Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File:                     kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier:          vF4zq9r7LMTHjGZchOvIiKA9TrxQDLP4A6DmBzmjViI=
Subject key identifier:   48:7C:1D:43:AF:21:D5:BF:B0:5C:D6:48:0F:19:37:09:41:2B:02:12
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer:       /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial:       01962DF3F1E9681A0E99F3A46217124800A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: Q5x-oLuKsAX8G6VHtW5DmYmMvBo.roa (hash: Yo25vViOdvC6dn3PtfxGUX7ghUL2FSb11Ef7j26sFsA=)
                          2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: 7On/SRwh42/73wYj4y8EN9BHgZhgcNv8CZgzoDRPWdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:e9:68:1a:0e:99:f3:a4:62:17:12:48:00:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=487c1d43af21d5bfb05cd6480f193709412b0212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:07:64:60:b3:04:b5:51:ec:e8:a8:b9:c3:
                    6e:22:c4:de:f4:6b:30:a8:e4:64:a3:7b:14:c8:d6:
                    03:be:5b:e1:22:2e:62:bb:b1:39:2b:43:c6:c4:a8:
                    3f:0d:85:b5:88:ad:62:69:82:5c:32:ed:db:8d:5e:
                    0a:1f:7e:b8:48:4d:95:b4:a4:92:cb:e7:5e:da:f7:
                    cc:eb:33:24:19:13:4a:b5:d6:bf:34:ee:0b:ae:03:
                    b8:dd:0d:93:1e:9d:0d:cc:1b:11:53:87:4c:ca:e6:
                    cd:f2:cb:71:66:94:b0:c0:2f:df:02:34:77:e1:79:
                    9d:a7:ad:f8:08:d3:36:0e:79:38:3c:e0:d0:d6:03:
                    37:79:b7:c9:92:13:27:98:05:96:f3:dd:49:d8:5d:
                    f4:02:02:13:f2:f3:6f:da:d6:bf:38:93:b3:ea:12:
                    46:d7:47:ec:dc:04:f1:13:df:a0:17:82:1a:bc:02:
                    6d:ff:0d:9f:f2:c8:23:46:c9:17:c9:1e:95:bd:b6:
                    2c:9e:2b:05:15:53:55:da:db:8c:2e:5b:4c:1b:d0:
                    bf:57:9c:51:7a:d2:89:a9:72:cb:af:66:b6:61:ab:
                    00:2b:63:7c:3f:96:43:2c:c6:18:04:3d:0d:0b:95:
                    80:3b:87:3a:a4:ae:24:fb:bd:6d:59:6c:db:9f:8b:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:1D:43:AF:21:D5:BF:B0:5C:D6:48:0F:19:37:09:41:2B:02:12
            X509v3 Authority Key Identifier:
                keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:46:e8:6e:fb:48:db:dc:3e:b4:6f:f7:ae:1c:5a:e5:44:1d:
         75:40:5f:75:53:63:bb:96:72:9f:cf:4c:39:3e:6d:cb:fd:87:
         bb:43:e0:ce:70:4d:27:d2:a1:a6:fd:89:09:39:9b:a9:47:43:
         7b:b8:36:52:b7:78:e6:70:3a:48:d3:5a:b6:52:11:6d:bb:bc:
         5d:7e:1f:13:e5:bb:d1:62:cd:71:46:75:db:17:82:d4:59:9b:
         02:c9:cd:5d:46:1b:b2:e8:9f:03:a9:0e:cf:5c:50:3d:81:c5:
         e9:6b:ab:30:b0:06:be:7d:7b:0e:4d:f2:cf:47:14:b2:6d:80:
         c7:29:8a:c9:19:93:eb:94:e7:86:db:78:c8:bf:e2:cf:ea:75:
         dd:ac:35:50:4c:4f:5b:58:47:ce:bf:ef:e5:e4:57:86:c9:76:
         c9:da:a1:5d:ae:a2:55:54:78:51:a2:93:b5:19:00:78:9a:96:
         94:b7:d8:7c:25:1d:99:ae:f3:d2:39:6b:77:14:c7:fa:86:9e:
         b3:bb:6f:e3:be:6b:5f:b9:25:0c:f3:7e:c3:d6:29:0e:ec:da:
         e6:f5:9e:63:43:31:48:af:db:36:22:50:64:7e:3c:7d:65:d8:
         45:cc:89:95:64:47:21:e6:c6:66:3b:34:22:78:49:12:ae:62:
         47:61:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----