Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File:                     xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier:          Xl8qV6XOelC8+BFPVfyv+2UrOCfMG8wcYyl9ttuLb54=
Subject key identifier:   00:12:D8:11:D2:C2:84:BD:19:B7:E7:8E:E2:DA:BC:69:6D:B7:69:65
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer:       /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial:       01962F74521823CCD9D11E38CF820E7863E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
                          2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: vZSqJ2zOYuBsWXgRjEENYfmPkBZn2VhsCy+HTIXa5aE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:18:23:cc:d9:d1:1e:38:cf:82:0e:78:63:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=0012d811d2c284bd19b7e78ee2dabc696db76965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b5:df:3a:36:46:8f:b1:9f:fe:bb:33:a1:4b:
                    59:c5:e6:cf:4e:52:53:d9:b0:2a:e5:11:dd:59:a8:
                    85:87:b2:08:19:09:6e:43:fc:92:13:16:d6:44:d2:
                    82:19:c8:aa:9d:ab:d2:01:9f:49:0c:c9:8b:1f:57:
                    ff:da:66:bc:36:34:0d:3b:dd:05:86:3b:25:7b:c4:
                    e0:f2:92:07:87:34:b5:1f:f4:9f:5f:bf:44:ee:f4:
                    9d:20:69:e0:e0:d0:a8:11:cd:88:c5:a6:fa:6c:ae:
                    da:67:d4:e7:b9:9c:ba:be:74:55:07:52:b4:f4:c7:
                    80:09:07:80:18:97:24:89:5d:cd:12:ce:e5:b5:84:
                    c7:7e:7f:4e:3d:0e:7f:1c:0a:48:88:c9:4b:99:69:
                    e6:7c:1d:97:d9:cf:61:1a:50:d7:34:69:cd:98:12:
                    5e:10:b9:83:2f:e2:d6:53:02:4d:3a:ba:ef:7e:a9:
                    f3:75:e2:a5:44:01:ca:31:b5:f4:f6:f1:5e:4e:a1:
                    a0:51:92:35:3d:eb:59:16:ed:59:d0:a3:fe:9b:cc:
                    ef:14:28:aa:be:42:f4:1a:79:15:c3:9d:b9:4f:9c:
                    50:3d:06:ba:21:e4:8f:37:45:bf:0f:9e:5a:8b:cd:
                    18:e3:ba:4e:f8:b3:22:83:73:d8:78:42:67:61:d0:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:12:D8:11:D2:C2:84:BD:19:B7:E7:8E:E2:DA:BC:69:6D:B7:69:65
            X509v3 Authority Key Identifier:
                keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:40:04:2f:07:05:e1:b0:19:c7:bb:8b:4b:4c:ca:0e:01:a7:
         b2:f1:45:65:d0:74:6c:cc:c9:1d:6b:a0:74:09:5a:88:71:3c:
         aa:a0:54:83:c8:68:4c:c5:30:c3:71:3c:e4:dd:22:59:40:a7:
         ac:bf:63:07:9f:60:1a:28:c3:e4:8f:5e:e9:9c:bc:c1:28:1e:
         4b:1b:c3:2a:92:00:23:d5:cd:0e:cc:c5:ae:6c:c8:a3:25:96:
         3c:b8:bd:3d:85:2f:1a:68:79:0b:67:a3:d7:15:0a:16:07:ce:
         03:9a:7f:95:8c:b0:57:ad:e4:25:9b:99:74:8d:15:95:64:7b:
         fc:32:a1:f2:7b:cd:25:30:2e:42:83:df:78:5d:1b:ad:51:57:
         c2:1b:92:1d:6a:96:48:64:99:12:b1:4d:a9:06:9c:da:db:f0:
         ae:c5:ef:3b:5c:a9:65:a8:53:fa:11:3d:0e:2a:e0:65:0d:b4:
         fa:66:04:55:e8:ac:c5:95:c2:5a:18:c5:d1:a3:63:eb:6e:cf:
         7f:d9:ef:d9:4c:6b:b5:69:7e:2b:c4:b7:04:f3:04:59:c0:12:
         13:7b:dc:80:e7:5d:1a:1c:84:ee:83:8d:44:7e:a8:3f:52:67:
         c2:1b:dc:ab:fe:15:c5:24:0f:ae:50:66:18:e9:a6:3c:e9:11:
         05:da:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----