Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File:                     tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier:          gQqNPJSIKHlQTZIifuZ15MEaD7f42Q+EXDgRWxAzoQ4=
Subject key identifier:   5F:DD:A2:BA:CC:6E:F1:4E:08:F5:D2:76:98:7E:02:EF:EE:DC:7A:65
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer:       /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial:       01962DF406A24042F51FDCC6AB4E512B07F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number:          0565
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
                          2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: YMIzeU/YYRuIjIIFjFRmcpYaiNS/FJUkszvEDoNjSuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:06:a2:40:42:f5:1f:dc:c6:ab:4e:51:2b:07:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=5fdda2bacc6ef14e08f5d276987e02efeedc7a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:d2:db:70:46:98:6f:cd:30:3e:1b:2f:e8:
                    47:0a:22:f8:22:cf:68:13:4b:7e:2b:5e:27:cd:6e:
                    cd:ef:7c:a0:b3:a2:44:fc:10:7b:92:1c:0e:b7:9a:
                    f5:5c:05:a5:cc:53:35:40:89:99:91:11:74:7d:3a:
                    90:92:87:cb:cf:e2:cc:d2:fd:fd:6e:f7:88:4b:1c:
                    51:c1:ff:f2:f7:83:f2:40:07:47:4d:00:e6:d5:ae:
                    51:0d:a7:f6:42:e2:4d:34:f3:1d:8a:ca:71:ec:af:
                    fb:41:61:26:0a:13:87:d1:98:23:12:e5:e0:03:59:
                    5b:a5:55:b1:cf:ed:f4:71:34:55:a6:39:7e:6d:7f:
                    2a:8d:4c:aa:9e:bf:e3:5f:fb:41:0e:df:32:71:b4:
                    0e:5b:85:91:bf:4b:0a:11:7e:03:88:64:87:8f:ea:
                    aa:86:df:81:72:f2:fc:de:58:bc:f1:ff:b3:60:64:
                    b2:e9:6d:93:cf:94:45:2a:4e:cd:2f:ec:c9:b5:e1:
                    de:73:18:24:4e:2c:18:b6:c1:c3:51:dc:51:c0:6f:
                    67:51:15:0e:79:05:2f:a9:d3:bf:27:51:50:16:53:
                    dc:c9:7c:0a:5f:1a:bf:47:9d:10:dc:98:c2:e3:85:
                    02:03:c1:20:0e:a1:02:97:ba:ea:39:2d:aa:64:08:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:A2:BA:CC:6E:F1:4E:08:F5:D2:76:98:7E:02:EF:EE:DC:7A:65
            X509v3 Authority Key Identifier:
                keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:3c:6f:aa:74:41:6c:c0:6b:89:4a:2e:11:f9:1f:a9:fc:
         d4:4b:0c:4e:06:64:ba:89:6a:5a:d2:d4:b0:96:a7:05:ce:0b:
         33:ef:03:b8:9e:29:55:9c:67:ff:24:d6:4d:6d:8d:37:bc:f9:
         cf:50:0e:8d:e4:92:c0:b3:26:2d:28:f1:12:9c:16:84:53:1c:
         b3:84:31:a8:df:99:a7:26:5a:c1:38:44:fb:85:c1:df:93:7d:
         8f:05:74:df:a2:c8:5c:6f:66:25:6e:a1:b2:c4:5e:5a:da:40:
         46:c1:5f:ae:29:68:c3:6c:bb:27:b4:ec:44:9c:4a:cf:d9:44:
         ac:56:5c:6b:e7:97:3e:d5:a6:f3:7d:91:61:25:30:0f:4f:c1:
         3c:a0:f4:b1:d5:15:fa:ec:d0:f0:3b:db:58:a6:7c:1e:c0:d9:
         77:39:75:5e:dd:ad:7f:78:c4:68:f3:69:3f:fc:b5:f4:50:08:
         44:d6:da:77:70:68:4b:c4:06:dd:72:2d:25:0b:3c:92:79:51:
         f8:c4:72:04:6f:ce:67:fe:8f:27:bc:86:d2:ea:84:d9:a7:bb:
         c6:af:3b:67:6b:63:0f:85:58:20:a0:3e:ea:57:37:00:77:3c:
         7e:de:41:90:94:42:c6:94:b8:59:76:21:87:da:ed:ea:ea:7c:
         b7:0c:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----