Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File:                     QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier:          HObV6VeGZ2SJuKFqEqhfKEnKh5w3pagGrNRAYInpF2c=
Subject key identifier:   0E:B9:77:9B:C9:62:E7:57:B7:7D:1B:F5:59:52:E5:9D:98:68:EE:4E
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer:       /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial:       01962F744E3BCAA3F0BBCF620DEE05BCF9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number:          0945
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: uc6c3rluJ6NmqMmzb2pZoPeFivbQNqwWq1eK0txBkhY=)
                          2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:3b:ca:a3:f0:bb:cf:62:0d:ee:05:bc:f9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=0eb9779bc962e757b77d1bf55952e59d9868ee4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:8e:13:0f:a8:bc:56:e9:72:7a:a5:fa:9c:
                    4f:64:6e:64:33:ec:83:c0:d9:56:2d:7a:35:73:1e:
                    b3:42:17:0d:60:ec:7a:c2:8b:7e:2e:1b:bc:6d:8a:
                    37:d9:b1:d9:22:15:5e:42:73:ba:92:e1:4d:39:a1:
                    e4:17:93:d5:9d:f5:82:67:c7:f0:7a:ab:23:24:96:
                    b7:d6:85:bb:c8:e1:e4:18:a7:30:41:2c:fa:c6:d1:
                    7f:71:13:7f:af:09:dd:04:6e:a3:39:e9:03:7e:ca:
                    f5:74:3d:80:16:ae:e7:d7:30:0d:b2:5c:3d:7b:71:
                    8c:a0:88:ff:b6:9f:42:96:14:2b:13:66:5a:04:46:
                    7e:39:f9:db:bb:36:9b:3b:2e:8a:44:60:f2:7f:4b:
                    d5:46:0c:04:d3:99:81:d8:a4:3b:2f:94:e3:8f:0a:
                    36:8b:f7:5d:93:8c:aa:fe:45:78:7e:f2:0a:dd:55:
                    a0:e7:bf:ec:59:75:82:2e:ba:9e:82:80:12:74:d7:
                    77:a3:7d:cb:60:b2:b0:93:06:64:6f:50:6d:68:1c:
                    8e:26:12:87:14:d2:57:72:7c:f2:36:8e:24:ab:69:
                    5b:de:f7:53:93:8c:b2:b0:76:d9:8b:9d:d4:1d:fa:
                    28:a1:45:6b:05:b8:5a:04:de:0b:f4:b2:b9:ab:47:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B9:77:9B:C9:62:E7:57:B7:7D:1B:F5:59:52:E5:9D:98:68:EE:4E
            X509v3 Authority Key Identifier:
                keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:80:23:d3:25:a9:75:a7:50:d9:d6:7b:68:f4:f2:d6:83:c1:
         11:be:de:02:18:72:7c:fa:f9:27:d2:34:92:f5:d2:68:bf:ca:
         41:32:89:b7:45:dd:14:01:0b:24:4f:6d:3b:85:71:c6:9e:78:
         7c:9d:aa:81:ce:21:04:19:c7:2e:2d:1a:b0:73:f7:b6:88:20:
         ee:67:89:03:58:f0:2b:84:a7:00:bb:32:dc:9e:a7:c3:bc:9f:
         01:f7:da:4d:e4:30:eb:ae:fd:4c:9d:50:9c:da:ff:35:e4:54:
         3a:28:0a:d4:05:42:21:3e:88:e2:e4:3e:d2:8d:b5:88:f1:1e:
         fb:57:8c:1b:13:79:a1:ac:05:14:f5:6a:97:0a:85:56:3d:c8:
         cf:a1:b8:48:81:d7:61:8b:30:e2:10:05:a9:6b:85:ac:bd:a7:
         2c:66:ee:f2:bb:de:07:9a:58:bd:db:b9:93:32:d9:0d:3f:03:
         6b:e9:4f:94:8a:04:48:4d:8b:2a:2e:08:1b:67:35:4e:11:04:
         a0:b5:da:46:05:ff:3a:96:91:90:07:ec:dc:57:2d:49:fd:ab:
         a0:73:48:31:ec:a4:46:48:f6:ef:b6:d4:2a:db:b8:7b:9d:eb:
         34:2d:3d:aa:8c:b1:e3:38:66:8a:87:94:f5:20:40:7b:67:55:
         fe:fe:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----