Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File:                     XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier:          jkaL74oEb+FYqbq2KG47pOoYzRVHUm4r0VIYBgnMq08=
Subject key identifier:   A0:93:2A:20:0A:69:09:0A:84:DE:A0:A5:8C:4E:F1:B4:65:32:A0:57
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer:       /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial:       01962ECFAFE9FC4881FAA2E9FDDF886BF5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number:          097A
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: 6Oqjh03ek15X31C4doxPJT2CLnKbdLdEVKqgA8kV51M=)
                          2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:af:e9:fc:48:81:fa:a2:e9:fd:df:88:6b:f5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=a0932a200a69090a84dea0a58c4ef1b46532a057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:00:f2:fd:4f:1b:1c:78:26:0d:b4:4f:c7:
                    8e:47:5d:b9:1a:33:25:9b:ae:c1:ed:6a:81:4e:d1:
                    f4:7b:e0:45:54:83:37:76:34:b3:a0:88:bf:05:62:
                    cd:f8:2d:d0:c2:48:a4:2c:27:78:27:7b:e5:73:b8:
                    a0:96:6e:6e:25:0c:68:fc:7b:73:5c:a1:07:3a:d2:
                    d1:10:67:7d:c9:c2:cb:10:a8:db:ab:c7:c8:3a:95:
                    08:55:98:c4:05:b9:f7:da:ea:78:e5:55:75:42:c9:
                    e2:8f:73:06:d6:c3:01:09:57:d2:52:14:3e:6f:39:
                    70:bd:d4:e5:e7:41:65:39:5a:b5:8f:03:fb:50:3e:
                    57:21:3c:60:22:67:dd:06:b8:8f:03:82:99:91:f9:
                    52:3f:9f:be:f6:23:fb:f4:a0:1a:7a:a8:e1:41:4d:
                    a6:e8:82:fa:68:4d:bc:7a:3f:ad:02:4d:bc:d6:ce:
                    1d:67:f3:d6:5a:ff:ab:ee:c6:1e:54:67:c3:ec:4a:
                    84:02:d8:41:52:ad:f3:12:f7:c8:5d:cc:14:a1:f5:
                    59:3c:0f:92:0d:e4:1c:09:d2:25:29:cc:86:cc:3e:
                    8f:cf:98:51:c5:83:20:d5:4f:cb:37:5a:cd:96:9a:
                    d7:f3:87:6e:81:89:29:1c:bc:4b:c9:19:ec:ea:89:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:93:2A:20:0A:69:09:0A:84:DE:A0:A5:8C:4E:F1:B4:65:32:A0:57
            X509v3 Authority Key Identifier:
                keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:5b:c0:39:c8:cf:58:07:05:4d:7b:ab:e1:bc:82:f2:16:
         77:c6:3d:84:b9:7d:e5:4b:a8:94:02:fd:45:37:a1:84:fb:b8:
         7d:2a:0c:c7:53:f5:da:cc:de:03:2e:2d:09:6b:1c:5c:83:f3:
         0f:2c:16:fc:20:3b:9b:df:df:e3:a1:96:72:f5:3b:5e:cb:86:
         5b:d6:f0:35:45:5d:bc:42:9c:ca:8d:47:d5:35:c3:58:0e:c5:
         a3:69:d2:03:7d:d5:05:86:58:31:d5:8f:61:7e:64:ca:a6:3a:
         75:16:19:5a:98:ad:3c:93:03:74:d9:bd:59:4b:f4:1e:fd:39:
         2b:ac:cf:ae:3c:b9:47:f1:e2:3d:74:a5:e8:2d:46:72:0e:6a:
         17:44:b2:de:cb:30:51:fb:55:18:6e:33:e7:76:b7:74:8d:db:
         cd:85:fe:a1:78:b9:6f:5a:a5:6c:35:cd:f2:d8:d9:c6:56:d7:
         56:38:d1:2b:62:0e:b4:41:1c:b3:5f:86:75:f7:46:90:ea:58:
         4a:5f:f2:32:9b:76:52:66:cb:e6:ce:7b:f1:02:81:c7:fc:c3:
         48:26:17:c0:3b:9a:fc:ae:40:61:dc:e1:7f:9c:9c:ca:e9:94:
         40:83:4e:b2:63:b6:6f:29:15:0c:64:47:3c:fa:cb:41:73:64:
         8f:00:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----