Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File:                     qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier:          7r0hbtySdPIXBMZ4bt3QGwQ/Pom8FSheP1SGvYSAzHw=
Subject key identifier:   07:D4:30:AA:C8:5A:CD:7D:DF:DF:A9:57:76:BA:1D:25:2D:22:28:8F
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer:       /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial:       01962E61C115702910A86B8FA2BA71D72436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number:          062D
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
                          2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: 5FsI1ElxkWojtxzDOVhSPTtO4kYUGbMV60b6UnHNwJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c1:15:70:29:10:a8:6b:8f:a2:ba:71:d7:24:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=07d430aac85acd7ddfdfa95776ba1d252d22288f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:9d:49:95:20:cd:a9:b9:fc:08:aa:c4:fd:
                    57:6a:85:0a:75:4b:1b:81:11:cd:96:53:3c:6d:f3:
                    13:87:24:e3:a7:82:f2:15:cc:b4:13:e7:08:cc:42:
                    18:fc:90:3a:41:e0:00:0f:e4:fc:06:80:6a:c8:03:
                    7a:fb:ad:12:8e:f7:07:3c:e8:97:b6:24:34:a1:bd:
                    27:8c:e1:b0:9a:96:9e:2c:c0:25:0a:09:aa:ea:1b:
                    43:31:43:46:bd:1f:ea:96:60:fc:6b:42:74:63:eb:
                    46:41:1f:6b:86:96:1e:30:49:b8:f0:d6:3d:e7:df:
                    2d:a2:13:e4:6d:6e:f3:23:c9:65:97:a8:79:7e:22:
                    3d:d0:bd:ff:90:ed:1f:4e:f0:92:6f:63:8e:05:c6:
                    c9:86:74:dc:24:40:1b:be:bf:ba:ea:17:98:7d:1f:
                    8e:02:bc:21:1b:3e:fa:11:be:60:c9:e0:79:14:68:
                    24:62:c8:a6:f3:f7:9b:ea:62:12:69:e9:33:54:69:
                    51:fa:5d:5b:a0:40:0a:75:bf:c0:16:36:be:3d:2d:
                    9d:c6:fb:34:36:e4:d8:e4:75:b9:71:47:4a:e4:78:
                    39:25:9f:aa:9c:d2:bf:de:87:2c:fe:53:8f:b2:72:
                    1d:48:ba:ee:d0:aa:3b:72:ac:4b:8a:5e:06:ba:71:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:30:AA:C8:5A:CD:7D:DF:DF:A9:57:76:BA:1D:25:2D:22:28:8F
            X509v3 Authority Key Identifier:
                keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:03:dd:23:90:46:e4:55:32:9d:50:b0:69:03:5e:ce:10:
         ea:2f:28:a1:5a:e8:b9:22:75:b2:1d:f5:79:7e:26:41:a6:4d:
         e4:38:f4:44:60:94:d1:4a:27:9d:f9:c9:ce:44:fc:73:dc:8c:
         03:a5:81:2a:51:f2:e3:c9:bd:e5:8b:96:d1:5f:21:6e:87:c8:
         a9:32:97:d8:38:ee:10:77:aa:a0:af:1c:df:44:47:aa:ae:9b:
         93:69:01:bf:81:9a:cb:a4:41:36:ff:39:79:39:5b:9b:98:85:
         1f:98:d4:fa:75:f2:76:2b:43:f6:a0:9e:80:74:9b:60:6f:51:
         82:b9:98:76:31:6f:13:5c:75:90:27:52:b7:1b:0c:98:85:2d:
         1f:2e:4b:fa:88:dc:66:2b:b3:39:c6:fc:20:20:1c:df:03:b5:
         8c:87:04:af:c3:ff:10:80:e1:99:81:c8:f4:bd:d6:14:c1:11:
         d4:65:7f:ec:5b:87:09:6e:c3:f9:84:c2:70:3c:f4:ca:d5:75:
         05:45:4e:9a:6b:c4:a3:c2:8b:71:8e:dd:53:a9:9d:81:dc:9a:
         0d:dc:f4:ae:9b:e6:59:b8:3d:21:09:a0:37:57:87:cb:ba:6d:
         3e:44:f5:84:d4:66:68:a5:20:29:fe:6e:4f:a2:52:c2:31:65:
         f6:c3:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----