Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File:                     xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier:          bfPo2lUwSv95KL3xiIkvx1XuV8vMIc3M6N1V1nyn6ZE=
Subject key identifier:   33:DF:35:D8:74:3F:05:40:B6:22:B2:01:8A:16:4F:87:9C:53:54:11
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer:       /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial:       01962F7430A53571D1994ABE930705CF5DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number:          0428
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
                          2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: /sU/uyDr+MjNWifwHy6XUrmo/R7Dwa+6ukbR4NmRg1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:a5:35:71:d1:99:4a:be:93:07:05:cf:5d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5947a414a8830515656d738a78382890160377d
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=33df35d8743f0540b622b2018a164f879c535411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:e1:83:a9:3c:7a:97:d4:e0:93:b3:8e:f0:
                    dd:e3:53:79:25:ca:00:c8:ca:3e:89:de:ca:70:69:
                    b9:a8:60:0b:e8:97:21:06:dd:b1:a7:4e:ae:d9:f6:
                    22:0e:72:6a:df:e3:99:fd:5c:2b:cb:c7:4e:0b:b0:
                    82:4d:d8:7e:ca:8c:19:0a:03:21:3c:f4:f7:47:cb:
                    de:a4:59:26:b1:2c:9b:24:25:1b:3d:7d:3e:dc:c5:
                    bc:79:93:11:d4:d6:2f:69:f2:22:51:9c:8b:27:22:
                    c4:fb:de:21:8b:87:7c:6c:2e:3d:bb:ae:b9:10:58:
                    cc:89:97:5f:d0:fa:78:ea:c7:5d:f0:e5:ee:f3:b1:
                    d5:ff:5b:2a:9e:6b:51:80:75:a7:53:97:6f:99:a5:
                    42:fb:45:4d:de:5f:91:1b:18:40:05:b3:db:09:81:
                    1c:70:c3:14:87:d5:7d:43:0d:2b:2c:a1:9c:69:58:
                    ff:72:81:6c:05:b6:eb:83:54:24:02:0d:e8:5a:ff:
                    a1:ef:c1:c6:93:5d:76:ef:b5:f7:4e:53:df:cb:77:
                    bd:f1:92:16:fd:71:fa:e4:5a:60:66:e6:90:ef:53:
                    4b:fa:11:b0:f8:a8:d7:61:3d:3e:53:0c:71:8e:b0:
                    78:a4:19:83:89:05:62:08:aa:20:5f:9b:b7:95:6c:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DF:35:D8:74:3F:05:40:B6:22:B2:01:8A:16:4F:87:9C:53:54:11
            X509v3 Authority Key Identifier:
                keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:47:5c:d3:7a:a6:4f:98:e8:5c:fd:ef:23:86:7c:ae:6a:4f:
         aa:d3:9b:c1:c3:5b:6d:a7:8b:25:32:56:9a:8c:df:d4:7e:f5:
         54:7e:77:07:1f:e6:ba:50:79:22:c0:98:20:95:c1:dc:88:9f:
         12:1a:ee:e9:5c:61:fa:ae:39:09:05:11:ec:77:bc:72:59:4b:
         a3:10:b3:83:f8:72:58:9a:5e:c4:37:ee:86:a9:d1:6a:58:bc:
         e8:c5:56:f3:75:e4:0a:70:c2:5e:6a:a7:c1:8e:b4:c4:a9:34:
         ed:70:af:fa:6c:db:1f:63:cc:e0:f0:aa:71:a8:87:e9:09:25:
         12:4c:18:5f:1e:34:8e:12:4f:85:2d:c8:fa:a5:71:0e:5b:47:
         da:c3:c1:08:ba:bf:bb:5c:cd:df:9b:fe:84:fb:7e:4a:84:ad:
         f8:87:c5:3d:c0:b0:69:c1:73:04:a5:9d:6c:aa:9f:e2:41:fe:
         93:c9:2a:31:13:f7:22:a7:d0:47:77:1c:88:88:36:a6:f0:eb:
         56:1b:0d:f0:56:c4:b3:4b:a4:88:a0:29:5f:cd:df:28:49:26:
         cf:8e:3a:98:57:a4:d7:88:22:49:f1:70:5b:3f:43:d8:be:06:
         e6:fa:70:b1:78:68:9c:81:bd:5a:f4:91:03:eb:1b:bb:c6:0c:
         6e:b1:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----