Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File:                     XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier:          XzFdY9xGorIOyMtkIuIcymiTYxkC3fhAW2Qu4gktNEc=
Subject key identifier:   F0:68:00:5F:08:E9:9B:6E:D8:2E:20:B9:FA:0B:BE:AE:66:A6:7F:BA
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer:       /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial:       01962F3D6F65351B2C97A7F0191F7AD51073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number:          2D
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: xPpe6yF0p4OIYQGjT08DWvuyMN1mlE3O+ZaJyYFtkA8=)
                          2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6f:65:35:1b:2c:97:a7:f0:19:1f:7a:d5:10:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=f068005f08e99b6ed82e20b9fa0bbeae66a67fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:c5:a3:9f:91:37:03:6d:c5:89:7a:84:1c:
                    8d:1d:d6:ff:7c:2a:d5:e4:76:70:3c:2d:a7:38:58:
                    78:d3:39:57:b4:69:e7:1f:01:2d:ee:bd:37:20:00:
                    79:29:97:4d:a6:98:a9:cf:81:47:70:20:65:d9:e2:
                    94:9b:7f:ec:6d:98:a6:ce:3a:71:72:51:b5:92:67:
                    ec:69:93:f5:2a:2a:30:9f:62:17:4b:cc:1c:4a:2f:
                    97:92:36:60:1b:ad:5c:6c:cc:a9:1d:cd:77:53:15:
                    48:dd:83:78:66:65:e3:82:ff:61:ef:06:d7:59:cf:
                    a2:74:f7:64:33:1c:63:4a:f3:92:e9:3a:f7:c9:47:
                    80:a4:0a:34:78:b1:ae:ab:1f:1c:d8:14:44:9e:fb:
                    89:4b:36:e1:eb:20:55:35:81:3a:08:de:14:92:03:
                    f0:72:a3:31:99:46:15:fc:4a:f9:08:41:c2:37:7b:
                    b8:56:9b:09:b8:20:3f:e5:77:0c:48:79:be:a1:6c:
                    18:c5:67:6e:bf:84:ac:56:6d:e6:95:e3:72:02:09:
                    22:26:78:4d:75:e7:2f:66:d0:b5:11:69:29:17:ec:
                    a3:b2:56:ca:b3:5e:b8:80:f5:f9:ec:ae:a2:4e:53:
                    0e:89:19:a8:4c:7a:08:87:80:ea:13:d5:27:e5:cb:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:68:00:5F:08:E9:9B:6E:D8:2E:20:B9:FA:0B:BE:AE:66:A6:7F:BA
            X509v3 Authority Key Identifier:
                keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:16:85:f4:f5:2a:00:19:b3:c8:3f:d9:11:42:21:cb:4e:2a:
         f6:8a:4a:3f:ea:a1:bc:f8:a3:54:4f:3f:a9:47:4f:ca:6f:a2:
         48:c8:24:1f:08:55:4f:83:20:9d:2c:65:30:bc:91:45:12:e7:
         c9:4a:8b:95:d4:b9:f1:bf:58:ce:f1:2e:7e:b3:fc:c8:14:c3:
         96:30:8d:7e:4b:c3:ac:6c:0d:6e:49:89:0e:26:13:02:41:a1:
         43:e6:ec:89:1d:cf:36:a0:dc:59:c5:ca:f6:07:96:04:54:53:
         0b:9f:dd:cb:ec:aa:9a:be:93:7f:72:59:65:fb:2e:9d:ea:1f:
         1a:9a:49:52:ab:af:05:4b:f8:d1:00:bd:4b:e5:b1:31:4c:bf:
         a8:17:13:af:af:db:c4:d4:ac:ad:25:1d:bd:70:8c:ed:2e:65:
         43:e8:f5:23:60:ea:b6:9f:2a:9a:5b:2b:c6:37:51:4f:ea:70:
         3e:ac:94:f0:48:a0:42:1c:c6:d2:58:c4:e3:90:87:ff:2b:6f:
         2c:5c:78:a2:51:ca:d7:a5:46:4d:f7:63:9a:75:da:a4:7d:4b:
         98:4b:1f:eb:94:c6:32:05:bb:56:dd:61:ac:27:05:4f:ff:ea:
         f1:45:da:2b:b0:06:4c:82:0f:ed:7d:ba:f1:c6:87:db:06:80:
         c1:61:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----