Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File:                     X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier:          sQ9qBvVi1JcZ3TeoM2lRK9UlNeKWrQPYyKZpX/Rh11s=
Subject key identifier:   68:87:08:A4:6A:16:78:FA:11:63:59:91:36:B7:9D:BD:9E:3D:C1:BB
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer:       /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial:       01962FABABEDB9441F474867A392B2A30F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number:          0A62
Signing time:             Sun 13 Apr 2025 15:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:41 +0000
Files and hashes:         1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=)
                          2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=)
                          3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=)
                          4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: rj2eNXVTE7qWQWF6d1jRuHXscvw3+7yfOCKOAGLyFUo=)
                          5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=)
                          6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=)
                          7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=)
                          8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=)
                          9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=)
                          10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:ab:ed:b9:44:1f:47:48:67:a3:92:b2:a3:0f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
        Validity
            Not Before: Apr 13 15:01:41 2025 GMT
            Not After : Apr 14 15:01:41 2025 GMT
        Subject: CN=688708a46a1678fa1163599136b79dbd9e3dc1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:45:09:85:0e:93:1d:44:d4:4e:97:eb:c7:
                    0c:2a:a8:53:cd:5b:55:3e:3e:b1:6d:50:f7:57:3c:
                    ae:fa:cc:7c:a7:f4:ca:f3:dd:d0:a7:48:be:77:f9:
                    6f:98:7e:47:f6:04:cf:e5:8a:1f:e5:b4:53:d2:77:
                    59:8d:6f:6d:d7:99:72:03:16:06:66:db:78:24:a6:
                    1d:e2:dc:cd:77:62:b6:f5:ba:d8:2e:2e:7c:ab:41:
                    1f:e7:93:c0:7b:f8:f2:a1:9a:a9:8e:00:74:82:38:
                    00:7d:c5:d3:af:06:38:59:c9:f0:88:ce:13:43:d0:
                    08:7e:86:bb:de:cb:a3:5f:c3:ae:fb:1a:a9:15:15:
                    8f:cb:eb:ef:82:ec:0c:b2:48:d2:c5:41:71:c5:48:
                    6e:02:c4:36:f4:11:90:f5:7d:ed:11:ad:1f:3f:bb:
                    ac:d1:fa:fd:5f:43:62:16:1e:75:de:86:99:97:9f:
                    0c:76:07:eb:b2:b1:97:51:ee:0f:79:2b:cf:bb:3d:
                    56:a7:75:72:25:20:4f:1d:60:ee:18:2b:4e:8d:6f:
                    15:b8:04:59:b8:01:34:09:53:ed:e0:e8:f9:9a:8a:
                    dc:df:3c:1a:de:7c:4b:c9:cc:f5:4c:4d:3b:1a:b8:
                    7b:0d:cf:38:3e:6e:ac:02:45:e2:32:9a:2e:be:0c:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:87:08:A4:6A:16:78:FA:11:63:59:91:36:B7:9D:BD:9E:3D:C1:BB
            X509v3 Authority Key Identifier:
                keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:70:c5:d2:8e:ee:bb:f8:a3:f5:9e:cb:18:30:0f:81:93:50:
         e2:28:1c:7a:09:96:6c:59:1a:34:1f:b5:b7:db:31:a2:8e:b5:
         39:e9:a6:e9:c8:59:df:57:6d:18:21:37:3b:53:72:98:a2:3e:
         e0:b0:9c:c5:82:7d:57:cc:67:f8:5e:dd:27:70:87:8c:c0:01:
         a4:1f:d5:75:fe:8e:c2:bd:29:43:14:f3:85:e6:95:8d:e2:8a:
         f3:34:cb:5a:ef:a7:4d:55:f4:ef:d3:15:09:26:60:87:d7:39:
         2e:84:f0:53:50:79:b4:48:ae:ef:6d:43:64:fb:08:c8:d4:d4:
         77:73:d3:06:c2:8d:a0:0e:da:3e:67:ff:4f:f9:d4:cf:41:e5:
         69:de:b3:af:d0:9b:63:ee:d6:e6:a1:5f:de:27:83:1b:2d:28:
         59:45:98:24:02:bf:c8:78:fa:4a:6d:5d:c8:42:52:ee:32:1d:
         6a:2b:38:6b:88:cd:a9:ab:b9:8d:87:38:7d:db:ee:a8:49:3f:
         90:83:b6:9d:a3:67:f3:0a:99:40:81:c7:95:0c:f7:79:67:e3:
         d3:56:f3:f2:82:e6:e0:80:ab:fc:fd:09:7a:7f:41:dd:b0:5e:
         7d:ae:84:c3:73:87:77:ec:be:06:fd:3a:30:20:98:28:02:09:
         75:05:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----