Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft
File:                     QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft (raw, json)
Hash identifier:          XDK4okFgLoSTmVc8bM0GQpnDdQO/vxqfQ6SOYR7A/eQ=
Subject key identifier:   EF:CB:57:C3:14:A2:36:AB:45:14:8F:CA:28:E7:F4:AC:46:CF:B1:F8
Authority key identifier: 41:2D:AD:82:06:99:F1:53:A3:1A:66:ED:67:83:A1:DE:4E:0F:8C:F5
Certificate issuer:       /CN=412dad820699f153a31a66ed6783a1de4e0f8cf5
Certificate serial:       01962E990143C57BDC343B73E7645FE0886D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft
Manifest number:          0AD6
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.crl (hash: rNViEieY01qesPPmHRvq6BQa6L1Q4JPYyfto3GxwIts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:43:c5:7b:dc:34:3b:73:e7:64:5f:e0:88:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412dad820699f153a31a66ed6783a1de4e0f8cf5
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=efcb57c314a236ab45148fca28e7f4ac46cfb1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:54:d4:c0:4d:50:f0:03:52:20:ab:a9:7b:
                    54:7b:72:87:6f:98:2f:ee:87:1d:99:98:53:3e:57:
                    27:08:ef:eb:bf:3a:7e:11:a7:f8:1f:28:63:15:a2:
                    39:40:b0:5a:87:40:32:e8:57:9c:54:59:66:2c:f1:
                    03:44:9d:d9:a5:6b:18:a7:6b:56:f2:e8:c5:5f:74:
                    e2:cd:21:73:bc:02:95:8a:e1:35:60:75:e0:42:e6:
                    a2:f6:f4:b2:c4:cb:01:fd:be:27:ab:b7:90:42:03:
                    ec:42:d4:9b:59:77:48:62:8b:2a:d2:bd:a7:a7:38:
                    63:cf:57:b8:e0:cf:6a:3b:5a:7f:c8:db:4f:e2:2b:
                    31:92:cc:c5:0a:e1:e7:df:25:70:85:cd:3f:d6:46:
                    1f:4e:98:ea:bb:ad:5b:b4:76:b7:95:22:db:ef:81:
                    5b:f7:21:22:eb:59:2e:88:4f:78:09:17:9b:16:75:
                    4e:a9:11:f8:78:cb:02:fa:f0:03:5a:36:dd:69:39:
                    1a:71:c0:2e:55:bd:e9:34:e7:08:8f:0e:1a:20:35:
                    d9:38:c0:d9:69:85:dd:d5:85:d2:5e:82:84:40:98:
                    43:48:90:f6:ee:b6:3a:71:1d:ec:ce:32:a5:17:82:
                    e8:d4:4d:34:d6:83:3d:bb:3a:43:b3:13:da:dd:07:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:57:C3:14:A2:36:AB:45:14:8F:CA:28:E7:F4:AC:46:CF:B1:F8
            X509v3 Authority Key Identifier:
                keyid:41:2D:AD:82:06:99:F1:53:A3:1A:66:ED:67:83:A1:DE:4E:0F:8C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:68:21:c7:2c:7a:bb:e0:c2:4a:32:24:13:0f:af:81:79:6d:
         90:64:97:0b:32:61:ca:8f:b3:b9:b1:5c:6d:9c:ad:3c:a1:c5:
         6f:6e:ca:4e:9c:4b:61:99:28:a5:2c:c7:7e:7c:4e:29:95:7c:
         50:b8:69:ee:53:cc:9c:7d:2b:62:39:5f:bc:c7:80:c9:f6:9b:
         19:40:d0:f5:c5:e0:39:bf:7a:ee:f0:3c:51:74:48:46:28:95:
         f1:46:80:a2:f4:18:8c:1a:e1:78:87:92:fe:f8:be:b9:8b:35:
         46:4c:8f:af:74:f1:65:e0:37:be:ec:52:f2:22:26:5d:c8:d1:
         be:44:62:57:28:cd:e4:1e:86:ea:63:c4:a4:84:85:6f:c9:1d:
         71:66:e6:ae:2a:d6:20:e6:f6:56:2e:c6:9f:c5:60:64:71:e3:
         c8:80:0e:62:c5:96:68:7c:bf:21:a0:b3:53:eb:b2:50:30:86:
         bf:10:39:35:71:33:a4:85:13:87:01:70:7c:f3:5e:db:63:b2:
         8e:04:b2:a8:78:18:2b:ed:11:62:96:fb:cf:5f:4a:09:17:37:
         04:30:cb:ac:b8:9e:67:d9:a6:50:2f:31:31:a8:3d:4c:e6:06:
         b4:72:ea:5b:21:26:e2:9f:27:a7:a2:d5:f2:9a:e5:98:d5:4b:
         7d:3c:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----