Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
File:                     XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json)
Hash identifier:          w3YQAZxGWDwFs2J5dCwh9W7KD/dCLAmir4AqrM2sO58=
Subject key identifier:   F1:96:51:3F:97:1B:EA:4D:14:A8:75:B4:DC:A0:D5:D9:02:D7:DC:A5
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Certificate issuer:       /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial:       01962E61AF035B9A7DA994B747F770F11820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
Manifest number:          13C9
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=)
                          2: DefZ__9RqwjeIQvvIG8DNEtfalk.roa (hash: 8CQeEiGOKVZsA3/HRDhtbloh6zsps5iaRDAh0kwUHcw=)
                          3: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=)
                          4: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=)
                          5: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: LNmzKaKmBjcapyeCuro5XxAJo0vMSbPBBz6Ee5b2XqM=)
                          6: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=)
                          7: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=)
                          8: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=)
                          9: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=)
                          10: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=)
                          11: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:03:5b:9a:7d:a9:94:b7:47:f7:70:f1:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=f196513f971bea4d14a875b4dca0d5d902d7dca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:8d:6d:df:5e:ff:4e:d4:44:f7:0a:db:49:
                    a6:af:54:65:3c:04:70:d2:3b:7f:21:15:de:99:bc:
                    8b:ef:81:cd:03:6a:49:7b:1c:f7:f0:de:a3:e1:af:
                    3d:53:c5:33:52:f6:23:d4:7c:0c:bd:f8:6a:62:b3:
                    a6:fe:41:dd:12:5c:85:40:cc:dd:51:a1:36:17:fe:
                    be:13:c3:9b:d9:65:77:2a:6e:80:11:e6:0a:ea:b5:
                    ac:75:3d:85:61:ad:10:39:d5:19:95:a2:b7:4a:4d:
                    74:94:cf:eb:61:12:18:fa:28:ce:9d:03:bb:80:d5:
                    b3:7f:52:c0:0a:0d:a2:b9:79:ca:46:70:0f:bb:2f:
                    66:bc:2d:08:28:fc:5e:a6:1a:b3:90:cc:95:8c:52:
                    40:f3:1f:ef:13:fc:82:a0:e3:05:0a:0e:01:93:f6:
                    a1:b1:f5:2f:c3:d6:78:4d:70:74:ed:10:f8:79:50:
                    2a:63:35:18:3b:ad:10:0c:bc:31:d7:5e:7c:05:e1:
                    09:be:cd:45:1d:c6:bf:36:5f:50:40:7b:82:46:9d:
                    48:b1:5e:39:70:ec:36:d3:7e:17:f8:29:84:52:4a:
                    4f:16:eb:fe:1e:c5:c6:0c:9f:0a:0c:3c:f6:66:74:
                    6f:a1:ed:28:ca:47:03:f5:20:48:90:9d:0e:0f:42:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:51:3F:97:1B:EA:4D:14:A8:75:B4:DC:A0:D5:D9:02:D7:DC:A5
            X509v3 Authority Key Identifier:
                keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b4:61:28:16:67:77:30:a9:cd:1f:82:a6:16:ef:8f:04:94:
         e7:c5:c1:48:cc:a0:8c:80:08:c0:8f:dd:cd:35:35:31:ea:0b:
         09:60:06:2b:f2:97:aa:11:a7:d1:03:47:55:d3:5e:a9:78:1a:
         0c:5a:59:8a:9f:4c:39:8b:da:be:34:10:9b:42:11:04:c8:24:
         c8:49:10:b7:4e:09:aa:36:60:72:3b:13:82:20:2b:c1:56:ca:
         47:de:da:4b:2c:5d:72:30:ed:6a:5b:49:ed:fe:fe:4e:a5:ec:
         d7:74:03:8a:22:a7:f8:4b:53:af:c2:88:db:7d:32:13:4b:d4:
         7a:3f:b1:ce:b0:35:c8:ee:6a:93:e4:3b:64:53:d2:e2:48:ea:
         a7:c0:1e:2b:29:4f:9b:47:fb:ac:3c:27:d1:8e:15:47:1a:ac:
         b3:c5:3c:d1:5e:cd:28:89:4c:0c:a0:83:77:66:bd:ef:ab:74:
         05:14:f2:90:e5:93:63:b6:fe:56:1e:e2:a3:00:30:1c:d5:22:
         54:9c:4c:23:1f:9d:5f:a3:f9:c3:64:e5:41:47:24:a5:2f:d9:
         e5:4b:c4:25:51:55:7f:4b:b9:0a:ae:93:08:6f:b1:fc:6e:16:
         af:b9:b9:30:8d:f1:27:03:4a:cb:df:30:b9:d4:af:86:4f:fb:
         d8:ca:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----