Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File:                     QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier:          hkxBwd/WjlzLk1T8e5IVczlP4+X2L+qiRiAXUDoZ5PE=
Subject key identifier:   05:06:20:EA:C1:90:78:EF:1B:CD:DC:80:F1:DC:33:0E:68:EA:C2:2A
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer:       /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial:       01962F3D6A37E542E16DE822962E2C90316F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number:          06AF
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: VSm4cmaMUFuqJMf8woHzi3F683Vgs0ZvPu9Q5atAc3s=)
                          2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6a:37:e5:42:e1:6d:e8:22:96:2e:2c:90:31:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=050620eac19078ef1bcddc80f1dc330e68eac22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:56:49:bb:54:9e:df:a8:f1:25:61:da:09:
                    3c:35:5f:04:cd:7a:f5:4a:79:f0:f0:d3:e9:6c:33:
                    dd:bb:a5:0e:4a:d1:21:12:b0:ed:76:4a:f9:cc:67:
                    39:7d:08:f6:3f:83:9b:b3:cc:b5:ff:e8:e5:99:bd:
                    25:80:46:0e:ee:7f:00:92:fc:0d:83:be:40:a8:10:
                    85:9d:aa:32:16:51:53:27:7c:f8:b2:47:05:e3:b1:
                    24:5d:03:f5:d4:1a:f0:a6:f5:20:47:c0:47:5a:18:
                    5e:a0:50:c6:34:54:c2:39:20:a4:34:0a:8c:03:7e:
                    4d:55:54:56:d9:c7:21:48:cd:2d:ce:a4:1d:a8:e5:
                    d3:9b:d5:9b:ce:46:3e:5b:e4:69:5a:b7:64:3d:15:
                    05:fe:a3:10:41:6b:9d:48:d6:da:4b:93:cb:b4:89:
                    54:96:54:3e:0f:57:8e:cc:e9:02:cb:cc:e7:f3:ec:
                    c7:76:d6:cb:4d:21:30:77:3e:80:02:3d:31:58:72:
                    97:71:dc:03:0a:e4:c8:de:f0:0e:63:bb:d4:aa:62:
                    f7:36:3d:86:96:d3:2b:e1:4b:c2:ef:02:4b:8d:87:
                    32:b0:21:c6:1d:ab:04:df:13:63:c6:ef:34:98:2e:
                    b6:02:87:bd:87:b9:88:9d:d1:83:05:99:cf:21:30:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:06:20:EA:C1:90:78:EF:1B:CD:DC:80:F1:DC:33:0E:68:EA:C2:2A
            X509v3 Authority Key Identifier:
                keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:af:41:9e:c5:43:04:97:a1:12:95:09:27:d9:b4:d4:a7:08:
         a6:00:af:af:69:a3:1d:f4:a7:f9:e8:2b:3c:dd:6d:a9:74:23:
         51:ba:7c:3a:1f:2b:d8:bb:c9:29:85:18:43:c6:05:01:50:40:
         66:4d:a2:42:c4:21:28:38:5a:05:fd:59:1c:1b:cd:79:d5:ad:
         ae:8b:27:66:42:8b:86:32:23:d6:7d:ea:d2:5e:c1:6b:26:7b:
         66:7c:48:bb:c6:1e:6d:9b:8a:e6:1e:a0:2c:37:71:fd:d9:fb:
         0e:80:d8:10:2d:f6:e7:79:dc:19:08:a3:6a:9d:ed:45:0c:82:
         5f:e1:ad:d2:41:c2:f2:66:67:ea:4f:f9:f2:2d:0d:54:cf:57:
         62:fc:29:cc:3e:48:b3:d3:72:84:c9:df:77:33:fe:9c:a3:d0:
         e0:09:c1:17:e3:43:f8:b6:fd:0e:83:f8:6b:2f:ec:43:e8:14:
         52:29:85:67:30:8d:cf:20:f7:d8:a8:86:0b:75:8b:15:78:e9:
         56:a7:22:d7:74:c4:2f:5f:c7:b0:a4:53:58:21:98:dd:20:19:
         fd:75:6f:b4:be:fb:5e:fd:4f:fb:48:1f:46:00:2a:3e:22:a0:
         e5:df:cd:ef:81:42:d8:bb:7a:2c:39:b2:cc:6f:06:77:89:04:
         88:42:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----