Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File:                     CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier:          jDRhvyI2afK4t6ZoCfhKPv0wJHsnDy32OgexXGsc0RI=
Subject key identifier:   7C:D2:CE:90:AA:85:B6:B6:0B:F1:19:B3:65:3E:D3:39:13:49:36:59
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer:       /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial:       01962F7440BCC8CEAD11C0CB79ADAAC87281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number:          05E6
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: 5dtsHs3ql6xGilUcBaiI8VH4bT1j2TI6gA1pD5q9sUE=)
                          2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:bc:c8:ce:ad:11:c0:cb:79:ad:aa:c8:72:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=7cd2ce90aa85b6b60bf119b3653ed33913493659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:dc:ee:a4:4c:19:be:17:b5:bf:b3:7f:27:
                    50:97:ff:05:b5:62:68:b2:96:15:f1:e5:b0:f5:b2:
                    03:63:87:09:16:55:5b:05:b4:02:a3:7b:f4:76:9d:
                    8a:5b:d9:72:3f:bc:92:a5:ee:fb:ce:c1:44:8b:28:
                    e8:b5:e4:81:fb:12:ea:ad:28:27:af:d9:6e:30:b9:
                    8c:d1:dd:df:46:fe:c3:d8:ca:b7:4c:d2:ef:14:f7:
                    a2:65:75:cf:44:ef:e1:33:17:83:b4:24:b4:5e:3d:
                    78:3e:3e:6f:83:0c:b1:d0:2d:16:dc:ec:ce:3d:52:
                    81:3b:fe:f7:bf:14:bd:93:c3:83:3b:b6:c7:37:39:
                    42:3c:c1:8c:08:30:5d:55:a8:fe:1b:ee:ee:96:55:
                    a5:5f:be:e6:c1:a2:d6:1a:01:b6:1b:d5:f1:41:e6:
                    1c:62:17:8c:9c:90:a3:2f:28:a7:6f:62:6c:43:af:
                    dc:19:2a:cb:5c:2d:c0:12:44:bf:94:4e:fb:59:9b:
                    4f:ab:03:2e:5c:93:85:ea:48:eb:d3:c9:66:bf:12:
                    fa:e8:bc:23:bb:25:bf:a6:cc:79:54:9d:d1:8a:b7:
                    ae:50:34:7c:99:b1:81:39:ca:d3:7c:86:66:d2:e8:
                    18:64:c1:33:c3:b3:f4:71:a3:b6:b6:53:60:e6:f5:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D2:CE:90:AA:85:B6:B6:0B:F1:19:B3:65:3E:D3:39:13:49:36:59
            X509v3 Authority Key Identifier:
                keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:11:83:5c:24:e8:89:89:10:10:6e:b5:bb:4d:f9:77:d2:
         30:7a:ee:13:4a:e8:bf:8d:06:8d:d3:ab:42:0f:3b:a9:b7:67:
         ac:5b:ae:0d:37:ea:6e:e4:de:45:18:29:e9:13:d3:2c:fb:20:
         f8:4b:10:3d:2e:05:f4:b4:fd:bd:14:2f:df:e7:b4:ea:77:97:
         92:a9:37:b2:79:ef:7d:6f:97:80:77:5b:55:94:e9:79:41:a1:
         15:de:63:4f:83:5a:db:d7:00:3f:43:49:23:36:af:4c:68:fd:
         4d:2f:cc:fa:34:17:e0:f5:bf:eb:61:47:60:78:0a:8d:67:53:
         a8:cd:ec:bf:f1:df:88:47:72:85:3e:b0:84:72:31:c4:81:00:
         bc:a1:e8:a7:42:91:d0:2b:ff:42:99:5b:55:07:45:06:d1:00:
         32:4c:0a:1e:cf:ce:5c:09:18:ba:7e:64:76:22:53:90:68:3b:
         f4:8e:5a:8e:03:ac:f2:e5:47:69:25:49:a5:cd:00:f1:ff:13:
         19:2b:d3:90:d8:47:2a:80:d6:fc:01:44:ef:55:bd:fe:12:ee:
         a7:b5:fd:08:b8:54:86:b7:88:6c:62:1e:dd:e1:80:a9:fb:52:
         21:41:90:4b:36:c3:8d:6d:b4:ce:2f:8a:49:57:53:57:4c:39:
         d8:1b:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----