Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
File:                     QG8BSivHauBObTBNBqrL_I6F1RQ.mft (raw, json)
Hash identifier:          QIosFiBsAwpv5J8gAyfjUA7In6s9ipzW6lvxGoH/xXQ=
Subject key identifier:   2D:43:D9:A6:12:08:09:8D:F3:77:54:4A:61:64:D1:18:28:65:16:A4
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Certificate issuer:       /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial:       01944449259239A4D89836F00B00ECD674DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
Manifest number:          11E1
Signing time:             Wed 08 Jan 2025 05:00:31 +0000
Manifest this update:     Wed 08 Jan 2025 05:00:31 +0000
Manifest next update:     Thu 09 Jan 2025 05:00:31 +0000
Files and hashes:         1: Po5VOUisuy6Ulq1SsoUJ1fWKvQA.roa (hash: qtNwgQVEmJYMBBBL8VjznISb2fKJIvaD+VCUQWPp7rI=)
                          2: QG8BSivHauBObTBNBqrL_I6F1RQ.crl (hash: 6R6Lsh6jEsw/6+VL2va0t4SgBtZg/eQcSg/vjjHuI9o=)
                          3: RmKCpldDj9gxKffsbiNvZSE7-UA.roa (hash: iDmHhF/9qHUEZvvKH38pZKwG3I+mnXGsdU7Q5ORUe68=)
                          4: Vo5ZMZ84hJHQfcbGTokQLijkpYo.roa (hash: 64QiZd8J7X/WsxeA4F9CRovZCf4auMjg/bXOi9bqgBw=)
                          5: f7iYx6J9qQRVlLpAz-hY2T7oU7s.roa (hash: 7zo5pWrqydP9MLZg4sLTBJUU+28NvFqFkEh4byNC2/g=)
                          6: vY6-PZtgV1pXAS2FXL2hIb4TwXc.roa (hash: jw/NcQ3xtodg7LuogHRIHUBjgep3SFnUF4bVow6tSsU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:44:49:25:92:39:a4:d8:98:36:f0:0b:00:ec:d6:74:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
        Validity
            Not Before: Jan  8 05:00:31 2025 GMT
            Not After : Jan  9 05:00:31 2025 GMT
        Subject: CN=2d43d9a61208098df377544a6164d118286516a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:be:b3:ce:52:89:57:8f:8d:79:63:e9:c2:
                    3b:91:e5:70:e2:ee:8f:77:53:65:c2:6c:89:8f:fc:
                    04:79:6e:cc:68:7c:e3:c3:60:9a:38:8a:75:43:34:
                    d7:0d:b7:77:6d:07:aa:19:c2:02:5c:5f:00:7c:c6:
                    55:03:3f:51:d0:53:a4:0a:4a:8e:cb:fe:93:bd:c6:
                    07:2b:1e:3f:9f:88:56:c9:9d:8b:2c:47:bd:c5:e3:
                    3e:a7:e7:dc:fb:b0:fd:41:c2:9d:a9:b9:79:2f:5c:
                    e3:30:15:a4:2c:b7:84:e8:93:a7:5f:96:09:c5:5f:
                    01:d7:71:fb:c2:39:46:5b:48:64:9c:f9:fc:9c:02:
                    51:c1:2e:66:b0:b5:39:eb:a3:bd:9f:34:ae:21:e5:
                    a9:ac:a1:97:b6:b1:c6:c4:c3:45:96:63:94:5e:8b:
                    9d:da:38:1e:2a:e9:1e:99:32:d5:86:fb:6c:a1:53:
                    d0:bc:ea:7a:b9:84:05:13:6b:19:6a:b5:81:d6:2b:
                    ae:3d:6e:2d:15:91:50:18:d3:50:ae:bc:41:aa:87:
                    28:6e:95:fd:e8:b5:b0:94:81:c0:64:bb:d9:0d:5a:
                    91:17:83:8d:e3:43:23:e4:09:8f:33:04:35:e2:5a:
                    01:80:79:62:83:57:ab:46:3b:08:1c:0a:3f:de:0a:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:D9:A6:12:08:09:8D:F3:77:54:4A:61:64:D1:18:28:65:16:A4
            X509v3 Authority Key Identifier:
                keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:8c:ce:2c:fd:a8:8b:c9:00:e0:23:aa:f5:b7:49:00:d6:
         4b:7c:f0:f4:e7:83:f5:d0:6c:30:1a:74:f8:3c:d5:f4:fe:87:
         4b:3e:98:81:af:f2:b0:ea:25:df:85:fc:ae:36:d9:fe:4a:f5:
         b0:3c:e8:c2:83:45:6e:a6:0a:19:15:c8:ed:aa:23:18:1f:52:
         a5:7c:44:db:3e:0e:d9:64:fb:23:b7:f2:cd:11:56:bb:22:5d:
         40:cf:d8:4d:d1:14:99:28:7a:5a:51:9a:65:ad:c3:2d:81:b4:
         bf:16:b9:0c:8c:cc:e8:12:51:33:8d:09:6d:a6:df:fc:5e:c8:
         d0:83:6b:4b:4f:b4:9a:a5:6c:93:5e:8c:d9:c4:61:14:42:5e:
         0f:f3:85:fe:d3:e8:77:ec:59:a2:69:a6:9d:11:e5:ce:7f:3e:
         03:a2:57:44:b6:a8:8b:bd:b1:9b:22:34:0e:ff:9b:2b:bf:01:
         9c:de:8f:af:e0:ea:d2:6d:f1:2e:fd:8b:31:a5:e1:41:54:35:
         c8:9c:16:7d:b2:b8:2e:73:13:5a:80:7d:c2:2d:48:1b:1b:e7:
         f5:f3:65:56:76:4e:21:f1:ab:bc:41:03:be:63:87:b6:66:8a:
         b8:e6:84:57:54:e3:73:1c:06:fb:53:46:e0:b0:68:29:6c:78:
         34:63:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----