Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          fsptrlYePph85acmsJzWfHlFBg9JXHvpCjebxB8lXRo=
Subject key identifier:   5A:D6:96:92:83:25:56:E1:9E:59:2E:A5:CA:42:B4:F5:86:87:F8:5B
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       01962E98AFFED41602AC6B92B6A242EEA738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          1137
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 2X1Aq3uwv_rdP11PERDf5xc38AI.roa (hash: B7sjMQo7xNloOK1hTmdNbqOOboiaTbdNnO+C5uW+j58=)
                          2: Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa (hash: lJyyoSk6lh9Ke1PZ6fr+wMQ+yXg1/zlIl+iWHK5ln+U=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: yCGtr6PBXgLnm2CVTT+/bsHkFn4w9e9Mfegxxki/XMo=)
                          4: H2cnGkpHBPqjHRGhcHPHqWhpLu8.roa (hash: oHqCaOHDy7adycxKsgn/iaFXF2yuhzvyHsMV1zyHAAw=)
                          5: ILIqRbOHVwxkFJKFfUD52n880mI.roa (hash: cti4+XaqWa64ZvOhVwfuqQKsUk/NB8Q0npKWhfOyakI=)
                          6: eKX38WRBWmtuTwpJydlyAOgABaU.roa (hash: wPEeV7+enD23Ox2TyJ2ri6ktyLrFVlAY5Y0TfZ75Xbs=)
                          7: n7VMq_z-rv4nBWsX2SX-C_orDwA.roa (hash: puDUtCW6BFuWoUT5Yl8pFYj9/gNu+EkYRw2ZisOVmfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:fe:d4:16:02:ac:6b:92:b6:a2:42:ee:a7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=5ad69692832556e19e592ea5ca42b4f58687f85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:17:3e:46:53:45:7f:fb:07:3d:fd:13:9f:
                    4f:f6:7e:6f:17:cc:c3:0d:4f:fe:3d:a8:27:45:93:
                    3b:58:ca:25:fb:1f:c8:8a:af:50:dd:d6:16:ee:ab:
                    97:80:33:33:ea:84:11:17:3f:a4:50:e5:b0:fb:30:
                    ea:f5:7f:57:fd:ff:bc:9f:7b:46:5d:71:96:2f:eb:
                    73:dd:ec:81:a7:d7:ba:79:bf:e0:22:e7:b9:5e:30:
                    92:3c:51:67:5b:70:ad:7d:f3:46:c7:92:82:2d:9b:
                    26:2e:ff:b2:75:11:98:cf:ad:6a:85:13:73:b9:7b:
                    d5:82:f3:62:97:81:af:6c:84:03:3f:1c:75:e6:83:
                    3f:9e:f6:87:15:0e:dc:41:eb:9e:f8:5b:a0:f0:da:
                    19:9a:5f:65:f9:09:91:c8:b8:c5:64:58:36:ff:c3:
                    bc:fd:a2:57:c7:77:42:33:25:fd:09:d9:5b:48:3e:
                    8d:6a:0c:3f:b8:e2:7f:a7:d8:d4:88:fe:b1:13:51:
                    58:2a:c1:ba:5a:7c:1e:f7:59:d7:b7:4f:65:2c:c8:
                    77:7a:95:42:d7:42:65:ec:cf:ae:38:8e:da:16:ad:
                    e5:a3:50:fb:e6:5d:f4:22:10:cb:77:48:47:27:78:
                    b2:37:ef:7e:4e:94:a8:27:86:ac:5a:5d:fc:7b:b1:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D6:96:92:83:25:56:E1:9E:59:2E:A5:CA:42:B4:F5:86:87:F8:5B
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:52:23:a5:b9:49:e4:63:b8:93:78:f6:d6:f2:16:8d:3d:
         bd:62:30:eb:22:c9:c4:61:bf:96:47:10:f5:2d:12:9b:7b:d8:
         a3:74:c6:e6:92:12:db:4a:d9:62:21:74:89:ac:3d:26:b9:0a:
         75:c4:94:80:07:f3:99:c0:d2:63:ac:06:7a:0c:be:f9:06:a6:
         9e:aa:eb:4d:d1:df:be:20:94:3b:91:28:78:30:f6:7a:a7:65:
         46:a9:93:ca:1c:fa:5f:d9:bb:b8:15:9c:bc:79:17:c1:96:99:
         6a:42:86:bc:02:42:9e:c1:4f:2b:27:2f:de:e6:82:9d:ac:34:
         bf:a4:cd:3c:8a:fd:5f:6b:ee:d8:8d:31:cf:05:eb:44:c4:57:
         45:cd:08:97:64:ba:43:73:dd:7e:a3:4a:ad:5d:31:2f:a9:22:
         41:3a:ea:8c:66:43:e8:72:e5:65:2c:e6:48:c4:bc:ad:22:c6:
         72:3f:4b:c7:36:22:45:fc:90:5c:2c:62:c5:b3:50:7f:27:cc:
         d9:4d:4e:d6:a6:60:d8:69:4d:75:34:c7:27:25:c9:29:1c:e8:
         66:49:0e:96:31:df:f0:cc:90:7d:81:23:df:2a:9b:0a:e2:06:
         17:cb:fa:88:9a:bb:af:3e:1b:c0:6b:9c:bb:00:5b:51:db:f6:
         41:f3:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----