Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File:                     Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier:          xYVSEoDNpr9aKnv1rlbIcfU4WpjL70zCazgW64wEzWI=
Subject key identifier:   89:57:BC:26:BB:4C:31:D9:45:6C:D4:87:BA:70:31:72:1B:0E:03:74
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer:       /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial:       01962F74CD1CFF9763EB8C57675C38F634AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number:          1503
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=)
                          2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=)
                          3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=)
                          4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=)
                          5: OFV1r1QJow53fRZBggEbIKMbl2g.roa (hash: rW/jUWytgGfLF3WCPUKqcjsSdM1E9Dkl4C0j/GKMBjY=)
                          6: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=)
                          7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: IC1CfyNsXw+PUlk+V87CrHmgVM2jrticebBK/mdoc5w=)
                          8: cId8V7j1DXooq_T1g9EFQ0FCvzw.roa (hash: QJXoETg4tOT8lLS3JnVPNBwPS3l57Eztn4NIz3Sxb1s=)
                          9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=)
                          10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:1c:ff:97:63:eb:8c:57:67:5c:38:f6:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=8957bc26bb4c31d9456cd487ba7031721b0e0374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:e4:1c:c4:eb:83:1d:c5:31:d5:cf:02:13:
                    8a:49:98:78:fb:07:d6:a0:a6:aa:dc:11:54:74:3d:
                    b7:b1:aa:d0:a6:28:fb:88:01:1e:b4:4e:fd:93:b3:
                    4d:52:f1:39:34:d7:0b:fc:42:be:51:cc:ac:73:79:
                    45:8a:dd:dc:dc:5a:09:ac:f0:59:bc:a2:ca:c1:b3:
                    8f:6a:b4:84:a2:ba:15:44:b5:04:48:15:0d:e5:f9:
                    ce:b5:7c:75:24:a9:2b:cd:14:6f:cd:ef:0e:60:1d:
                    3d:83:45:2d:e8:4b:b8:a7:24:3c:fc:50:fe:3b:d3:
                    4f:1c:f6:ba:8f:60:22:df:0b:a0:d1:be:6d:80:0c:
                    80:7b:69:bb:df:87:fd:10:c8:7a:16:50:e5:b3:44:
                    c1:fb:46:84:70:cb:8f:8b:33:d5:07:c5:0e:5d:2a:
                    1b:84:5f:e6:d9:7f:0a:f2:42:c3:4c:83:2b:73:ec:
                    c1:7e:2d:13:24:fe:f8:4e:6f:dd:50:0d:7a:d7:4b:
                    eb:d1:56:f6:6b:78:a9:d4:90:c8:54:63:71:3e:0e:
                    85:b1:1d:24:25:f5:da:08:1b:eb:d5:55:f6:c1:c6:
                    ef:89:eb:69:32:61:31:80:98:78:e7:48:72:b1:f9:
                    4e:88:30:ae:fb:f2:2e:b0:73:ab:e6:3a:91:c2:df:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:BC:26:BB:4C:31:D9:45:6C:D4:87:BA:70:31:72:1B:0E:03:74
            X509v3 Authority Key Identifier:
                keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:18:ad:21:ac:6b:fa:fc:49:5e:d0:93:7c:fe:84:3e:c4:
         da:70:9f:48:c8:46:cd:f9:13:02:ed:f6:b0:aa:2a:4f:a5:36:
         c7:10:96:5a:cf:0b:ae:40:59:f8:6f:b1:d4:52:78:2a:b3:15:
         49:17:13:c4:07:24:8a:9a:34:89:6a:18:1e:80:cd:6d:c6:81:
         e5:67:3c:e5:1b:51:c2:52:6e:42:fa:f2:ea:e0:c4:17:aa:a3:
         0d:27:69:84:32:6a:27:0f:00:63:3e:ca:1f:c5:0c:a3:27:46:
         fc:64:e8:54:32:20:7c:c1:e9:88:5e:a8:35:5f:5a:6c:86:0c:
         ff:25:52:0d:66:27:15:ad:8f:4b:80:77:46:46:7b:34:b8:6e:
         bb:f3:1a:dd:b5:ae:22:f5:0c:96:e5:80:37:a6:40:75:08:ee:
         8c:87:3b:8e:0a:03:25:75:0e:87:a2:10:18:65:59:0a:18:b5:
         ab:00:4e:89:0d:7a:3d:40:51:93:28:64:ec:2f:cb:74:a3:e2:
         24:bf:f6:75:86:58:3c:f7:7c:ed:aa:f0:8d:c0:e1:76:0c:3d:
         45:89:f9:bb:87:cd:a6:09:a9:13:86:3a:8c:90:f5:a9:40:07:
         ac:96:9e:fc:43:37:78:7c:b9:f1:57:2f:79:09:28:71:db:d8:
         78:93:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----