Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File:                     152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier:          Yk1H+7enmvkjaQzSObsl39eiPMiSYhLLUi67XtP1OpM=
Subject key identifier:   5B:F3:1F:65:47:FF:FB:0D:DA:E6:40:E5:96:E2:FF:8F:42:E7:EB:78
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer:       /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial:       01962F744AE3937DC0ED226F90CFB84559FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number:          0EA5
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: cZ5HaUDkDzU53KIXbZAc2wTV4nO7hvk42eIUFsAQffQ=)
                          2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
                          3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4a:e3:93:7d:c0:ed:22:6f:90:cf:b8:45:59:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=5bf31f6547fffb0ddae640e596e2ff8f42e7eb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:8e:09:0c:9a:cc:14:cf:67:06:aa:0b:f1:
                    0b:0d:b9:1a:e6:b0:25:87:a9:38:cd:53:84:8c:5c:
                    b4:ff:a6:c5:c2:c7:08:de:a3:50:f9:fa:24:4d:25:
                    69:c3:da:b6:e7:b7:71:3b:22:47:1d:74:08:0e:a2:
                    34:ea:5b:08:94:da:f5:95:0e:f2:6d:84:3a:21:07:
                    da:7d:6b:c1:a2:47:d5:ea:6a:b7:4e:d1:8f:97:c1:
                    e6:63:cf:8f:12:73:47:9c:55:a2:a1:b2:40:57:e6:
                    3d:c0:e4:62:36:3e:4d:3a:77:d6:b5:97:a8:ae:9e:
                    11:87:a8:19:09:b1:e9:d2:af:42:ac:41:81:8e:96:
                    42:3b:50:de:12:31:84:9e:fb:03:c7:af:61:27:5f:
                    90:be:d2:0e:b9:cf:95:7d:5c:10:14:06:d6:f8:92:
                    54:78:17:b4:97:6f:b3:69:68:96:63:6c:db:0d:a2:
                    59:f2:30:41:49:ff:45:28:7a:6c:f3:14:c2:2b:a9:
                    2f:a0:ca:b5:c6:62:0a:79:c1:12:16:4b:3b:35:83:
                    1e:c4:f5:5c:ad:e1:59:c4:68:d4:2c:fe:a5:ec:56:
                    8a:e3:50:99:b0:22:2e:c1:0b:52:65:a5:66:9e:f2:
                    09:cc:f4:4a:67:7c:df:90:fd:49:22:a4:80:bf:80:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:1F:65:47:FF:FB:0D:DA:E6:40:E5:96:E2:FF:8F:42:E7:EB:78
            X509v3 Authority Key Identifier:
                keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:d6:6e:be:40:fc:51:df:ef:5c:6c:1e:a0:a0:c9:0a:71:
         51:8a:6b:1c:67:a0:4d:33:74:05:2a:38:41:2e:f2:65:8e:e7:
         a4:f6:09:f5:a3:25:1b:1c:8a:5a:2d:1f:94:3d:76:c0:cb:31:
         d6:22:de:eb:9f:4d:85:43:8c:4a:f6:9f:9c:1c:95:ab:6e:a2:
         51:0d:4b:4c:be:3d:0c:79:26:7b:30:eb:af:27:e3:68:16:44:
         f7:f0:2c:99:58:4a:63:df:ee:1d:08:de:84:4d:2b:b9:31:60:
         cf:4b:b5:ee:51:0c:a8:73:c6:97:77:b5:18:c3:b1:07:2d:0f:
         11:f7:d2:15:98:28:aa:99:95:99:12:f1:02:fc:0d:56:64:19:
         21:36:50:cc:2e:85:31:65:68:2b:18:61:77:1b:6e:04:c5:b8:
         e3:2a:44:20:19:7d:7f:0c:37:e6:71:09:ee:01:fb:65:b7:6f:
         d4:ce:fe:9e:93:3c:6c:30:c5:da:28:a4:66:5a:d8:a4:dd:62:
         3a:f9:64:9f:b7:ad:38:01:3c:d9:ca:4b:43:11:88:4c:cc:98:
         b4:d7:5d:fe:f2:db:53:c7:6e:f9:09:26:41:84:d5:49:7f:95:
         80:b1:0b:5d:26:45:20:90:b4:f3:b1:cd:68:02:34:66:64:ab:
         1a:a1:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----