Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File:                     xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier:          XEx6/wu76urY65RnF2ZhwYlYb1FBpCau3Rxb5LNIYFM=
Subject key identifier:   E3:E5:28:7A:3C:25:E9:66:3B:8C:AB:D4:12:9D:D3:1A:3B:C8:7A:37
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer:       /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial:       01962FAB8F0AC41840A8627562155F8A1D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number:          0150
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
                          2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: 5TmXt7BTJusNEfiVhLsCYNBmWTm7Rg/NlLgEk/Zc0gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:0a:c4:18:40:a8:62:75:62:15:5f:8a:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=e3e5287a3c25e9663b8cabd4129dd31a3bc87a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:a1:73:cc:d3:ff:b5:1e:10:ab:ae:a0:cd:
                    60:ac:64:00:56:72:df:1f:6f:5d:98:b7:86:24:79:
                    d0:76:ff:bc:4f:b5:e3:4d:6c:4c:84:fd:46:ff:00:
                    f4:60:be:3c:99:ff:05:75:ad:66:9c:60:64:f8:bc:
                    f8:11:ee:99:b0:84:b8:ab:d2:67:05:2c:59:19:90:
                    4a:04:0b:c0:b4:3b:a9:d9:42:d6:61:d7:1c:71:f5:
                    5b:1c:b5:d5:8a:54:c5:eb:2f:cd:d7:fa:7d:de:fa:
                    45:de:2f:e8:f1:ba:78:8f:f5:49:48:93:11:96:8e:
                    0f:5a:29:9c:ab:c5:5c:04:f9:06:d3:bb:a3:30:b5:
                    b9:d1:a7:1a:61:91:cf:d9:be:61:28:5e:b9:89:18:
                    62:0d:22:03:9c:0f:88:63:44:fa:76:c3:6a:f0:4a:
                    1d:ad:05:64:69:7a:53:d9:fb:82:6a:b2:3e:3d:51:
                    2d:d9:a6:46:77:f4:9b:e8:a9:dc:22:f6:11:21:a2:
                    7a:77:79:41:f3:8f:fe:88:44:92:8a:2a:17:0c:53:
                    ad:63:3a:b5:f4:02:07:2e:72:61:90:17:ed:fe:f3:
                    66:61:6b:4c:06:c0:73:da:75:c7:b7:d9:56:ec:87:
                    ec:89:7c:f7:5b:49:89:70:f2:1b:7c:43:c6:82:41:
                    2c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E5:28:7A:3C:25:E9:66:3B:8C:AB:D4:12:9D:D3:1A:3B:C8:7A:37
            X509v3 Authority Key Identifier:
                keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d6:be:86:27:b8:83:fc:a8:94:64:ca:3a:bc:23:73:2d:8f:
         b1:d2:5f:b5:30:40:19:06:a8:90:8b:c3:69:f4:c0:29:d3:8d:
         16:ad:97:5a:bc:2a:46:57:0d:79:ef:e6:29:cb:6c:0a:0e:d7:
         b8:5a:1f:9b:fd:eb:45:b4:3b:cd:1b:8f:8c:15:d3:fc:94:fe:
         f8:03:da:69:b8:4a:c5:2a:d0:b0:63:01:7a:92:71:6a:55:e3:
         5f:f4:37:5c:08:a2:99:6b:9e:53:26:ad:42:59:76:61:07:9d:
         09:97:0a:17:1e:d2:ea:bf:9a:65:90:c0:da:62:60:b2:f2:db:
         80:2a:c6:7c:fd:70:09:eb:b4:20:b0:a2:5a:5a:bf:1d:a7:98:
         9c:bf:a2:19:32:bc:ed:89:21:3e:d4:f8:ed:53:86:e2:c4:64:
         e7:d6:c5:10:06:93:f3:b9:22:9e:72:bc:96:1a:b7:3f:c5:c4:
         76:2b:05:6c:6e:58:f7:6b:22:29:86:de:f1:b4:24:50:0a:e4:
         ba:53:67:8f:00:2c:61:b0:f8:d1:85:a5:cb:74:76:29:28:3b:
         8f:35:eb:b3:97:db:30:fe:62:ee:00:b6:ba:07:12:64:66:39:
         6c:e4:76:79:06:02:ca:2d:99:3b:1f:40:d2:e9:87:49:9d:85:
         2d:85:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----