Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          PUlz/JPWVdaN9mDeQ09MnAtCRzDfynCmSKDMDUhsKT0=
Subject key identifier:   CF:39:DA:BC:9C:36:87:38:AC:3F:AF:3A:21:01:A3:9C:B9:BC:B2:81
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       0195DFD8AF8FEECF5D68A11677AEE7EF1052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0890
Signing time:             Sat 29 Mar 2025 03:01:14 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:14 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:14 +0000
Files and hashes:         1: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
                          2: Mso8HCZYvubZwvzJB-sovDxI8mw.roa (hash: 5QSILlhvVsZeQGG8ZFj/oRE0YF6aKeUC8j5XzlKYPOQ=)
                          3: Wi63x1CJXlZGfNJJvYSEjYX3SS4.roa (hash: tSrW8yYQj/zhxzh9dR2YbQPqRj4MiI4gJVwxhewvr88=)
                          4: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
                          5: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
                          6: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: RTvc/wn/74K7Xygy/F36+vraRJoDCEAonGX8BNQYHeA=)
                          8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
                          9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:af:8f:ee:cf:5d:68:a1:16:77:ae:e7:ef:10:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Mar 29 03:01:14 2025 GMT
            Not After : Mar 30 03:01:14 2025 GMT
        Subject: CN=cf39dabc9c368738ac3faf3a2101a39cb9bcb281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:bf:4d:62:9a:b9:d3:40:0e:63:06:45:98:
                    ad:99:ea:ae:86:dc:53:92:15:8a:05:0f:73:90:66:
                    af:60:ab:ea:6b:9d:b7:d6:d3:36:1e:3e:79:95:90:
                    72:0c:ee:4e:b1:71:43:e4:da:2b:64:24:16:d4:92:
                    0e:cf:c3:c1:89:32:45:6e:5f:8b:a0:bc:f5:b0:8b:
                    fd:f4:06:ef:75:6d:32:8b:63:96:bb:3d:14:92:52:
                    88:c1:36:44:8e:54:cc:72:c4:15:f5:40:f0:8b:90:
                    ba:6a:1f:53:d5:55:e0:2e:fb:b3:77:81:bf:7d:40:
                    58:0d:93:c4:28:f8:4c:91:58:66:71:f5:7d:5e:49:
                    54:78:d3:86:31:cb:41:31:52:45:6e:89:14:7c:83:
                    24:b7:7f:43:ff:09:4e:18:c6:7f:5a:a0:28:a1:01:
                    e6:73:bd:3c:75:14:c5:33:d6:2e:f8:f5:1c:c1:45:
                    c5:eb:7d:42:d6:e1:3d:55:df:75:05:b4:b0:d9:30:
                    b3:ce:ec:ea:89:3f:af:97:e0:d4:85:94:e1:22:6a:
                    d9:36:0c:6e:59:5e:75:90:28:a1:3b:b3:fb:51:46:
                    f6:5d:4a:04:38:9a:ce:f4:d3:90:a1:42:31:12:53:
                    29:b8:a6:6d:3e:90:2a:87:7f:88:44:c1:07:66:05:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:DA:BC:9C:36:87:38:AC:3F:AF:3A:21:01:A3:9C:B9:BC:B2:81
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:8e:3c:13:db:d6:2e:d2:c8:2c:0a:05:bd:5b:36:58:7d:
         28:b6:5b:9d:6a:33:72:4d:c4:28:a2:71:b0:43:a3:5f:0b:ed:
         b5:bf:2d:c7:9a:ef:37:5d:14:af:86:80:92:43:3a:51:5b:8a:
         58:2c:fa:e9:e8:e0:07:a5:06:d4:49:7a:f6:fc:54:cc:84:d7:
         80:eb:33:cc:03:82:51:3e:0d:f2:67:de:14:cc:3b:97:e4:6a:
         15:12:dc:bb:79:07:50:a8:b2:8e:2f:86:1f:35:0a:bd:cc:7b:
         a9:42:72:c4:ed:b5:1f:7e:bb:cf:d8:b9:b8:9c:d6:f5:d0:97:
         87:50:08:25:17:d9:88:20:7c:29:21:fd:1d:8a:ec:1f:f6:53:
         bd:7d:79:0b:31:12:f1:8a:fa:36:77:c3:c2:8c:1b:ce:77:40:
         90:1d:5f:03:cb:4c:ac:c2:1d:5d:29:6e:0e:a7:c1:48:d5:1a:
         89:41:c0:54:62:19:84:a7:26:06:cb:da:53:50:f9:a9:13:d5:
         25:d2:b5:d4:15:f1:01:48:59:08:92:d9:8c:35:ef:8a:d5:9c:
         88:cb:a9:95:1c:b7:d0:74:c1:80:17:5c:d7:8f:93:a8:33:1b:
         80:37:0c:c7:7b:94:7c:47:fb:14:40:2d:71:1c:ce:ff:9e:1d:
         a0:d4:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----