Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File:                     xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier:          giz3kBDuX3ApYabaZ2FfofPvxLYQe5IeAh/Z7Ps/T1o=
Subject key identifier:   1C:75:92:9D:58:7B:00:4E:A9:18:7A:57:64:58:EC:40:5B:AE:56:5F
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer:       /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial:       01962F747863C6DDB2A341683A0759D6E798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
                          2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
                          3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: wB9wlx6Hg1DTwBG6+kbSxqAM4DGrtluxx/9QOk/Qjo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:63:c6:dd:b2:a3:41:68:3a:07:59:d6:e7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=1c75929d587b004ea9187a576458ec405bae565f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6c:80:52:78:2e:e1:b5:a5:6f:f3:ff:be:64:
                    39:ae:e3:ab:6b:57:15:e3:a4:ab:16:6b:9a:89:eb:
                    fa:78:e5:b8:d5:b8:99:a5:7c:7a:b7:30:d2:b9:86:
                    48:f6:21:9a:30:12:4a:f2:09:5a:28:cd:ad:4d:51:
                    79:a4:0b:e3:49:fd:b2:b9:85:e5:4a:23:e8:99:a8:
                    63:f3:5e:01:d6:45:62:f2:ff:38:12:96:b1:8a:cb:
                    27:e2:1f:43:a1:1c:ab:8c:1a:2a:f8:4c:7d:92:7b:
                    65:95:74:bd:f8:37:20:38:7b:39:fe:25:5a:47:a0:
                    e9:35:d0:b6:f7:5b:a0:17:85:e0:ae:88:a4:85:fe:
                    87:26:d6:b0:54:7c:ee:d9:c6:c5:b8:5f:ce:ba:d4:
                    fd:e2:c4:f6:16:fa:e1:35:30:91:75:4b:11:0e:73:
                    de:e5:b6:0c:44:b9:56:ab:ab:29:04:54:c7:f7:29:
                    df:f6:9d:95:58:16:7f:70:9d:3a:e7:a7:98:51:59:
                    3a:e1:00:c5:f4:ff:fa:da:f1:a6:89:3f:1c:50:78:
                    89:cd:7a:79:ae:e0:d0:97:06:c4:a3:ca:15:7a:15:
                    c6:91:aa:a1:b9:ce:ed:6b:86:e9:20:75:1e:73:a5:
                    9a:35:cf:16:f1:13:57:8d:76:97:ef:22:cc:0e:e8:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:75:92:9D:58:7B:00:4E:A9:18:7A:57:64:58:EC:40:5B:AE:56:5F
            X509v3 Authority Key Identifier:
                keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:09:62:14:30:99:01:9c:39:96:fd:34:7d:8b:e8:51:90:
         ff:71:e6:85:06:ca:4f:28:36:af:61:94:62:75:8f:34:b9:10:
         f9:5e:86:7c:65:ff:40:42:26:01:52:0c:db:85:d1:90:02:c0:
         31:36:3c:2c:8f:ce:67:72:ac:6c:79:a4:3b:0a:94:d3:c3:65:
         2a:6e:5b:04:aa:2c:a7:de:de:fc:e2:f8:94:e9:1e:ca:c0:01:
         12:c5:6e:03:ce:05:c3:32:0b:90:fe:41:05:97:3d:c6:7e:87:
         c9:cc:5b:a4:c1:97:78:0c:b6:f3:38:c6:ac:fc:d7:39:fd:2f:
         b4:09:6b:13:d7:71:e5:49:56:08:bf:21:6d:47:75:1c:9a:74:
         62:13:11:db:9f:34:f7:c1:13:59:47:d6:b1:5e:de:d3:0f:0b:
         55:25:05:44:cb:0c:7c:64:87:83:17:2a:f8:f8:ed:80:0b:ca:
         9f:e3:d3:e8:15:92:7d:4e:0b:0a:2f:8d:f1:24:14:fe:be:68:
         c7:c2:62:10:c0:e9:a4:d1:87:4e:cd:d9:95:24:59:ec:8e:2b:
         bc:71:77:86:67:d3:b6:72:ff:af:62:8b:b6:9c:a2:03:24:ac:
         d4:10:89:2e:1c:59:91:01:6d:c1:f6:37:96:65:a8:41:4a:6a:
         64:4d:7e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----