Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File:                     qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier:          cyK3P2qyMCYQHgUI7vk+jVCOSn1pM5t4gqZEE7wD4io=
Subject key identifier:   49:B2:9D:FD:28:BD:D0:0D:E3:32:E7:5A:91:06:EF:FF:20:5D:F7:6A
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer:       /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial:       01962FAB2EB6E2AD3936CF2F31B1DC4C4312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
                          2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: pPHw52O+75OKUdsjV2c8EmRyL0UfaFSJUeZfZnIl5nE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:b6:e2:ad:39:36:cf:2f:31:b1:dc:4c:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=49b29dfd28bdd00de332e75a9106efff205df76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:82:2b:9d:7b:7e:5b:c5:7b:ca:01:56:43:
                    cd:e2:f7:d3:fd:42:6d:f9:0b:50:64:cc:b6:c5:30:
                    07:8b:a1:d2:6f:bd:46:a6:7b:d0:82:44:86:0b:82:
                    e4:00:b4:9f:e6:0d:51:09:0d:16:4b:42:79:aa:99:
                    8b:e1:37:4e:ec:4a:fa:8d:88:40:06:63:33:5a:01:
                    bd:2e:01:f7:b0:6a:f6:b5:c1:75:78:b3:a9:e3:38:
                    70:b4:98:c8:be:c9:2f:00:fe:7a:e6:de:60:46:8d:
                    a4:d4:06:5e:eb:21:84:c7:af:e7:ca:7c:b3:65:d2:
                    ea:3c:47:e3:0f:a1:3c:b4:a8:85:d7:bb:7f:a5:a6:
                    56:af:75:94:c2:25:03:76:61:0a:db:df:5e:48:73:
                    08:11:fe:01:e0:96:ce:53:36:38:8d:96:ff:52:3a:
                    fc:85:7f:f1:ed:8f:f5:94:af:29:f9:57:3a:f7:b0:
                    d4:9f:ef:6b:7d:98:e5:67:cb:54:15:ef:1b:36:a4:
                    97:c3:ba:f7:30:70:ac:36:3d:d5:ae:bb:eb:fe:c4:
                    22:07:d8:ef:c5:4a:cb:f1:65:73:89:1a:d5:b4:6c:
                    40:1a:fe:5b:15:8f:3e:11:f8:6f:02:43:1f:34:e2:
                    69:db:6c:e0:9e:a5:8e:06:7a:05:4e:4f:5a:52:fb:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B2:9D:FD:28:BD:D0:0D:E3:32:E7:5A:91:06:EF:FF:20:5D:F7:6A
            X509v3 Authority Key Identifier:
                keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a0:0e:ce:df:c5:94:8b:09:6c:bb:c2:9b:da:bc:f4:d1:2c:
         88:2b:bd:ae:64:c7:d7:bd:91:7d:a9:89:69:51:5f:ef:28:89:
         1e:3f:b8:60:b1:4d:5a:8c:f2:d0:15:f5:0e:45:de:af:9a:1b:
         2c:ff:11:f0:e1:7b:38:a6:ec:88:df:31:9e:08:a7:25:9e:f1:
         b0:1e:91:0a:0f:9c:de:ea:b0:96:6d:a5:4e:fd:39:a5:04:1f:
         1d:47:b5:f9:5d:37:ae:45:67:aa:0c:c8:18:04:02:73:ea:75:
         02:40:23:c6:3e:95:63:68:30:c5:d8:a1:50:ad:73:e2:e9:79:
         4d:37:e4:16:e4:6e:70:ed:0b:cf:32:14:68:2d:47:9c:e9:07:
         89:60:41:b4:c3:2d:ed:d3:c8:36:9d:1a:0b:69:d0:31:6b:f4:
         30:99:58:fe:af:6d:63:ff:b5:81:15:75:47:e7:c0:0f:bd:86:
         8a:d4:74:b2:53:92:37:5e:b7:77:b3:d6:2f:80:40:f5:82:09:
         dd:3f:27:fa:d8:95:e7:57:20:e1:6d:aa:7c:c1:fb:48:a6:a0:
         90:ac:f7:c2:bb:88:26:9e:55:11:75:e2:2f:18:d5:73:01:3f:
         98:32:4d:87:c4:58:58:6a:d5:d9:55:d8:ab:27:89:ca:ca:c5:
         06:b7:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----