Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          SKrcshxXNA+BpbaQ5r8j9ohZwY2oPGvRM4HoP85oqM4=
Subject key identifier:   93:42:ED:13:34:57:E0:3C:85:6A:FA:60:18:67:6E:4F:18:E3:AB:9C
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       01962E2ADAA6E1086C494E9525D8BEB88E9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
                          2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
                          3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: tjfIKlwVFYSyiCU9sfdojbEoFluuk7zML/Ay+JBtYc4=)
                          4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
                          5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
                          6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:da:a6:e1:08:6c:49:4e:95:25:d8:be:b8:8e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=9342ed133457e03c856afa6018676e4f18e3ab9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:83:ff:91:67:9f:d7:25:9f:c5:69:6c:8d:
                    f7:1b:07:b1:d7:7a:f1:54:67:f7:e8:f0:9e:6b:be:
                    4c:54:bb:4c:80:0d:61:df:ad:b0:17:a7:39:bd:13:
                    e9:ec:4f:7c:b0:cf:ce:19:8b:95:aa:b9:68:de:8d:
                    4c:de:11:c0:ee:12:dd:e9:4e:68:80:3c:55:30:73:
                    7d:73:fe:9f:43:90:a1:a2:2e:25:98:d2:c3:73:2a:
                    ec:7b:2e:b3:e3:7e:09:39:21:8a:3a:8d:22:76:21:
                    3f:b0:5c:e2:52:eb:31:1c:b8:7a:5b:a0:7d:db:8d:
                    24:8b:fd:7a:c1:d9:f6:a5:84:de:d4:55:0b:4d:1e:
                    6b:f0:ef:9a:24:0b:32:95:9e:fb:ae:ad:14:dc:4f:
                    2c:d5:49:7d:a6:a3:cb:34:bf:01:f4:58:98:b9:c3:
                    c8:cc:50:db:92:f4:42:76:d3:2b:78:4d:ab:db:2d:
                    fd:45:91:86:5b:c4:0d:d8:01:b0:a9:99:27:5f:b4:
                    98:60:7e:40:fb:5c:a6:53:17:79:12:b1:36:be:72:
                    76:5a:0a:e2:65:9a:33:12:a2:ae:e1:fc:2c:33:ab:
                    77:6a:d4:4e:f8:ee:d3:21:e2:45:ba:69:47:57:ad:
                    49:0a:f0:6e:3c:e2:57:0c:34:b6:bb:7d:23:0c:fe:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:42:ED:13:34:57:E0:3C:85:6A:FA:60:18:67:6E:4F:18:E3:AB:9C
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:00:be:8e:02:75:bb:51:8d:2f:f0:33:8f:ec:c1:85:1a:
         11:04:d8:08:c0:67:b6:b5:ac:a1:90:2f:5b:1e:a7:92:5c:4a:
         68:de:5b:87:4b:5e:34:37:7c:b1:1b:d7:36:37:1f:5b:d0:61:
         fd:10:b9:16:4b:df:b8:ff:3e:3e:34:c0:b6:bd:31:25:8d:3f:
         e9:91:eb:c9:ef:09:2c:63:ad:54:3f:c3:45:7a:04:91:48:8d:
         83:0c:a5:c9:42:ef:a8:d1:df:1c:f9:ae:65:d8:9d:41:0c:a3:
         95:6e:f7:89:8e:58:07:1b:ab:50:96:fa:e6:7f:97:5c:1d:f2:
         e8:b7:ec:01:f9:44:7f:01:b4:6d:97:05:0e:cb:f7:7f:6b:a1:
         c7:3a:06:5b:06:ff:cb:99:b0:bb:8d:5b:d3:09:39:c1:11:a6:
         27:f0:0c:e7:ff:5f:5f:28:db:45:ae:5c:2a:d0:5d:90:7c:c5:
         dd:83:02:ad:3e:ad:6b:f4:5a:e6:85:9f:8b:6b:28:db:64:02:
         48:e0:17:03:0d:09:d0:16:32:68:50:ec:0d:29:74:ff:eb:a1:
         b9:12:e8:9c:ff:f3:9e:48:73:9b:7a:07:43:71:45:13:84:cf:
         70:bc:75:57:02:ff:06:71:f9:a0:cb:8d:bf:47:25:33:99:bb:
         b6:06:d3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----