Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File:                     X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier:          z43XhdC9MXLAnrNzhuwPr54hSi+PkXSDD/bxCH4QfLQ=
Subject key identifier:   A3:12:DA:B5:60:72:A2:0E:CD:5E:CA:36:A6:4B:50:5F:12:3E:59:49
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer:       /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial:       01962F748B348E5990E0B723306E50EB6B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number:          0F97
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: JSP1zwzTImOt1lDTmXgypYrXyL7W253ig3DtE4z4SEk=)
                          2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:34:8e:59:90:e0:b7:23:30:6e:50:eb:6b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=a312dab56072a20ecd5eca36a64b505f123e5949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:63:6c:5e:51:f0:80:8a:92:94:74:7e:2f:
                    97:bf:b0:fd:42:f0:a3:d2:ef:4b:23:12:3a:8c:a5:
                    3e:be:5b:06:53:1a:00:3e:c5:62:f8:05:f2:01:d7:
                    28:08:eb:75:e0:17:ee:c7:0a:c2:02:0a:0c:6e:bb:
                    d3:7e:c0:6a:42:18:b6:f6:27:0e:cb:4a:46:da:54:
                    7c:6a:63:1d:dc:17:b6:f8:2e:03:28:41:be:a2:e1:
                    fe:eb:be:32:c7:91:61:97:27:5a:e5:de:aa:fe:20:
                    7e:41:d3:6c:36:29:5d:68:58:a7:21:ff:10:d0:b6:
                    8f:06:a8:d7:bb:43:69:b8:02:2b:e7:d0:ee:9f:7e:
                    bc:f6:af:05:6e:0f:4d:1c:81:66:84:7d:68:18:62:
                    3b:7d:b2:a8:f1:4a:fc:99:03:e7:db:65:f2:0d:10:
                    9e:5c:f0:31:c5:66:1f:19:1a:a4:d0:77:fb:44:93:
                    29:0d:32:ff:39:0f:c2:2f:f3:80:e3:75:78:f7:d5:
                    9c:08:9e:d5:3c:98:b3:22:f6:0f:9a:af:03:71:19:
                    f7:e9:aa:f3:00:a6:bd:d1:59:7a:5c:c6:a2:ab:80:
                    85:39:07:ff:a4:f2:a6:3d:35:ca:27:2a:fa:1c:bd:
                    cc:9d:0d:3f:e5:6b:1d:8b:69:0c:9a:cc:c6:b1:38:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:12:DA:B5:60:72:A2:0E:CD:5E:CA:36:A6:4B:50:5F:12:3E:59:49
            X509v3 Authority Key Identifier:
                keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:7c:64:a9:a0:32:bb:ec:61:ed:b6:7f:fb:9b:7b:c3:a3:
         4c:23:bb:36:f1:a9:ed:ba:e1:da:75:fb:78:7e:af:09:d4:90:
         6d:e2:45:50:f3:18:a1:1c:23:ab:74:53:8a:35:e9:4d:70:0e:
         eb:2a:56:a7:08:59:c0:d9:02:2e:ad:93:96:43:b5:f0:33:53:
         3c:03:48:6d:87:2e:df:ca:4a:3b:c6:1d:ab:ec:78:f3:7d:c3:
         9f:85:d8:44:dc:80:2a:e1:04:ef:30:d8:79:6d:1e:5e:36:ae:
         ea:c6:8d:77:3a:93:8b:04:b9:83:bd:73:1a:52:14:13:45:99:
         5a:12:7c:82:a4:87:b0:23:74:d4:66:61:57:e1:d5:0a:24:21:
         cb:b5:9f:1b:eb:71:5b:a2:47:64:3e:54:28:a1:46:c5:d4:25:
         1f:ba:9c:34:02:2b:25:05:4f:bb:10:f4:ef:14:24:93:eb:fa:
         e1:1d:ff:70:7a:ad:a2:e2:d1:4b:ef:8d:9b:ab:dc:92:dc:37:
         fe:0f:5a:90:e5:52:9b:49:d4:41:59:a0:5c:fd:5b:70:42:cb:
         c6:14:0d:b8:81:7b:49:25:cf:bb:8c:e5:6b:75:ec:37:41:48:
         0c:8b:6e:e3:71:d0:94:72:da:72:e4:df:3f:cd:92:7b:12:bc:
         21:c9:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----