Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File:                     5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier:          LqocsVNZqTl4XOsoXQ4zygQosY+2DNbK4mZIFdVfLCM=
Subject key identifier:   2B:DB:7F:14:57:ED:64:7C:DE:55:91:D4:29:8F:8B:42:A2:7E:EE:6E
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer:       /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial:       01962F744A49193A91388BAA16978A651D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: +u6weJrgT7hzwZsXObi/DbZ3tHWmiNtC7wnYyN1BDpI=)
                          2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4a:49:19:3a:91:38:8b:aa:16:97:8a:65:1d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=2bdb7f1457ed647cde5591d4298f8b42a27eee6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:68:fa:0e:f1:0e:73:67:22:c7:de:00:97:
                    d4:9e:bb:e6:4b:e4:d6:fb:38:93:6e:de:04:60:7a:
                    9c:fc:b7:af:be:d9:49:ef:b0:cb:aa:9d:dc:b3:6c:
                    3b:00:70:41:ab:d9:f3:59:d6:ab:8c:e5:67:67:54:
                    49:22:b3:e2:1c:5c:a9:3f:84:eb:ae:a2:19:b6:8e:
                    42:8f:27:16:f6:3d:9a:d8:ac:7e:bf:b5:30:0b:12:
                    e0:68:b4:ad:96:dd:51:30:48:4d:30:5d:1e:cf:a2:
                    57:6d:22:c7:04:87:aa:83:2c:5f:b0:12:4e:9f:38:
                    92:21:86:58:93:40:7b:c4:19:c5:f9:26:4c:92:29:
                    7d:8e:f1:26:d6:d3:4e:ca:ee:a8:36:61:da:9b:97:
                    1a:58:f2:16:90:3e:89:bb:d5:75:c9:df:43:52:b7:
                    60:a0:b5:73:f9:39:19:ca:40:9f:5a:5d:80:7c:48:
                    b8:86:57:8c:42:f9:83:74:54:04:49:de:b7:ac:80:
                    25:f0:7a:15:b2:9b:75:e1:16:49:8e:30:a2:72:a7:
                    1a:c4:1e:c6:cf:80:77:43:c6:ab:01:40:bb:5e:da:
                    01:b6:6b:48:3e:40:14:91:87:8a:06:8c:af:1c:9a:
                    aa:7e:2a:8b:3c:54:5d:4c:06:1d:0b:8c:7b:b4:0b:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:7F:14:57:ED:64:7C:DE:55:91:D4:29:8F:8B:42:A2:7E:EE:6E
            X509v3 Authority Key Identifier:
                keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:6b:b1:83:18:bc:d5:0d:f3:ad:11:3b:b6:30:3b:7f:b9:
         82:31:28:d2:a1:e9:77:ee:db:48:2e:af:6b:40:b1:d7:41:fd:
         47:c6:35:df:bb:14:a2:ea:70:9d:f1:1b:56:10:42:39:29:17:
         f6:ef:7a:da:2c:46:5b:2e:6e:32:01:5f:d6:97:7c:1e:35:e5:
         0c:15:33:4a:1a:3c:bf:38:0f:cb:a9:05:9b:c3:4a:7e:47:97:
         49:2e:ed:9c:b3:26:20:14:27:f1:9b:2e:c9:85:e8:42:d9:7e:
         33:50:54:0e:75:be:d2:7a:cf:20:99:00:69:44:76:8f:0d:80:
         b9:0c:65:18:46:f3:c9:21:19:d0:66:b8:ec:c1:7e:3b:45:4d:
         f2:52:36:e4:14:0d:39:65:b0:21:9b:58:09:81:ef:f0:5c:dd:
         e3:e5:5e:85:63:18:ad:0e:8c:95:6c:38:da:9e:90:af:e3:4c:
         4c:11:1a:81:56:f0:f0:0b:db:59:4b:26:b0:e8:68:13:6b:bb:
         3a:11:f5:36:53:4f:a5:a0:7a:4d:85:af:41:5c:64:04:56:99:
         d3:07:3f:c8:a6:d2:f3:92:5f:b7:79:b1:fb:5f:18:d2:d3:ad:
         9f:58:66:93:48:95:ff:01:b6:6f:0a:f8:70:ab:a0:03:b1:66:
         c4:d9:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----