Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File:                     Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier:          9nV5Z91rrh9L4+DLSy7K45C82H7Cx8k7seVd+nhTsuk=
Subject key identifier:   73:4A:F6:94:6F:16:AC:07:A8:71:97:4C:12:EC:DF:27:A1:43:A8:32
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer:       /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial:       01962ECFDADDC3C11E660CC0AD37EB99E165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number:          070A
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=)
                          2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: nSe3zfRq04BCGI4WA2JtKOoKNRVmb0qbCgFUzRjIWvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:da:dd:c3:c1:1e:66:0c:c0:ad:37:eb:99:e1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=734af6946f16ac07a871974c12ecdf27a143a832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:57:48:54:41:38:00:05:4e:de:38:be:5e:
                    f2:12:9d:0f:13:e2:29:89:0f:2e:0e:a4:e9:05:f2:
                    92:3f:d7:08:3a:35:8d:2b:9d:97:79:77:2d:df:a3:
                    ff:19:c1:75:8d:05:a2:62:56:b2:c1:18:60:bb:9a:
                    a6:32:c8:ba:36:96:08:19:ae:12:59:1c:5f:d7:f6:
                    3d:f1:2b:59:7d:58:12:3b:40:7d:39:d2:11:6f:9e:
                    f4:f7:bb:10:00:cd:5f:9c:15:53:a5:8b:59:6c:f1:
                    ea:29:86:24:33:0f:6b:8b:ac:c2:94:ac:78:0c:72:
                    12:ff:f0:3d:94:57:3c:2f:12:60:dd:e0:7a:e8:4f:
                    f5:88:6e:9c:c2:0d:ea:cb:ac:02:54:76:06:6c:24:
                    8c:f4:4f:5d:7f:da:d6:10:19:6c:92:26:f8:ed:1c:
                    0b:8d:50:05:c5:c1:4a:88:95:d5:4c:3f:9c:0c:47:
                    95:a2:48:a5:87:19:e8:8d:a7:dd:bc:9f:47:d7:f2:
                    72:30:a8:a9:fd:37:6e:e6:57:74:42:bf:94:55:31:
                    b1:0e:48:3f:28:02:12:f3:3d:18:47:09:47:ca:aa:
                    c2:bc:54:80:1b:bb:58:23:46:b5:64:50:2d:2e:30:
                    ab:7b:aa:6e:29:a8:e4:19:41:2d:8e:4a:d6:69:56:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:F6:94:6F:16:AC:07:A8:71:97:4C:12:EC:DF:27:A1:43:A8:32
            X509v3 Authority Key Identifier:
                keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:53:00:09:a5:c4:23:32:7f:54:24:cd:12:9a:59:03:db:
         09:f7:4b:6b:ce:5f:af:0f:eb:04:6a:a9:0a:cb:08:2e:b8:ac:
         16:e0:6c:21:35:f1:41:8e:07:a3:63:03:26:41:37:96:25:61:
         86:29:40:06:4a:2a:f3:05:e2:bf:93:45:5c:8e:ff:19:9c:aa:
         79:33:5f:a3:e0:b7:1f:d5:9b:66:ed:73:ef:4c:c1:85:4d:bb:
         ae:e7:c6:2f:44:cd:6a:43:02:f0:02:10:0e:76:6f:e1:9e:5b:
         14:d2:7f:b8:e6:fe:b7:18:45:19:2c:95:35:70:e2:b0:11:a3:
         92:f5:5c:53:fc:d5:87:b3:c2:df:87:3a:93:97:54:2b:27:44:
         84:34:31:b3:1d:4e:5a:37:d6:79:5b:10:73:58:81:83:e8:b7:
         c2:99:df:a5:83:2d:7d:4e:4c:2c:64:70:c4:dc:cb:3f:97:bb:
         2e:23:16:f8:1a:95:df:09:7b:c7:cb:bc:f7:35:e6:64:9a:25:
         35:41:a8:3a:ac:1d:69:55:07:c6:83:02:56:d0:ca:b2:17:91:
         7e:a6:81:31:7b:28:61:78:a2:e5:ee:a2:74:a9:0e:07:a0:4c:
         2f:df:ea:0c:7b:f1:7b:bc:69:cb:21:ee:c3:89:5a:f7:a8:e5:
         0e:de:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----