Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File:                     Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier:          IddIeJqU1taGKuKxYdMUhSD79zonzsFb/ia7dN4B2ZI=
Subject key identifier:   DD:72:DB:33:94:AE:5F:10:73:96:84:F1:03:71:D6:BF:A5:47:DB:F9
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer:       /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial:       01962FAB5A44DA45907C6037BE376FE3CFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number:          09DB
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: J8DHZy4tMi-CFo8AY9DJvx0HWac.roa (hash: 5pNADEij5vtMepG8+Pp6x2k3eZ8RSfQB0arADw8u/hQ=)
                          2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: brNoNbGU8YbdAEhAJltIjFlSBnesiFEYzKQpyJukS+4=)
                          3: bm8bVIPNaA-bltdEZPHxvRw4XQU.roa (hash: DdBeXwj6zhT54fs1VrM1Iq2GimR5mvINmSrgTPAY9tY=)
                          4: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5a:44:da:45:90:7c:60:37:be:37:6f:e3:cf:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=dd72db3394ae5f10739684f10371d6bfa547dbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:06:7e:04:97:66:63:49:08:95:23:5d:0a:
                    49:9a:1a:17:95:3d:30:19:40:c9:86:2a:8a:d7:82:
                    ef:2b:e6:dc:9f:38:a7:35:40:1f:0e:2c:6c:18:92:
                    28:27:03:a2:26:8c:91:d4:18:a9:d2:60:a2:22:5d:
                    b9:21:bb:3b:4f:cc:ac:70:ad:8a:e0:ca:35:af:85:
                    dd:f6:f0:98:77:f3:6a:2e:50:04:9e:ac:1a:9a:0c:
                    be:8a:1e:83:aa:89:a7:de:39:25:12:c5:4f:94:bc:
                    df:b4:0e:e8:81:c2:a1:dd:bb:9e:47:30:6e:8e:ac:
                    d7:68:a0:e7:c4:a1:20:db:95:da:0d:e6:6f:ca:84:
                    8e:82:50:c0:9b:46:cb:08:37:ac:31:cc:4f:78:a4:
                    95:62:40:7a:9d:29:14:01:06:c6:77:e4:50:25:8e:
                    e7:7a:a8:7b:52:e3:4a:b5:7c:90:55:3d:01:d9:4f:
                    81:18:5e:a7:f7:9b:34:d2:fd:ef:b4:31:51:d8:f9:
                    b0:53:bc:67:89:ab:66:04:a9:59:ab:49:67:d3:24:
                    14:ca:3a:3c:d8:34:31:a3:16:c8:43:c6:2a:83:b3:
                    83:7a:ab:46:a1:e2:a3:1f:7e:bb:8f:e7:0c:f5:05:
                    c7:75:bf:95:55:f4:20:50:72:7e:5f:99:be:6c:f9:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:DB:33:94:AE:5F:10:73:96:84:F1:03:71:D6:BF:A5:47:DB:F9
            X509v3 Authority Key Identifier:
                keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:64:56:98:36:8c:d5:f1:af:78:1e:bb:16:f8:a6:a6:5c:ae:
         52:ce:55:9b:b4:7e:d7:0e:49:a6:e7:d6:61:b9:6b:0e:4b:a8:
         19:8b:bd:41:5b:02:8f:4b:be:2a:47:60:48:86:ce:51:70:33:
         d3:5a:e4:48:89:2a:4e:db:15:53:5b:b0:3d:e1:43:28:92:30:
         2c:b4:e7:51:aa:16:f6:ae:19:1c:1d:71:03:8e:96:49:2a:5b:
         2c:6b:fd:c0:0c:57:2f:90:ea:d4:24:d4:95:d3:92:5d:45:94:
         85:0c:a4:e4:68:33:15:05:47:8b:ce:f3:4f:67:59:9b:32:30:
         ed:6b:80:43:ed:65:ac:cc:62:7c:ac:08:07:24:bd:84:59:db:
         5e:69:54:f3:42:ca:3c:c8:e5:27:90:42:4b:37:f4:0a:1f:81:
         d2:bd:64:5d:5e:a8:11:e5:bc:c4:57:26:1d:03:11:e8:ea:0f:
         3f:8c:6b:fc:16:8c:29:a0:3d:7e:cd:f4:a0:8e:ef:98:21:18:
         45:4a:90:8c:f1:ab:23:90:15:c8:8e:73:73:b7:fb:2e:95:ab:
         10:51:95:07:0b:b1:b9:33:d7:d3:ad:2f:b9:10:81:41:ba:14:
         91:06:e2:a0:e5:c8:91:11:1d:0b:5a:ac:2d:4d:a4:92:3c:23:
         0c:80:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----