Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File:                     xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier:          O179yv8ZJwWhGGAYGXV8ml0993rVcgEif60riqprKis=
Subject key identifier:   FD:9D:2F:6B:14:71:12:7A:16:08:25:EA:F8:F5:46:86:B0:3B:49:20
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer:       /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial:       01962ECFCB9E1A2DF331C438159EE20B6F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
                          2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
                          3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: /pDVj2LnkyNZMw8Rz65eIjXWdPHPqXSu0H7K6t/w9MM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:9e:1a:2d:f3:31:c4:38:15:9e:e2:0b:6f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=fd9d2f6b1471127a160825eaf8f54686b03b4920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:0b:77:b0:47:9e:e8:a4:fa:3b:c1:06:0b:
                    ef:bf:64:d8:3e:11:22:2f:2e:21:92:a1:cb:cd:49:
                    ab:ba:55:5c:d9:5a:8d:4e:cf:42:57:68:80:0c:90:
                    52:71:f8:d1:99:b2:5b:79:ec:37:4a:ed:63:23:05:
                    10:2a:be:09:6f:36:7d:dc:d7:dc:29:e5:54:f4:e8:
                    80:da:08:53:84:2b:52:6e:bd:4b:7f:ff:46:05:8c:
                    2d:22:82:89:63:4e:ad:a9:75:de:1c:93:e7:83:76:
                    20:9e:2f:3e:e6:08:66:d9:4b:a4:44:0a:7a:95:03:
                    9e:2c:90:22:3f:93:17:08:0a:6d:f8:3b:fc:b6:bd:
                    15:4f:34:7c:fd:fd:af:cb:0b:9e:aa:fd:2c:bf:7f:
                    06:74:e6:f9:20:af:3a:a9:df:df:49:39:bb:6a:19:
                    56:85:07:1d:9d:fa:62:32:11:9c:45:66:ee:1f:03:
                    72:14:9f:0d:91:fd:77:83:21:5f:0f:a7:64:ac:b9:
                    f7:af:04:56:a3:ba:44:14:42:aa:8f:7f:b8:c1:cb:
                    b7:c9:f8:98:6b:45:60:ee:d0:02:68:de:41:e2:4c:
                    b5:7c:a3:80:5e:c6:b0:5b:6f:05:6c:89:e9:56:98:
                    ff:3b:a8:80:8e:e6:cf:22:12:69:a4:a9:c6:3b:b6:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:2F:6B:14:71:12:7A:16:08:25:EA:F8:F5:46:86:B0:3B:49:20
            X509v3 Authority Key Identifier:
                keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:ce:43:82:97:0b:4b:30:30:ae:4d:56:4c:d8:49:f6:b8:
         8b:ea:98:5e:94:20:0f:9a:65:cc:d9:f6:04:ff:ec:9c:b0:d9:
         16:74:08:1b:ef:41:a1:1b:92:24:0e:f0:bb:11:4a:7a:87:35:
         b1:d8:8f:78:f8:6f:9f:c1:bd:9f:d5:bd:44:b8:a5:03:d6:a8:
         ff:69:21:f4:ce:75:f0:00:4f:b2:18:7e:a3:a5:95:87:2c:ba:
         15:bc:c6:47:cc:eb:ab:ad:34:75:85:7e:13:5b:61:d0:ef:96:
         4f:f1:5b:3b:9f:88:09:12:fd:74:06:c2:c6:b5:e3:62:c3:b6:
         18:ea:b5:b7:b3:95:cf:a6:7f:1e:25:34:af:68:6b:27:e7:35:
         7b:a0:96:e3:6b:b0:41:71:90:df:2f:0f:91:99:97:cd:ef:e4:
         3d:66:07:15:9a:e1:72:6c:d7:75:57:8c:28:16:03:e1:32:80:
         04:a8:b1:44:11:9a:bd:c8:d2:08:46:05:c6:52:3f:02:20:79:
         f5:cb:4d:bd:ca:84:2e:14:53:30:5b:f3:22:ca:4f:4f:b7:84:
         c7:f5:bb:c3:26:80:78:9c:65:17:70:e2:2d:f5:9d:5e:7d:92:
         8b:06:71:d4:55:0b:c0:9f:26:dc:6a:c3:a6:53:2d:e0:53:2c:
         8d:12:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----