Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File:                     Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier:          9DblYLbAXJjyyQ/iaFYI0y4eu75hsMPTizAVQD3unjI=
Subject key identifier:   5A:FC:14:10:0E:18:30:7C:71:EB:1C:7F:9B:ED:3F:4E:BD:6F:92:35
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer:       /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial:       01962DF3DE9934C5F6F09068A2A29B8F39DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number:          0843
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 05UqSuwLBRqPCroKa-NSlHo3suk.roa (hash: rVUvpxf5/0qhzBCE7eXYV4m07Wn+wX0M/lyBozQz/Xs=)
                          2: 5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa (hash: E3lbfmXYIuXSBdLAP3yH+RdxLJCz+3LRF0JUsGgut1Q=)
                          3: ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa (hash: LjPhXG/jk9vLP7Tlf0sh6p1Ib2Ym30X7fvGZjIomxZg=)
                          4: PXKLJWRK5JT5xqHPiU1wVHkKhag.roa (hash: f7UVVCkNNrYtkhi2nz2OzhGEpHRkcJKbi1gQjPZ3lQk=)
                          5: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: 17SzkQOk1vzMALY36p5sXIrqqVU7rx3P5SpLPkxcQtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:99:34:c5:f6:f0:90:68:a2:a2:9b:8f:39:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=5afc14100e18307c71eb1c7f9bed3f4ebd6f9235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:68:b2:c8:14:4f:2b:94:5c:68:37:31:66:
                    00:b9:2f:98:da:33:3a:28:3f:97:c0:7c:62:64:fd:
                    d0:c1:d9:f4:ef:8d:7d:8a:c6:81:72:8c:eb:6e:50:
                    5e:49:a6:6e:c0:91:20:25:c1:7f:06:60:43:96:34:
                    50:c6:28:61:5e:65:78:35:0c:a7:f0:9d:3b:c7:fb:
                    83:fa:12:e7:36:48:f8:7a:3c:9f:e9:a7:7b:ce:c4:
                    59:e7:1d:a1:70:21:2b:ce:61:67:af:59:2f:f2:d0:
                    db:0d:fc:9b:70:12:81:85:7f:5b:53:74:59:3e:f5:
                    35:00:fa:bc:2f:ee:7c:75:3c:78:6e:a5:ed:f8:f0:
                    d5:c5:29:ac:c1:77:a6:d4:73:5f:c9:00:0a:e9:66:
                    0a:80:05:80:90:62:e3:2b:13:3b:c3:8c:4c:5f:bd:
                    42:37:aa:be:7e:73:27:b7:36:85:1d:61:93:7d:0a:
                    98:63:2c:47:29:94:b0:64:c5:d4:b4:bb:cf:ae:5e:
                    70:6c:46:b4:d1:52:a9:5a:71:a3:ae:86:ea:bd:c5:
                    95:5f:97:61:b4:90:01:e6:f9:81:4a:81:2a:df:4e:
                    17:4d:82:6f:59:f0:54:a6:5f:90:01:b2:df:89:bf:
                    e0:3b:8f:7d:dc:f2:4f:95:36:85:b2:ec:7b:46:0b:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FC:14:10:0E:18:30:7C:71:EB:1C:7F:9B:ED:3F:4E:BD:6F:92:35
            X509v3 Authority Key Identifier:
                keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:49:2b:05:cf:1c:46:4c:d1:2b:4f:19:40:56:e7:25:3c:
         2b:6a:b0:26:21:23:85:21:94:90:6e:d8:5f:6b:7e:e4:b9:a0:
         6f:b5:c3:55:43:ff:19:07:87:71:44:55:58:3f:a3:3b:9b:54:
         4b:92:57:0b:79:dc:58:98:76:fd:52:42:33:66:77:ce:5f:d8:
         eb:80:56:d4:da:f5:55:13:aa:6f:68:a9:35:ee:c0:c9:86:24:
         79:78:fa:c2:9b:db:6f:e6:bd:29:57:c0:0b:99:f5:19:f4:a5:
         ae:86:bc:79:cb:1a:2f:2a:af:61:05:1d:eb:e6:e6:67:50:96:
         60:1b:b8:af:62:2b:d5:2c:85:f2:81:e5:f6:df:61:59:eb:7f:
         f6:3c:79:09:fb:fd:64:5c:c6:e2:fc:d0:22:31:11:15:bf:f4:
         92:88:af:bf:69:9a:1c:98:ec:5e:57:e7:3f:b7:b9:9a:52:01:
         6f:76:15:a7:35:29:fa:4f:cf:cc:0c:62:e6:a8:a2:9b:8c:f6:
         b5:3f:d3:2a:24:14:30:bb:91:92:97:38:b6:05:1d:73:81:98:
         92:13:63:f6:56:61:f6:98:ff:0d:6b:6d:9e:64:82:45:24:62:
         ef:82:b6:f2:41:8f:1a:ac:52:2f:e4:c9:8c:c3:b0:b6:29:bd:
         f0:f0:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----