Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
File:                     5xhnDMKBDk0YFTtuTnhBPBz0748.mft (raw, json)
Hash identifier:          QlKSJ2DO/aThXPBTsRPvLKb6zWMKbxynUE0AYDD4Rbg=
Subject key identifier:   CF:FD:E3:D1:25:A0:DA:40:87:5B:2E:3C:A4:C0:22:EC:85:B6:58:7D
Authority key identifier: E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
Certificate issuer:       /CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Certificate serial:       01962DF41F5E883506954B3F532CE147678B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 5xhnDMKBDk0YFTtuTnhBPBz0748.crl (hash: g5CYkdUpH2w4x3JcEotsQ9iK5+GLIgwvj55JHH3b1uM=)
                          2: McOsQMvjBBddr62PC0udNAkTiZE.roa (hash: XNiDpIia1i2lCsXP0+KatnkvQgNyXMN/LXGQLjKFa4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:5e:88:35:06:95:4b:3f:53:2c:e1:47:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=cffde3d125a0da40875b2e3ca4c022ec85b6587d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:44:2c:87:85:63:59:b8:66:4f:9a:47:eb:
                    0e:71:0a:bf:2a:2d:44:cc:cc:8b:ea:c0:ce:ea:a9:
                    88:5a:50:d8:af:ad:3e:53:55:b8:3a:e5:81:d6:98:
                    da:b8:cd:4c:2f:46:23:83:44:48:e3:66:46:d6:69:
                    85:de:69:ef:35:09:f5:ee:be:ee:e9:d1:b3:31:1c:
                    7e:36:cd:63:0f:00:5c:c5:af:5e:2d:fa:f4:cf:2f:
                    19:fe:eb:40:c8:d3:7e:9f:ac:e1:10:b1:32:e8:10:
                    a3:18:d9:ee:c7:45:86:ee:4a:2b:c4:9e:99:54:c8:
                    c9:45:d7:b3:28:74:32:d1:f3:6b:4c:b4:d0:99:33:
                    8d:aa:65:a4:3d:0f:c0:55:e9:7e:58:a2:44:c3:d5:
                    6a:9d:3e:cb:af:93:21:9c:bb:c8:02:ec:9d:2d:f7:
                    27:13:50:45:4b:2d:84:f7:02:c1:cf:5d:ba:9c:52:
                    f4:f8:a5:cd:c5:72:8d:8f:41:32:7b:ff:d9:95:e6:
                    85:27:35:6c:be:2a:95:45:f3:ab:8b:73:4d:3e:3a:
                    da:3d:7d:27:b8:5f:39:e4:d5:f0:e4:12:83:6c:27:
                    e9:79:63:fb:35:21:93:c8:7f:df:c5:f0:1b:73:1c:
                    18:63:b0:0e:cb:42:18:ca:91:27:6d:bd:64:f0:c0:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FD:E3:D1:25:A0:DA:40:87:5B:2E:3C:A4:C0:22:EC:85:B6:58:7D
            X509v3 Authority Key Identifier:
                keyid:E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:92:b1:18:8e:d6:d5:f4:05:4e:de:9d:e8:70:f3:1a:39:
         04:47:a5:d5:47:f4:5a:fc:86:bb:72:3b:7b:e1:1c:01:17:a6:
         45:92:25:3e:1c:8f:69:31:44:7c:cc:90:ae:77:ea:6d:36:61:
         4a:4a:19:11:9c:34:71:b8:a5:0f:7e:71:0e:ae:97:82:3a:8c:
         5c:a8:72:1c:bb:ec:80:12:00:bd:da:d5:d2:6a:c2:27:9e:96:
         dd:ad:81:bf:95:40:65:cd:26:5a:ee:c8:4d:c5:fc:79:e4:dd:
         e1:cc:b7:94:71:10:8c:5a:a0:32:8e:d2:06:de:d6:ad:db:8d:
         1d:ac:ba:32:6b:99:29:ad:19:5b:b9:90:63:a4:8f:1e:45:0f:
         02:ad:8d:2f:c9:8c:a2:b9:12:b8:d5:f8:f5:43:3f:c6:7a:5d:
         9b:c4:e5:c2:cc:51:e8:e9:ef:c6:ab:91:be:3e:ba:e1:89:27:
         df:ca:93:ce:42:8a:3f:5b:f5:3d:de:6a:85:64:5f:d2:3f:ac:
         a4:81:05:86:98:81:ad:0e:ec:92:7d:79:ec:1e:d7:8c:aa:07:
         22:d5:42:61:1f:72:5a:ea:14:6c:7c:0c:68:c9:04:17:52:3e:
         a6:18:0a:cd:22:84:79:cb:5f:6b:ff:c6:78:a6:6d:ea:ec:5b:
         63:fa:bc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----