Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File:                     qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier:          4O/dlmbNw/zCH/+DvfgFvTVQm2zY8RH1EPuKuV6qYgs=
Subject key identifier:   9C:29:4C:E1:02:06:36:CF:EE:AC:A8:8F:7C:DB:32:9C:E9:C8:39:C0
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer:       /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial:       0195E15905F9B52833D3ECDA8279C3A46B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 10:01:02 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:02 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:02 +0000
Files and hashes:         1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
                          2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: eKNBCn0J8h+ikREhweO0Lm75s/D03lsHbiLxOpZs0T4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:05:f9:b5:28:33:d3:ec:da:82:79:c3:a4:6b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
        Validity
            Not Before: Mar 29 10:01:02 2025 GMT
            Not After : Mar 30 10:01:02 2025 GMT
        Subject: CN=9c294ce1020636cfeeaca88f7cdb329ce9c839c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:70:8a:af:3a:ad:da:c9:4f:0c:d9:aa:1d:
                    67:70:9e:15:67:76:5f:c1:da:22:dc:60:00:15:a7:
                    56:a6:38:d0:ef:44:f4:e1:36:73:00:24:95:b1:51:
                    cf:40:f4:7b:3f:3f:6b:e4:b4:6d:74:f4:e3:be:0c:
                    a2:c2:6a:58:9a:95:ac:4b:27:47:1f:0a:28:06:c7:
                    31:28:a3:f6:a2:10:78:ba:03:2b:12:ac:13:d1:79:
                    23:6e:e1:db:65:29:8e:ee:1b:ec:84:3f:de:54:3a:
                    9a:07:79:a1:86:7a:41:09:d3:54:bd:e9:23:a9:7e:
                    76:e3:2b:96:69:ad:32:18:be:bf:ea:5a:94:ad:f4:
                    a9:63:01:f4:2d:32:cd:1f:ab:dd:6a:97:13:ae:ec:
                    3f:fa:5a:bc:15:87:cf:2b:65:22:9a:76:52:8c:52:
                    e5:d2:df:8c:0f:d2:db:a4:79:b1:9c:99:c1:97:2a:
                    d3:68:0f:4f:60:de:87:4c:c6:48:1e:d0:0d:71:92:
                    7f:8b:bd:a0:38:1a:ab:cc:ee:c3:7a:e2:50:79:c8:
                    9e:14:57:df:37:14:b2:3e:fd:fc:e3:16:0c:ec:3d:
                    63:a1:54:79:79:cf:f9:88:8e:18:20:c6:3a:42:8d:
                    4c:58:cc:9a:15:0b:8d:08:39:fa:8a:78:56:cc:e2:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:29:4C:E1:02:06:36:CF:EE:AC:A8:8F:7C:DB:32:9C:E9:C8:39:C0
            X509v3 Authority Key Identifier:
                keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:6b:3a:51:27:e5:be:6e:0f:0e:88:c2:00:b7:44:74:99:
         fe:7d:f8:07:a5:0b:d6:dc:b4:2c:99:b1:88:8e:f3:4a:b8:19:
         60:e9:5d:d2:47:63:e3:12:03:7d:6f:eb:bd:85:fb:b4:59:e3:
         6d:48:91:a3:48:cc:ae:d7:3d:b6:c4:e3:f9:c7:57:6d:a4:98:
         3f:ee:76:4e:40:cc:30:3c:88:32:05:ed:60:84:2d:95:18:bc:
         3f:ed:21:9b:cc:57:84:73:68:e6:9a:db:b0:66:ab:da:a3:e2:
         32:3d:c1:00:86:dd:54:28:dd:0e:85:b6:46:84:f2:f5:4c:30:
         c3:1a:c3:15:72:cb:e3:f5:7c:fa:8a:0e:b7:90:ef:15:8b:71:
         30:e9:6b:a0:fe:8c:bb:b1:d3:13:ef:0f:db:6b:0c:92:8d:04:
         4d:7f:e4:60:72:e3:05:02:d7:ab:e5:4b:f7:a9:23:a4:33:16:
         a4:a2:b7:55:c7:2f:b7:f1:86:08:62:70:65:9c:c9:94:1d:29:
         c1:65:18:09:98:74:b3:4d:19:db:bf:cf:c7:d0:50:f8:fc:cf:
         9a:a1:f3:20:c6:28:5f:ef:e5:4e:72:8d:00:5e:d6:6f:e9:6d:
         b7:0a:5e:c2:e8:4a:07:de:ff:ab:a2:21:a0:c5:90:c5:67:dc:
         95:63:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:51 2025 by rpki-client