Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File:                     XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier:          jfsQoAeWMszIJPTrXl1Tu/WWty2HizrBE6RWRIGwA2c=
Subject key identifier:   F8:E8:4A:32:70:38:E6:E4:72:2D:86:DA:BC:3D:12:28:8A:14:38:03
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer:       /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial:       01962E2AD317976E7980AE1D00C658302E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
                          2: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
                          3: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
                          4: VxT65LZX5OJbZTHZNAIInJvh5YE.roa (hash: FdPAlwlk9S7n3Fuj8UVdtKrTsnGqgq5r13WKEZND4dA=)
                          5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: L5hhbD4Sky6QuC5a28j1A2zE34jOAbXkejiGeOx3w4M=)
                          6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d3:17:97:6e:79:80:ae:1d:00:c6:58:30:2e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=f8e84a327038e6e4722d86dabc3d12288a143803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c1:e8:00:92:21:ef:37:6a:ae:4d:c6:b4:b7:
                    07:ea:bd:87:cb:c2:3e:56:e7:2d:ae:ff:4f:e5:56:
                    6a:82:99:82:69:cf:e6:83:0e:0f:4c:d4:6f:c4:b5:
                    f4:5f:99:3b:3c:b8:c4:b7:4e:bc:2f:01:c5:46:b7:
                    86:4a:85:a2:3d:e7:0b:15:d2:8b:c6:f8:cc:13:6a:
                    0b:ad:45:78:f5:5b:6a:d9:bd:ca:dc:02:c4:47:75:
                    c9:49:54:b1:26:c4:b8:5d:2d:5c:1f:fd:61:04:a3:
                    c2:5e:df:26:22:72:e4:1a:98:8e:ce:90:64:1a:30:
                    6b:b6:ac:cd:dd:8c:aa:49:c3:c9:17:f9:6d:69:ac:
                    7a:56:2c:84:92:9b:92:2b:f4:b1:3d:6f:88:9e:23:
                    69:a3:95:a1:f9:b7:45:72:78:96:57:c1:1e:5e:35:
                    48:6d:3f:cf:8c:4e:6b:a1:90:04:14:8b:e4:72:d1:
                    52:fa:cc:9b:30:0f:76:04:69:1e:9e:1f:1a:c5:25:
                    17:f9:1f:51:4d:73:e3:4f:51:c2:6a:fa:eb:88:a6:
                    9a:39:be:51:df:b3:a0:d5:e9:b5:18:0f:e3:c3:cd:
                    dc:ea:f0:41:cf:36:a8:df:cc:87:8c:86:6a:56:2b:
                    bc:2a:74:58:32:c8:35:5b:0b:eb:04:21:d3:d7:82:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:4A:32:70:38:E6:E4:72:2D:86:DA:BC:3D:12:28:8A:14:38:03
            X509v3 Authority Key Identifier:
                keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2c:9a:dd:01:bc:f6:08:e1:5e:c9:3b:98:7a:11:08:14:ce:
         6c:ae:0e:e1:1a:a7:8c:e7:bf:60:70:16:c9:85:08:87:41:a2:
         fa:55:3a:d1:5f:87:27:03:60:80:d4:33:17:79:36:72:05:ca:
         5e:b4:a7:93:e2:12:47:08:99:b2:d4:4b:68:68:28:19:14:02:
         42:7c:e6:b3:dc:e7:05:ac:8f:e1:44:37:1d:03:c3:2a:32:3a:
         12:66:83:2e:ab:ba:36:e0:55:c2:e8:34:aa:78:47:9d:29:e4:
         fa:78:9f:8e:15:ed:99:01:37:64:f1:87:e4:39:3b:6e:46:1e:
         fb:28:ad:b5:04:2f:28:7f:e1:be:75:d4:07:2e:a5:8e:cb:b0:
         1a:12:07:a1:76:bd:8f:97:4e:84:c9:6d:e3:4c:4a:ed:40:38:
         be:ea:47:9f:48:b4:5d:81:cc:6f:2d:4b:14:f0:e0:79:da:31:
         44:77:84:3e:b3:80:a3:38:4b:6b:73:d1:71:c0:63:53:b9:b0:
         79:81:40:35:8d:5d:91:c7:1e:62:6f:9b:7b:5c:b4:12:b0:ef:
         b3:b8:de:19:aa:cb:05:f5:77:6e:dc:1b:c2:35:49:a5:be:f8:
         d3:8b:7e:8e:26:94:14:a5:50:77:64:67:52:34:5a:ea:8e:d3:
         e7:52:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----