Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File:                     Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier:          M+CO+avRdYINdm3e/0/0cP4Ll7LXPAmGQtsTOgl/4Js=
Subject key identifier:   04:09:D1:DA:39:E8:C9:F6:EB:CA:2A:D4:02:1D:66:C3:7C:54:00:3B
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer:       /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial:       01962F7447941F99D2772DA37C34DEC81AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number:          1189
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: /i+zddkgn73cgReop7c3a+lxWfrwRW9S97coKLfTSko=)
                          2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:47:94:1f:99:d2:77:2d:a3:7c:34:de:c8:1a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=0409d1da39e8c9f6ebca2ad4021d66c37c54003b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:01:67:f5:56:89:27:45:12:dd:5c:2c:7d:
                    09:2e:51:df:7f:a2:49:94:d9:92:52:9d:69:d6:64:
                    59:72:58:e9:6c:f2:8c:d7:1a:5e:a9:c0:85:fd:02:
                    c8:c9:57:5f:08:7e:2a:0f:e6:0c:d7:50:8c:1f:97:
                    05:4d:39:4e:72:7c:65:ac:7f:4c:3a:6d:1b:02:a0:
                    18:fb:38:6a:2c:43:25:a6:fa:1f:8a:77:18:08:d7:
                    7a:57:e0:7f:ee:eb:ca:28:bc:9e:3c:55:2c:82:0c:
                    d7:33:24:e0:ac:f2:50:b5:26:c5:70:63:e7:9f:0b:
                    e0:38:99:34:6f:79:ee:b5:7d:19:fd:bb:fe:39:74:
                    cc:67:94:db:7a:4a:41:90:28:13:42:ed:e5:d2:c6:
                    cc:1a:84:7e:ce:c1:0f:4e:55:6f:79:ef:e6:e6:b4:
                    e1:13:76:da:e3:a5:8f:f5:c3:42:f2:cd:93:b1:75:
                    ec:1b:24:d0:b3:c4:b5:2e:32:44:82:ea:01:5d:aa:
                    5c:c3:1b:a3:b0:c1:db:0a:7c:c6:22:e3:d1:33:8c:
                    32:76:e8:4d:e7:f3:44:23:b0:3b:70:67:a6:22:3e:
                    48:e4:12:f0:3a:0e:3c:b7:44:b9:10:f8:02:27:db:
                    52:6e:62:f2:aa:c3:e9:05:ee:32:fb:57:90:4b:9f:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:09:D1:DA:39:E8:C9:F6:EB:CA:2A:D4:02:1D:66:C3:7C:54:00:3B
            X509v3 Authority Key Identifier:
                keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:0c:cd:4f:cb:95:75:7f:57:39:f2:95:bd:7f:f9:16:71:
         ad:dc:d4:94:21:77:b2:ae:cd:34:e4:96:a4:1d:95:70:a1:ef:
         69:31:2b:22:62:21:1e:7c:60:0f:41:8a:09:4c:10:18:4a:ee:
         ca:8f:08:61:22:34:da:af:1d:63:ce:38:07:08:2f:f0:20:7e:
         68:24:78:24:48:0c:fd:58:e4:7d:eb:1c:9c:07:13:0f:9a:38:
         a3:2f:b5:ca:3e:8e:d4:e1:7e:e2:cd:5e:df:2e:5a:ce:17:f0:
         28:73:2f:2e:bb:2a:4e:16:d5:c2:51:48:06:bf:f4:69:bb:7c:
         6c:7c:24:19:3f:8d:20:6b:80:96:43:37:51:ed:e6:6a:d7:b0:
         77:0c:94:0b:02:a2:4f:c5:8b:9e:99:49:bb:7e:29:6b:dc:9e:
         17:7f:3d:97:50:65:76:d3:21:d0:08:82:81:27:cd:8a:89:84:
         03:7d:c9:a9:74:53:cb:79:b3:af:87:15:4d:23:22:19:e4:e3:
         39:f7:5c:9f:82:92:d1:f8:67:6c:b3:0e:37:a5:eb:45:55:a5:
         97:d0:54:68:c3:63:a6:d9:f9:cb:b9:f7:11:79:b9:95:23:52:
         cf:21:ba:e5:8c:27:c3:09:60:ff:33:44:30:94:bd:ad:5d:37:
         ca:8d:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----