Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File:                     XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier:          DazqkvvqFmrQqt7kjGlVOp0YRI86JAtnOLQdpveIcec=
Subject key identifier:   95:E5:78:35:5F:1A:0A:52:C4:64:A2:EA:C4:18:F8:C3:1B:4E:D8:C0
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer:       /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial:       01962E2AE21B0D1C95F97DE3979D06475A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number:          1121
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=)
                          2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=)
                          3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=)
                          4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: zoic14/dQpYzELKn2LbSCUS1HA7X63wgibA/9otF/mg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e2:1b:0d:1c:95:f9:7d:e3:97:9d:06:47:5a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=95e578355f1a0a52c464a2eac418f8c31b4ed8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:6f:77:9c:b4:6d:74:fe:83:5d:a9:01:ad:
                    a8:bd:c4:46:0e:16:0f:c6:41:1a:a2:69:aa:2f:36:
                    47:0a:77:8b:8c:cb:ca:37:c3:d3:6c:a4:03:85:76:
                    60:a2:f8:30:50:42:0a:36:fb:5d:4b:ca:5a:a6:fe:
                    2f:15:93:d6:d2:1c:90:17:98:a6:50:a4:c0:49:54:
                    35:da:d6:2b:12:89:78:5b:3c:2e:13:60:29:0d:c1:
                    94:bc:ee:26:03:88:bd:0c:70:7d:b2:93:00:6f:71:
                    63:05:ac:4a:dc:ff:dd:ea:e0:b1:f4:fd:0d:ca:e8:
                    20:0b:45:a6:64:bb:c5:cb:26:b9:58:21:91:cd:fd:
                    29:6d:ed:e5:0d:2d:93:3e:26:83:3b:ff:b9:6c:0f:
                    4a:74:70:1f:e2:a6:cf:a9:e1:ca:55:56:50:c7:c3:
                    00:2d:8c:80:46:ed:42:7a:f5:ab:d5:2b:12:84:a3:
                    af:32:e6:6c:f8:20:c5:ac:2a:3e:4a:bb:32:e9:56:
                    e8:87:a2:af:4c:90:e4:25:99:9a:e4:4b:e9:a8:24:
                    16:ce:d2:02:02:86:0c:f0:27:83:e6:28:7f:c5:45:
                    92:91:60:ce:fb:42:91:20:c1:6f:40:78:bc:71:5b:
                    c2:21:2a:21:ac:60:0d:2b:b2:22:f5:75:0c:c9:7f:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:78:35:5F:1A:0A:52:C4:64:A2:EA:C4:18:F8:C3:1B:4E:D8:C0
            X509v3 Authority Key Identifier:
                keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:34:52:ca:cf:48:92:b0:02:1d:82:70:cf:e0:82:23:b3:
         e3:d0:7c:89:25:db:6e:66:cb:90:53:f8:50:4e:73:43:63:10:
         b7:2e:79:87:79:8a:6e:f1:07:41:61:6c:d6:c9:28:0e:8f:41:
         2d:ac:5e:d3:ef:26:36:07:ed:11:e4:c8:d3:45:2d:a7:15:3e:
         38:b2:db:d8:a2:fb:3b:05:eb:03:b6:1e:6c:90:1b:94:57:9d:
         a9:51:85:b3:7a:44:fd:68:cb:ba:54:77:da:6e:28:ba:c6:d1:
         ef:61:96:52:fc:ea:81:8c:7e:5c:e9:71:62:0d:eb:c9:ce:af:
         eb:bb:a2:24:ec:36:f9:f9:c8:57:ba:25:44:54:60:7f:2c:4a:
         cd:cd:39:8d:e6:ed:7f:6a:36:80:15:3f:d3:06:78:0e:fa:12:
         26:2c:60:6d:2f:da:8b:46:ed:f7:ea:3f:9a:c5:b4:09:a5:60:
         92:83:40:f3:c7:5b:f7:7b:e8:cf:5d:f2:b3:62:7b:f7:d7:e7:
         97:09:d9:ff:58:0c:68:b1:6b:0f:b3:6a:ef:ae:cd:3c:b5:0d:
         2c:1a:7b:ae:b9:f7:19:26:68:f8:b3:c1:5c:58:9e:2e:81:e1:
         e1:e5:0c:9b:ab:0e:4a:cd:a7:6c:43:3b:6c:eb:d2:e4:9f:e1:
         a6:60:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----