Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File:                     5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier:          u4I4exWheQ7a4+WXTe8qnj/H64u1C9KKF4PP5u6+KBk=
Subject key identifier:   16:65:AA:B3:DE:A7:06:D1:88:9B:2B:E1:11:48:A7:AD:D9:52:55:A0
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer:       /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial:       01962DF430BFB476AABD3B7959B4FBBA5D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number:          0FAD
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: ct/vAkN/hKHfyHUCX7ZYPkI8Dn7lebdurzJ4AxgHmzQ=)
                          2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
                          3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:30:bf:b4:76:aa:bd:3b:79:59:b4:fb:ba:5d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=1665aab3dea706d1889b2be11148a7add95255a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:68:be:af:8b:f8:e3:21:5c:76:1d:a8:f4:
                    1e:a3:22:67:07:94:2b:7a:66:07:7c:f8:01:3b:c4:
                    f6:9e:0b:7f:88:48:5f:66:1d:0d:65:25:0f:b4:1d:
                    c5:10:f0:db:81:b3:fb:ba:12:62:89:6b:bf:83:71:
                    29:cf:3e:c7:30:93:14:99:12:9c:01:27:c9:13:24:
                    eb:a6:5d:1d:b9:98:af:80:54:30:07:48:5c:39:79:
                    3e:b3:f6:ff:a9:f5:f7:6b:ca:d5:35:c4:e2:f2:78:
                    fa:5e:35:32:fe:83:52:fa:ba:0f:5a:e4:fd:a6:a8:
                    85:69:50:d4:e3:c1:5e:22:04:a5:88:4c:06:9a:5e:
                    0e:06:a7:04:2c:0b:21:e8:1c:26:4c:87:96:12:77:
                    b8:ce:40:6e:06:86:5d:33:b1:5e:0b:fc:8b:99:22:
                    47:cd:67:04:de:93:92:5f:15:3d:a9:72:08:a4:29:
                    b6:e8:57:4e:57:17:b1:b9:d7:7c:7b:03:da:1c:38:
                    55:e6:c2:2e:3a:37:7a:e3:7b:64:bd:18:1b:26:49:
                    1a:0c:c6:d5:40:74:86:34:b5:fa:dc:52:fc:f2:c3:
                    b8:e5:11:cb:b8:10:b4:2f:eb:d7:e0:c9:bc:a9:b1:
                    73:d1:90:5d:f9:76:80:97:40:84:da:df:db:7b:c2:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:AA:B3:DE:A7:06:D1:88:9B:2B:E1:11:48:A7:AD:D9:52:55:A0
            X509v3 Authority Key Identifier:
                keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:76:13:2e:43:fe:c0:ed:39:c3:71:fd:e8:2a:17:ad:7b:e4:
         45:ef:4b:4b:7d:27:d9:35:a8:45:26:5d:aa:67:c2:e0:19:a0:
         2a:0b:16:f4:d1:3f:7e:e4:78:81:99:ff:ed:cd:b0:b8:33:d6:
         83:a0:55:16:f6:ef:81:d8:e9:52:c1:36:86:58:84:58:5b:01:
         16:9e:7f:e7:62:49:81:20:ac:e9:d8:c3:3f:8a:f7:87:d9:18:
         36:f1:c6:8a:7b:66:f4:6d:ce:1f:99:2c:aa:12:a9:fd:00:3c:
         75:34:fa:65:12:f2:3a:8b:81:42:1d:8e:8f:45:40:eb:4b:50:
         b5:17:4b:b0:a7:be:3a:5a:ab:55:fd:9f:09:e9:5a:8b:9e:de:
         d9:75:05:53:d6:87:36:41:3d:82:e0:5a:88:05:5b:4b:aa:e3:
         64:4d:7e:1a:7a:f6:6a:d2:77:00:e5:20:c4:62:7b:d3:90:ea:
         10:5f:4a:95:09:ac:d9:e2:2a:11:1e:4b:16:41:6e:bb:ab:0c:
         7b:07:b5:e3:06:5c:75:7f:da:85:4b:19:e1:c1:99:ac:b7:3b:
         31:be:79:f1:c2:ec:03:dc:f8:80:81:a2:f8:23:58:1f:0a:b5:
         e8:0d:17:a5:64:55:b8:80:89:21:be:43:10:c7:b1:7a:0c:56:
         21:c1:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----