Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
File:                     xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft (raw, json)
Hash identifier:          R7XRvzHYyzIPGNrD6scWkKeAgST7k6GWuZf+5B0jKns=
Subject key identifier:   C7:2A:96:C1:90:CB:2E:11:27:2A:92:0A:C4:3F:9B:6B:4F:42:41:4F
Authority key identifier: C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0
Certificate issuer:       /CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
Certificate serial:       01962E99B688EA2ED93A021D1F9FD20F0B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl (hash: Rhu9PNMVXmh8rSU9X0KdPw9SG4LYcmKy4TGVgpgeoG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b6:88:ea:2e:d9:3a:02:1d:1f:9f:d2:0f:0b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=c72a96c190cb2e11272a920ac43f9b6b4f42414f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:02:48:f4:d6:04:18:ce:07:0c:bc:b0:1b:
                    56:cf:17:ce:d3:f8:e4:42:f1:8c:0b:d7:95:15:0c:
                    6a:5c:cc:cd:74:8e:a6:94:29:9b:5b:fc:2b:98:a2:
                    84:6d:5b:31:4e:f3:af:6f:63:17:b2:26:21:37:5e:
                    16:96:45:04:3f:57:70:28:3c:6b:20:96:2c:dc:51:
                    48:67:a0:79:c3:94:db:3c:90:30:c3:46:0b:44:f8:
                    eb:79:8c:70:5f:9e:46:8f:bf:6e:4d:8e:a1:0e:af:
                    34:9e:f1:7c:97:8b:7e:cd:fb:99:3c:56:60:58:d5:
                    21:e0:52:41:9d:4f:c6:12:1e:ce:d4:c3:35:ff:b6:
                    8a:28:eb:23:83:4a:32:7d:72:03:d6:92:20:0c:9d:
                    70:ce:39:2c:90:1c:42:f9:97:5d:eb:c3:fd:f5:ee:
                    94:83:28:f0:40:ca:4d:96:11:e8:b5:ed:a2:14:d6:
                    79:1c:58:f8:09:6c:d3:cb:82:76:b5:d2:2c:93:62:
                    2d:78:ab:d7:a9:25:39:55:b0:f0:e1:72:c8:8b:20:
                    79:09:82:f9:30:43:a4:9a:78:9a:0b:a5:3a:81:58:
                    ea:38:83:07:85:2e:cb:cc:1e:61:8c:77:86:0a:ca:
                    5e:4c:5c:95:b8:8d:04:98:91:e4:bf:81:60:16:bd:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2A:96:C1:90:CB:2E:11:27:2A:92:0A:C4:3F:9B:6B:4F:42:41:4F
            X509v3 Authority Key Identifier:
                keyid:C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:37:54:2e:14:0b:03:a7:7d:ca:7b:8c:67:c6:27:3d:fc:dd:
         e8:57:36:8f:a1:49:6b:d3:62:7f:72:81:c7:9d:e1:a9:3e:8a:
         4c:15:ec:69:d3:12:a8:7a:71:f3:fc:2b:d2:fd:fc:22:8d:29:
         47:30:5a:82:49:75:1e:51:32:62:aa:86:6c:4d:ea:ed:08:1d:
         73:5e:2b:6b:72:b6:cb:68:60:15:89:26:74:88:f4:6b:82:c5:
         54:5c:8c:21:8f:1f:7f:71:ea:4d:3f:17:71:17:27:43:f6:d5:
         78:69:ca:cc:f8:fb:98:56:28:af:21:85:ef:da:57:21:33:a8:
         fc:f3:a8:4c:26:b2:24:67:1c:2e:53:f2:69:86:09:55:a8:f3:
         b6:3d:bd:d7:ce:db:73:3f:48:3f:3e:60:df:7f:5e:e3:fe:6f:
         d7:d0:7a:f8:aa:7c:75:3e:e5:42:0f:fe:63:e0:a8:ea:af:6d:
         66:bf:09:00:5e:67:81:72:c4:8a:a4:49:c6:2f:de:43:dd:cd:
         0d:38:c5:1b:d6:66:b2:42:48:47:9e:5b:c3:c0:1d:13:7d:f6:
         b5:e4:e0:e4:5f:82:41:bd:2c:46:38:bc:c6:40:45:af:f1:c2:
         bf:fe:88:ee:02:57:85:27:03:c1:12:12:26:b4:25:70:9a:39:
         38:99:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----