Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File:                     XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier:          GCd689ZyyBmJ5NuWg4ItsMPQsfCXjUYKo8RyktcE09Y=
Subject key identifier:   18:9F:EF:76:2E:75:97:63:5C:3A:37:3B:C5:86:7C:6B:E0:0D:90:86
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer:       /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial:       01962E98F20EA9D25AAD6228EF03513045B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number:          0D21
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: SZ3em8AEfd+hb4cKqqivhqCAvTEcCxgcosX5dDyW1e4=)
                          2: aeqC4EE0KUZ0Hdgey5muRSCYEvc.roa (hash: aH7XcxnHv3qEq7LQXqlBVrjotePFAy5nc/77ZI52Ock=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:0e:a9:d2:5a:ad:62:28:ef:03:51:30:45:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=189fef762e7597635c3a373bc5867c6be00d9086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:bb:05:dc:34:e3:e7:5b:c8:fd:39:f9:27:
                    04:78:ef:b1:64:ce:58:35:e6:29:21:5a:dc:b9:a4:
                    70:5b:2b:50:fe:2b:50:c7:40:c5:15:16:3d:b8:ec:
                    ce:0d:f8:69:10:7e:7d:10:c1:e8:1e:46:0b:c6:98:
                    6f:e4:6a:f3:90:d1:de:28:eb:02:6a:4e:9f:c3:42:
                    44:4b:8e:97:6d:d6:7c:25:3b:67:32:c8:3d:db:f8:
                    e0:be:83:5b:1b:3f:df:ac:37:0c:cd:88:78:db:d1:
                    1f:ab:a6:e6:49:c7:8c:de:f0:c0:e8:92:75:07:37:
                    0b:58:17:66:eb:e7:88:77:a1:b7:0a:ad:0a:f2:41:
                    ba:a3:9e:df:18:c2:46:62:62:0c:fa:b8:f6:ed:06:
                    c2:cf:75:20:15:aa:12:e5:2e:7e:b2:ad:4d:85:b5:
                    37:af:3d:42:a1:92:6c:0c:b9:8b:97:4c:7a:52:90:
                    c3:00:1e:c1:4e:04:88:eb:bf:b7:0f:38:e2:25:36:
                    5a:39:48:2c:1e:3b:33:e4:a6:af:44:3c:7b:cd:d6:
                    9d:05:8e:e8:4c:1b:a3:e2:07:22:45:ed:e9:78:df:
                    8f:1d:dc:bf:6e:5d:e6:5b:8a:6c:75:dc:ba:63:e0:
                    40:68:fd:3e:70:d5:23:1e:71:99:06:a8:20:4a:c0:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:EF:76:2E:75:97:63:5C:3A:37:3B:C5:86:7C:6B:E0:0D:90:86
            X509v3 Authority Key Identifier:
                keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:e9:13:c4:00:01:6b:a5:f1:1a:7b:ac:60:09:bf:eb:04:
         c2:52:fb:55:79:c7:47:b6:fa:54:c6:a8:dc:f2:6a:e6:93:04:
         4c:70:f6:1f:92:0f:77:b2:95:46:13:33:c4:ac:6b:c1:9e:da:
         42:65:d7:be:f5:83:e4:a7:e6:68:50:4c:2a:cb:e8:06:9c:9f:
         a9:2e:d1:28:3f:28:d9:96:14:09:94:9e:8f:7a:94:f2:da:00:
         f3:67:90:f1:00:a9:3f:60:ef:b5:df:db:8d:24:73:38:a4:94:
         64:b0:6f:d0:b2:31:0a:30:23:ee:06:45:a9:bb:86:f3:1f:01:
         37:1f:3b:32:a5:72:66:20:e9:00:1f:9c:d0:74:f8:a1:97:8b:
         6f:5c:03:ef:3c:0c:27:70:a6:16:e1:36:60:00:c8:75:38:1a:
         dd:a6:46:35:b4:9f:ea:89:46:f6:0e:61:c5:d6:e2:32:e1:55:
         fb:8c:d3:9b:5d:cd:13:f4:f5:43:67:a2:62:2c:79:9f:f1:5e:
         0f:50:29:47:5d:3c:8f:db:43:1b:70:6b:29:26:6c:8b:9b:8e:
         06:96:37:e0:ef:86:2b:e0:6e:6a:99:c1:27:b1:b4:35:5f:63:
         15:d9:9c:33:01:d3:a1:d1:28:bf:6d:f8:ac:ff:f2:65:a8:f2:
         d4:73:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----