Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File:                     5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier:          MMcxCtB/DmIJave+pKTM3bLxl09LS9JUxDyZGy1l8cI=
Subject key identifier:   B7:06:59:8C:3A:2C:3C:1C:C7:E7:0B:24:6B:5F:6A:16:22:B3:38:FD
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer:       /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial:       01962E991DE21791D69DC2A29723742245C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: VDEFo4cBlL5YaRuEC3DHmTyyJbkAFUGlNc9MSZl4G4A=)
                          2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
                          3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:e2:17:91:d6:9d:c2:a2:97:23:74:22:45:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=b706598c3a2c3c1cc7e70b246b5f6a1622b338fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:6b:3e:52:86:ec:ea:66:c7:4c:49:d2:71:
                    80:b9:05:93:f2:27:d1:7e:56:79:8a:14:42:0d:a8:
                    b4:7a:ad:d6:77:be:05:49:07:ca:f8:0a:67:0a:85:
                    9d:6a:45:96:07:26:bf:80:bf:93:3c:43:3c:26:70:
                    27:87:41:da:7a:ad:ec:4b:a0:88:fb:c9:3c:96:b5:
                    25:d8:3f:d5:d3:e9:75:ca:cb:42:1a:53:59:82:66:
                    ab:a0:c3:ad:98:1a:4d:1a:b8:9e:85:e4:14:50:4d:
                    c2:52:37:0d:c1:4a:6a:ed:79:80:11:1a:7f:76:bf:
                    c8:02:09:ad:74:7f:4c:61:d9:7e:90:f9:7a:80:5e:
                    c9:00:0a:8f:ed:ff:ed:15:90:16:e7:7f:ca:8c:b0:
                    bb:76:50:d4:6c:04:83:10:cd:a7:e1:3b:e1:37:79:
                    84:44:18:ee:0f:11:36:95:15:d9:89:2d:c4:2c:fd:
                    37:63:36:31:38:6a:97:dc:4a:3b:9f:c2:71:f9:6e:
                    cd:c1:06:ef:96:12:78:4a:59:95:6d:ce:14:5d:18:
                    e9:81:dc:fa:ba:db:df:ed:a2:dc:d6:05:c4:a8:f5:
                    ab:a1:6d:ba:fb:92:df:37:e5:7c:20:9c:9b:31:6e:
                    a9:67:96:ff:9a:e5:c1:0c:65:bf:b1:30:d2:88:60:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:06:59:8C:3A:2C:3C:1C:C7:E7:0B:24:6B:5F:6A:16:22:B3:38:FD
            X509v3 Authority Key Identifier:
                keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:79:13:0c:5a:b3:4a:76:d6:8b:e7:29:ca:e0:0e:04:87:8c:
         06:2e:f7:1c:f2:91:7f:15:56:c8:a5:bd:fb:6a:6a:4a:e3:66:
         e3:d0:8d:71:7b:9c:78:89:07:69:1d:fe:e6:c7:d0:a5:59:01:
         36:30:e1:5f:b7:dd:cb:92:4e:f4:a3:aa:ec:46:9a:5f:74:a3:
         ff:53:d1:16:71:b1:9c:53:b9:03:78:9e:bd:80:b5:31:32:d7:
         b5:d2:fe:db:7f:0c:6f:56:28:67:14:f2:c4:5f:c0:86:de:bd:
         9e:c8:48:13:53:fd:82:90:a5:f6:e5:31:e4:6e:ea:30:02:93:
         21:04:f6:fd:f8:4c:31:19:f7:eb:5b:87:9e:02:dc:69:93:80:
         3d:b5:16:f5:21:29:3c:a0:8e:d2:0a:6a:7a:da:52:6c:d6:a8:
         89:e5:9f:2a:cc:6c:5a:9b:20:b9:d2:db:57:7d:77:84:93:50:
         b9:22:23:bf:b6:3c:e0:9f:06:bb:f3:b3:ec:1f:3b:20:69:94:
         52:dc:b4:30:ee:fc:88:39:3b:62:45:b5:69:f7:4e:9a:12:66:
         0a:cb:e6:1f:db:ba:41:97:b9:58:ac:70:f0:50:e4:65:bc:24:
         f6:22:89:81:3e:27:9d:10:bf:4b:ae:64:1c:4e:1c:4d:be:ca:
         41:a9:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----