/ks6k=)
                          2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
                          3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
                          4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:e4:ba:99:9c:4e:95:79:b8:48:2e:ca:af:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=c8ae543c782ef4977cf3858818a4918a23ed9e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:b5:a0:5c:b8:80:3e:64:f3:0c:ab:30:73:
                    e3:db:03:64:db:d5:43:28:c7:59:76:61:32:a4:38:
                    8d:40:f0:36:3a:a3:f4:e6:a7:c4:75:85:92:47:21:
                    20:d3:84:16:48:63:54:0e:87:44:38:f8:91:ed:d7:
                    38:d7:f6:c4:e4:e0:16:5d:c5:72:ea:0a:37:4f:4a:
                    13:95:94:57:71:e9:a6:e5:bb:a1:09:46:7f:b9:b5:
                    e8:a0:74:b5:15:36:a8:14:d4:dd:c5:ad:d0:1f:e8:
                    f5:52:35:78:ae:ef:19:78:10:55:93:6a:ee:3a:53:
                    d4:1b:2e:15:09:c9:96:91:53:4c:9b:df:88:97:2d:
                    31:4a:df:42:3e:1a:45:ab:5e:e2:56:b0:99:af:4d:
                    bb:c5:c4:71:bc:4e:35:fd:15:a0:e7:1a:98:0b:03:
                    0c:0a:fa:28:28:db:8c:65:54:49:81:dc:36:11:4c:
                    92:ab:85:f7:09:8d:42:81:1b:bb:be:77:1e:18:48:
                    ea:34:e8:45:47:d9:4a:38:41:52:7c:30:bc:07:66:
                    e1:e6:13:66:0c:9b:5e:ad:c8:5d:3d:fa:30:b8:b2:
                    6c:34:52:6e:ce:3b:18:76:2e:eb:2e:99:9b:31:78:
                    b1:4e:49:bf:70:b3:fb:ed:8d:b1:d0:da:4d:2c:7e:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AE:54:3C:78:2E:F4:97:7C:F3:85:88:18:A4:91:8A:23:ED:9E:23
            X509v3 Authority Key Identifier:
                keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fd:32:47:42:64:8d:97:81:be:00:c8:4d:1d:49:d6:fa:ed:
         71:7f:53:a1:a2:72:68:4c:9a:1b:68:ff:a7:66:2e:83:a8:d2:
         66:5a:ea:be:43:ac:88:7f:41:d8:2e:d0:a2:f6:a9:a7:c0:90:
         bc:1c:e3:1b:ce:50:6e:a9:1b:ae:f4:58:45:06:62:c0:42:96:
         6b:d6:14:33:4f:4e:b3:7e:81:16:73:09:0c:32:91:ca:77:8b:
         40:69:f0:9b:19:c8:70:bd:46:5a:56:47:9b:07:f7:57:2a:62:
         8d:6a:97:90:a1:1f:43:fd:ff:43:75:4f:71:73:2c:e8:f2:40:
         d4:d9:4e:18:d0:88:92:9c:13:82:34:ca:b5:d3:10:db:55:0a:
         a3:d8:6a:fc:75:4e:07:98:47:ff:20:72:53:59:9f:0e:8f:14:
         de:eb:c6:e3:28:e5:9b:c7:7b:82:50:d6:6d:33:f7:59:1d:28:
         05:a8:1d:de:60:12:e4:b1:2e:4b:b7:4c:cb:c5:f8:24:c1:38:
         88:e2:89:10:bd:11:01:bb:a2:f1:60:92:61:ef:22:ea:07:e3:
         bb:39:04:5c:c3:5e:f6:df:93:85:65:04:3f:27:46:c3:ff:2f:
         1d:a3:1e:01:d5:46:6c:19:23:4d:08:c5:8f:62:98:c8:65:fe:
         43:96:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----