Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
File:                     XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json)
Hash identifier:          KQdtOgHY8EC6BWOv9VirkliktzIMXwhD8mxIkc6dYBs=
Subject key identifier:   DA:6A:E4:1F:09:5A:F3:93:10:F2:97:40:66:FD:B1:6F:48:06:A6:A0
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Certificate issuer:       /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial:       01962FAB0BF1705D150FF80B4EB091C40F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
Manifest number:          1501
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=)
                          2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=)
                          3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=)
                          4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=)
                          5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=)
                          6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=)
                          7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=)
                          8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=)
                          9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=)
                          10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: 21zIWNeikitZ+AzaBNVSBVhumc2L3KhjSM4RNJtHQgI=)
                          11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=)
                          12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=)
                          13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=)
                          14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=)
                          15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0b:f1:70:5d:15:0f:f8:0b:4e:b0:91:c4:0f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=da6ae41f095af39310f2974066fdb16f4806a6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:0d:c1:df:9a:9e:80:d0:20:02:59:b3:68:
                    a2:da:b8:e8:0f:2a:a0:4b:10:c3:dd:11:c0:2a:98:
                    99:7e:31:bf:e1:51:04:8b:7e:ad:d8:50:e1:83:ec:
                    86:07:9c:10:7a:37:86:60:39:78:d3:c0:37:f1:fb:
                    ce:04:c4:88:8a:96:4e:5e:f6:11:81:96:8d:a4:30:
                    be:ea:36:63:7c:c2:b9:25:c8:88:4f:11:0c:27:51:
                    b7:bb:20:ed:6a:82:21:8b:e2:6e:69:ae:6f:b5:6b:
                    f1:14:a0:aa:81:48:48:ab:da:3a:e4:46:80:b8:d5:
                    70:33:73:d4:07:30:ee:eb:a6:72:65:a3:ae:02:f1:
                    7b:72:a3:13:73:91:ce:60:8a:07:8a:47:08:1c:52:
                    eb:af:c9:bc:96:36:27:20:58:06:66:79:ec:3c:3c:
                    b4:1c:0b:04:64:31:21:e6:9f:26:82:88:a3:17:4f:
                    ec:c0:ff:77:d4:04:42:a7:18:32:ea:35:85:c2:f0:
                    62:78:ca:88:41:2e:5a:5a:97:63:69:f2:bf:2e:26:
                    b0:60:71:9f:e6:65:d9:ab:1a:14:06:0e:15:9b:31:
                    5a:c8:e1:55:34:3f:f7:86:fe:bf:ca:ab:41:50:a1:
                    d8:82:cd:c4:73:20:34:e0:8c:01:55:c2:bd:33:38:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:E4:1F:09:5A:F3:93:10:F2:97:40:66:FD:B1:6F:48:06:A6:A0
            X509v3 Authority Key Identifier:
                keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:22:bd:18:43:b7:75:98:70:1d:18:3d:fe:60:ee:7c:00:
         9a:4b:59:e4:91:89:59:5b:b0:16:91:b0:9a:51:02:de:71:98:
         96:4f:0c:b0:fe:92:40:ff:b4:27:6a:ae:4e:9f:74:84:4a:83:
         4f:8f:65:aa:88:d8:a0:8f:b7:48:2f:80:45:9d:7d:55:d7:6f:
         45:c2:b3:9a:30:33:63:e1:14:be:a8:63:b6:71:d2:aa:f5:c2:
         c2:01:fc:d0:37:6d:d8:79:12:34:11:fa:6a:54:23:07:9b:8c:
         0c:f4:c2:47:8f:66:61:03:7d:5d:db:f0:d4:7e:3d:73:ad:35:
         f8:be:5f:c5:a8:dc:7a:57:40:8a:6d:c5:5d:5d:e4:b9:4d:32:
         b1:7e:e6:b0:f0:df:7a:c5:32:86:44:b5:4d:5b:ff:b4:b0:49:
         e5:0c:b8:74:eb:a8:5a:9b:5e:ab:c4:7f:b5:71:4e:51:a3:1f:
         69:66:b2:e2:49:4a:68:df:a9:97:49:4e:23:9f:61:47:a8:fc:
         43:56:ea:61:a5:85:15:c4:ba:30:17:0b:76:ce:c1:41:7d:b9:
         50:bf:1f:2f:fe:22:0a:1e:9c:c7:d8:4d:be:f5:63:c2:e1:36:
         3f:3d:f6:a1:6b:e5:43:55:01:82:e2:42:a5:dd:fd:45:88:10:
         d1:07:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----