Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          yVSJeA4lwkQu7W1+6MQQXSZROgEri6/yOeXWhxW2bb0=
Subject key identifier:   4A:43:AF:F7:6D:0F:D9:2E:1E:7A:E9:DB:B8:C0:B1:1B:93:FB:7F:0F
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       01962F743A634DC4BA44FE9DC56779509B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          152E
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: V714b+r4U6hMxshyfwmgRJCslmbCqd9QllL2glmhrMM=)
                          2: 7VOnScmIfl5YQtcTz2D26XQWq5A.roa (hash: vu7qmzFO2z4PAZA8cHegYQseVd1YfdVKwhox9azJUJs=)
                          3: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=)
                          4: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=)
                          5: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3a:63:4d:c4:ba:44:fe:9d:c5:67:79:50:9b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=4a43aff76d0fd92e1e7ae9dbb8c0b11b93fb7f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:9a:ee:2a:44:c2:87:7f:b9:4f:68:00:10:
                    3f:04:a3:30:a2:ae:60:3e:51:21:ce:6d:83:21:69:
                    e5:aa:e8:e6:d9:a0:08:e7:e5:bd:bd:b8:3e:2e:ea:
                    12:b4:39:76:c3:8a:09:03:c7:f4:3c:1e:7a:57:f1:
                    60:7e:1e:89:bc:a1:7b:68:01:81:ef:51:c1:49:f5:
                    b6:ad:08:61:4d:8e:cc:1a:fd:6d:9a:28:34:2f:19:
                    1c:05:e6:25:9d:f2:0e:fb:15:47:f1:e2:95:5a:70:
                    ce:69:04:7c:e5:db:d1:b4:54:a3:85:bc:35:be:52:
                    c7:9a:5b:5a:17:bd:07:52:f2:da:7b:1c:ac:2b:6a:
                    92:eb:18:32:44:36:54:b3:85:b5:cd:f1:ea:d3:2c:
                    38:e4:bd:4f:44:ef:01:32:00:9d:9a:ee:03:10:18:
                    80:df:b3:9b:03:00:96:e4:67:50:d4:a8:c2:cb:49:
                    e3:2c:c4:32:a4:73:25:57:a2:a2:56:54:b7:7d:8b:
                    ed:ac:3c:40:2d:32:f2:ff:19:51:d1:3e:63:bb:f8:
                    82:9f:c8:a6:51:03:db:e4:92:83:46:e6:a5:2e:32:
                    c1:08:94:c4:c1:0f:f4:09:fc:02:05:14:a2:43:58:
                    32:5c:1d:41:6e:a5:0e:fc:cd:29:29:a6:43:e8:f1:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:43:AF:F7:6D:0F:D9:2E:1E:7A:E9:DB:B8:C0:B1:1B:93:FB:7F:0F
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:87:ea:4a:86:7e:44:09:82:8d:0d:35:ca:28:91:a2:65:cd:
         0f:14:e0:4a:f2:33:28:c1:32:5d:64:c7:71:cd:3c:2b:24:aa:
         dc:a3:fa:e0:38:f8:78:14:92:f1:ef:53:e6:ae:4f:e2:48:05:
         5f:3f:5e:66:40:41:4e:1c:72:dc:9e:9a:7a:72:c8:a8:1b:3b:
         d4:89:d7:85:72:4a:70:a4:b4:30:26:3e:c6:51:0e:d5:a3:0b:
         b3:c8:75:29:fd:f1:39:07:62:b2:09:9b:8d:b4:60:f1:86:45:
         a6:a7:34:5a:87:b5:73:4a:53:0a:56:a3:8c:d8:d7:37:b5:db:
         48:c5:fb:42:5a:bd:2a:0f:16:36:6f:72:38:17:b0:e1:42:89:
         f2:51:d7:3a:3c:4f:77:23:7d:a4:90:ce:66:a0:b0:0c:16:8d:
         15:ea:b4:dc:69:64:1c:a5:2e:06:5d:54:07:8d:67:96:35:fb:
         8f:f7:0b:84:8c:db:23:14:05:f8:59:e0:9b:eb:01:10:11:f2:
         dc:4d:71:4b:61:33:08:34:42:6e:3e:cf:4d:79:32:c8:00:07:
         cc:e1:db:53:e9:fd:8b:d2:7a:a9:21:a4:b6:2a:bc:b5:2e:0a:
         9a:98:60:01:9c:50:39:67:b0:fc:93:f9:53:ce:19:15:37:03:
         43:42:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----