Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File:                     qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier:          AhwTx3Grr7QbUddJ1QFHusxW0+QQsSDV4U8Bv+GVjJg=
Subject key identifier:   3C:9C:FA:F9:F0:05:03:40:B3:79:3B:C3:A2:F2:6C:AD:DA:42:18:8F
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer:       /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial:       0195E07D903B1EDF8783EC232A18135EF1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number:          14CC
Signing time:             Sat 29 Mar 2025 06:01:20 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:20 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:20 +0000
Files and hashes:         1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
                          2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
                          3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
                          4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
                          5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
                          6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
                          7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
                          8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: XR6AkoBRD3vf3kaA83THhM3taqlHPMuh0URhh+C+apw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:90:3b:1e:df:87:83:ec:23:2a:18:13:5e:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
        Validity
            Not Before: Mar 29 06:01:20 2025 GMT
            Not After : Mar 30 06:01:20 2025 GMT
        Subject: CN=3c9cfaf9f0050340b3793bc3a2f26cadda42188f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:4a:28:65:b8:4f:eb:95:99:fa:d9:ba:26:
                    cc:a7:ae:55:aa:00:fc:bf:43:1f:25:ec:30:ae:88:
                    3e:11:7a:b5:5e:e9:f9:3a:90:11:19:3b:75:91:e3:
                    37:13:bd:20:65:9d:71:b4:51:de:ec:91:cb:14:d2:
                    92:ba:61:4a:71:71:48:fd:cb:2a:f6:54:c1:91:e1:
                    bb:e8:81:f6:e1:e2:96:ba:f7:41:31:97:40:f9:8a:
                    f0:ae:26:be:3b:40:58:4f:28:03:4e:ef:98:b7:40:
                    10:3b:e1:92:b8:43:74:e3:e6:7c:b6:23:98:79:74:
                    9f:6e:b7:7f:3d:bf:58:68:cc:df:e6:7e:1e:47:64:
                    e2:1e:41:be:1f:56:be:7a:b4:cd:76:45:33:ee:7f:
                    a7:39:c9:1b:d5:67:5d:ca:20:82:f1:62:62:15:bb:
                    a6:2c:e5:45:43:e3:f1:92:0d:ff:ab:57:38:94:24:
                    14:41:c0:fb:d5:51:4b:16:bb:cd:52:ba:46:d4:c1:
                    ba:c7:3d:fb:bd:43:b9:a8:80:8b:04:d1:8a:1a:52:
                    a6:a5:d2:38:ce:68:84:eb:d8:7b:f8:ea:2e:68:0d:
                    88:8a:2a:46:23:ff:91:c6:30:da:af:a3:64:b7:1b:
                    e7:5e:1f:73:4b:89:dc:80:65:8b:dc:7f:2e:17:db:
                    68:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9C:FA:F9:F0:05:03:40:B3:79:3B:C3:A2:F2:6C:AD:DA:42:18:8F
            X509v3 Authority Key Identifier:
                keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:a7:d2:90:b8:85:73:22:61:d7:e5:fb:a5:6d:ff:c2:51:
         13:bc:ea:d6:78:03:bb:e5:0e:61:91:97:1e:ad:9c:43:a3:e2:
         c9:aa:e0:4b:e1:8a:86:62:3d:91:b4:59:eb:c9:6a:3a:a0:69:
         87:02:b5:e4:c0:d3:5a:76:7e:6f:f6:00:dc:50:5d:25:d7:60:
         fc:e1:1f:8b:64:56:dc:61:43:a4:81:ba:ed:c0:38:d2:16:ab:
         5b:fe:f8:ca:d6:df:a0:95:44:84:fa:f0:6e:d8:92:11:fa:c7:
         2b:2f:5e:c5:3e:10:6d:c4:c3:b5:82:d5:74:36:a6:a5:15:c4:
         63:31:37:e9:b5:5e:1b:a9:1a:ae:37:1d:02:79:51:e1:93:ed:
         99:6a:58:de:12:63:bf:ca:01:91:06:bc:f3:cb:c3:5b:ff:3a:
         c4:6d:a2:72:c2:39:fb:6b:aa:6d:78:5d:74:d5:7a:61:27:e5:
         0e:47:ab:0f:9d:a7:50:dc:ba:aa:52:17:d5:00:ec:e0:86:aa:
         5a:bf:5f:fa:26:fd:fa:0a:9e:81:76:ab:dd:9e:4f:d6:82:28:
         0a:24:0a:d9:a5:f0:10:ae:1e:fa:26:fd:99:81:01:2e:53:b0:
         94:aa:46:05:6e:c9:89:f3:9d:13:a5:82:33:14:37:b0:15:63:
         0e:a0:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----