Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
File:                     qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json)
Hash identifier:          YEY4cZvE6bYDrty+9j39qUU7KmAYyhdsKLd5UB3SRNE=
Subject key identifier:   C7:B3:9F:6C:C9:F5:56:B3:A2:F9:CE:E3:8F:75:25:13:4C:76:82:57
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       01962F3D9D9C67AAB4160B13DB0D4C12F455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
Manifest number:          0CDE
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=)
                          2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=)
                          3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=)
                          4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=)
                          5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=)
                          6: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=)
                          7: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=)
                          8: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=)
                          9: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=)
                          10: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=)
                          11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: miNVgqPd4CHiSFxURoIVCM7pBBHRdTJpKdPAoImsyfE=)
                          12: qLwaQHbpLKR-VOFMsqI1Dr-brZQ.roa (hash: zu206w/6uZIZGZL13CES5xmLYzoUTsD6JgpbCtCYgq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9d:9c:67:aa:b4:16:0b:13:db:0d:4c:12:f4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=c7b39f6cc9f556b3a2f9cee38f7525134c768257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:6d:69:df:68:1e:d5:ba:fb:d2:a5:e7:2c:
                    ce:2b:c1:ad:31:d0:c1:d2:dc:74:6d:51:35:72:2e:
                    a3:b8:bc:07:93:8b:e2:86:3c:95:84:11:2e:98:65:
                    85:15:80:af:fa:27:3e:6f:65:4d:7b:81:2f:f5:27:
                    32:c4:90:fe:f1:f3:8b:3f:83:57:ff:6f:55:fb:7f:
                    cb:b9:d4:96:75:64:3d:5c:b6:bf:c1:dd:07:76:e1:
                    5d:d6:d6:2b:24:a9:39:1f:f7:c1:73:7d:de:58:18:
                    e3:59:64:21:51:ec:30:02:34:3d:d7:aa:e9:2e:52:
                    19:ff:03:63:0a:e6:dd:fa:a9:27:eb:46:ac:84:6c:
                    a2:c2:36:45:0b:a0:46:a9:04:05:61:a3:36:80:ca:
                    3a:4d:85:69:71:dc:de:9e:7e:b3:6f:0e:66:25:0d:
                    25:e4:4f:ec:51:fb:b0:cb:9e:b9:37:8d:d4:61:3f:
                    c9:2e:19:7f:0f:3a:a2:13:eb:dd:da:5b:8a:50:d8:
                    bb:92:ac:dc:4e:0e:bb:cc:c4:17:5e:5d:69:2d:9d:
                    f0:3a:51:56:11:cd:63:e5:08:61:11:1e:0b:dd:be:
                    16:81:3e:f3:8f:d3:c6:46:d7:97:f6:a5:e6:ac:92:
                    bb:2b:f9:c1:d2:4a:4a:de:8d:fb:1d:7d:12:03:3d:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B3:9F:6C:C9:F5:56:B3:A2:F9:CE:E3:8F:75:25:13:4C:76:82:57
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:02:56:0b:f6:eb:27:77:f3:99:6f:27:66:5e:75:a3:67:
         91:83:18:f3:33:db:d9:47:a3:e1:14:4c:88:22:d6:b0:87:07:
         90:07:04:82:ed:16:ea:c8:7d:94:a0:88:db:7c:41:7a:75:77:
         bb:11:64:5d:67:8b:d5:2b:62:6a:79:5f:44:2d:41:4a:75:f3:
         d5:58:21:a4:d1:33:db:62:11:05:38:0f:c5:c9:4e:b9:bc:47:
         8c:48:68:e4:c2:19:bf:08:33:28:1c:4e:3a:55:3a:97:c2:81:
         61:9f:40:c3:79:73:b4:ee:27:e3:de:94:f0:c7:89:1f:f8:11:
         e6:e8:bb:61:0e:ad:ee:7b:b7:81:cc:40:ff:8d:18:4b:67:75:
         0c:d2:e1:0c:c6:b2:c6:1b:67:99:c5:d9:76:d1:fc:ff:bd:ad:
         5a:55:86:9b:7d:bd:7b:59:ad:d1:23:09:be:14:93:be:99:a9:
         c4:ba:6b:c5:91:38:55:f6:56:68:b3:e3:9e:5a:88:4c:4b:3a:
         ee:03:22:82:5b:a8:52:68:22:d1:65:fe:8f:9b:62:d4:d2:7b:
         31:b3:49:89:98:f2:bf:f9:fd:02:5b:a6:d9:b5:a2:9c:ed:f5:
         82:2e:25:ab:fa:15:02:18:24:ef:bf:95:95:14:0a:b4:c3:34:
         19:96:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----