Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File:                     Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier:          DYJEqbm6E+/zwO4pW0HjMGJKzdFkZqKDpSfHZotO53s=
Subject key identifier:   BD:70:A3:FA:91:CD:5D:F5:26:AB:C9:01:75:C2:75:0B:A8:CB:1F:AF
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer:       /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial:       01962FAB56B85DE3F89983FAD614AB7D5131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number:          0669
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: JSVK7J80ry6Zo86xSJk4t82quWz9etmraSp3y6mMFps=)
                          2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:56:b8:5d:e3:f8:99:83:fa:d6:14:ab:7d:51:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=bd70a3fa91cd5df526abc90175c2750ba8cb1faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:58:30:ce:ec:6f:6a:11:be:72:98:b1:59:
                    d8:70:bc:0e:49:8d:a1:91:91:99:21:cd:19:9d:14:
                    eb:a7:a0:70:25:36:70:90:0f:c1:53:79:37:ed:9d:
                    50:e8:8d:37:dc:c2:e3:c8:2e:6d:c0:60:7f:6f:8f:
                    d1:02:25:9d:21:0f:3f:f6:a7:05:ca:40:65:26:9b:
                    44:a4:58:cc:12:45:5d:49:47:8f:82:b2:b3:48:3b:
                    83:30:df:82:f0:c8:99:05:94:e1:c2:c7:26:22:ff:
                    9c:30:ac:70:37:97:8c:10:2b:11:f9:f9:fd:69:16:
                    f8:da:21:bf:0e:15:db:69:da:9b:44:3b:d7:8d:23:
                    7a:a3:07:1e:6e:36:f7:a4:af:85:4b:94:0f:8a:45:
                    7f:03:2d:36:70:05:26:82:68:f3:99:fa:4d:d1:96:
                    d2:c8:e2:f3:fc:4c:51:d4:64:6c:6d:ce:fe:a2:9f:
                    97:0d:b2:6e:1c:9c:f1:e9:66:2c:14:d0:fb:04:65:
                    7d:eb:6f:eb:ca:15:fd:75:6f:2c:ea:6b:42:d1:17:
                    d7:13:2c:42:fb:d0:ef:48:03:a4:58:42:76:be:69:
                    a6:13:23:14:a3:57:79:e5:06:15:52:f8:49:6e:48:
                    55:f2:e8:7e:5b:6b:57:d5:96:42:1f:52:15:01:b4:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:70:A3:FA:91:CD:5D:F5:26:AB:C9:01:75:C2:75:0B:A8:CB:1F:AF
            X509v3 Authority Key Identifier:
                keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:7a:25:fd:c9:70:66:7c:59:63:59:5f:4d:72:5a:de:7e:
         a0:3b:11:33:bb:8c:ac:01:60:f7:b1:53:9b:6d:46:ce:39:ba:
         63:8b:4e:0d:fe:f2:68:1e:25:1a:70:18:f2:5c:57:0e:a4:d1:
         a7:d7:12:64:e3:99:ad:57:2b:fb:95:00:57:2b:86:ee:b7:1b:
         64:bd:06:60:4f:c5:cd:4f:79:da:ba:c2:e6:a6:59:48:d8:d6:
         96:63:89:aa:c9:b0:48:1a:4e:17:4e:03:6d:42:71:4a:fa:a7:
         66:5e:35:0d:d9:c6:ff:08:06:c1:ec:1c:f8:f3:e9:1b:0a:90:
         7b:7c:71:35:ef:67:0b:fa:eb:aa:68:79:9a:53:b8:d5:36:84:
         29:78:71:f3:c4:7b:a7:cb:5b:1f:e4:a9:16:9d:05:c2:82:33:
         7b:16:3d:5a:2b:74:ef:8a:c9:00:bb:02:9b:1f:42:52:ad:11:
         b0:65:e9:9f:5a:01:c4:f7:ff:89:2b:8f:32:ae:52:f1:eb:ed:
         ea:0f:2e:a1:21:41:b6:fe:6b:b5:ef:8f:85:68:34:33:c2:8a:
         8a:65:2f:0c:0c:41:b6:6e:c4:16:dc:0a:44:1b:37:6c:dc:b8:
         a2:76:e8:15:f0:27:b2:0b:a9:77:de:dc:60:a0:29:1c:33:6f:
         c2:4f:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----