Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File:                     qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier:          lRHwo40BuSJfLMMA0/4uqnnFzAPAECViPiA0+zDcPMc=
Subject key identifier:   8B:9D:AB:45:4F:F6:AF:25:18:0C:E0:14:82:5B:75:87:E7:51:7A:F4
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer:       /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial:       01962ECF78C6022BFB231CF177844963EC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
                          2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: nQUmnhE+cZaBnvjMA2ipX0dYoyJXm6l3BEXwACtfPds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:78:c6:02:2b:fb:23:1c:f1:77:84:49:63:ec:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=8b9dab454ff6af25180ce014825b7587e7517af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:26:96:52:7b:8a:0d:67:2d:ce:3a:8b:4e:
                    ad:cf:bf:92:12:66:e2:e3:61:69:f3:2c:bd:8e:dd:
                    4b:4b:78:dc:3f:af:61:3f:1e:2c:be:a5:e7:10:48:
                    65:5d:5e:55:15:2d:9b:10:e7:4f:eb:d8:7a:cd:42:
                    c5:54:47:40:8a:8d:64:c1:ec:7d:8d:ac:49:2d:27:
                    2c:87:0d:f2:c4:c9:87:f3:94:73:d0:7b:ac:cf:7c:
                    4b:4b:2d:88:68:cd:78:ef:2d:4c:64:c3:56:35:71:
                    3e:ea:30:e0:00:cb:31:7e:55:18:1a:06:6d:1e:29:
                    74:1b:24:61:26:82:c7:9c:16:bc:cb:7e:51:a0:af:
                    d1:f7:dc:b7:7f:83:f2:b9:b0:5c:eb:76:d0:6c:20:
                    f9:71:8b:5c:86:bc:1a:cb:40:98:d0:0c:f7:e0:ad:
                    1e:30:70:e4:ae:fe:ce:53:e5:e0:68:0a:36:71:08:
                    0b:eb:f6:52:3d:a7:28:1d:89:48:35:17:28:9b:4f:
                    31:73:6b:a7:77:4b:db:30:0c:3a:cb:d5:01:bf:04:
                    64:40:ea:13:2c:98:df:7f:6f:9b:85:01:c5:99:1c:
                    4b:c4:57:30:b5:d2:27:fa:62:1a:84:08:1d:7f:dc:
                    11:20:b1:51:0c:e9:a6:b1:50:7a:8d:b2:95:6b:95:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9D:AB:45:4F:F6:AF:25:18:0C:E0:14:82:5B:75:87:E7:51:7A:F4
            X509v3 Authority Key Identifier:
                keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c7:0d:0b:6d:b8:7e:2e:bb:68:80:b4:5a:3e:15:ff:98:b2:
         75:ca:71:2c:e3:4f:02:a8:9f:12:59:fb:1a:c2:a9:8d:a8:72:
         25:f7:1f:a6:84:a0:05:a4:04:47:92:2a:2e:7a:96:2d:80:d5:
         7f:68:f1:ca:f4:ab:79:5e:18:a4:4a:a0:24:f4:a1:f2:1a:26:
         7b:0d:52:04:7e:2f:4d:69:f3:3c:45:fb:74:8b:73:17:99:9a:
         fc:33:64:f8:87:e8:dc:fb:61:ce:75:51:72:96:c9:48:f4:f0:
         d5:6c:5e:7c:ee:cf:30:59:27:ba:e7:d7:4e:a0:b8:94:7f:0e:
         67:b4:b4:08:6c:12:18:48:16:79:b7:f3:65:8b:0e:22:a1:9d:
         f1:a8:d1:13:84:43:8e:9a:3b:e9:47:f5:9e:b8:03:0f:20:2b:
         e0:6e:49:9e:b6:0c:eb:5e:ca:b1:e2:d6:89:aa:7c:fa:3e:5c:
         45:cd:4a:7c:2f:63:3c:db:b7:9b:5b:49:25:81:14:b3:fa:1b:
         20:d5:ca:ce:b6:7e:27:a9:99:ac:1e:c0:e2:6a:45:26:6c:84:
         52:d8:20:ec:4c:34:5e:8e:24:cc:8d:74:59:b6:c1:db:5d:b4:
         52:f2:ef:93:c1:c6:70:45:50:59:4a:1c:62:2e:36:69:af:9d:
         04:47:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----