Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File:                     xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier:          LsjXylzPmj7+vqDXcDrFLh4Rme5ev7A8qdZqO/p7JWk=
Subject key identifier:   4F:E7:1F:59:BF:7D:71:3B:11:54:CC:A8:F5:5A:EF:23:7A:18:F4:14
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer:       /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial:       01962FAB5A28B054C631EDFFEEE355B98A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number:          058D
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
                          2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
                          3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: 17seMYC3jDOxz7BEtCLCQhTh0JbahCb82iB7Wgh3kI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5a:28:b0:54:c6:31:ed:ff:ee:e3:55:b9:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=4fe71f59bf7d713b1154cca8f55aef237a18f414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:dc:c0:d5:af:47:93:ec:0a:3b:4c:69:eb:
                    5a:49:ba:3c:31:13:20:d3:14:a6:03:02:dc:0e:8d:
                    4c:89:c7:35:7d:c6:2d:3e:78:7f:46:f6:1a:a1:35:
                    f2:80:bb:0f:b1:da:b2:4d:9f:42:9c:7d:a9:f3:53:
                    3c:f1:d6:33:1a:90:16:4d:7e:04:04:ef:ea:e4:c2:
                    f1:8a:17:4e:0e:6d:ed:8c:2d:8c:74:84:ed:be:56:
                    1a:00:f2:88:d5:1d:6a:8d:ef:4f:d9:a8:01:49:7c:
                    b5:a1:39:2a:8e:be:3e:5c:29:3b:b7:e3:39:41:f8:
                    87:36:c6:69:a3:9e:5c:76:c3:5b:65:34:22:22:a6:
                    f5:15:39:9b:a7:a1:c9:39:cf:7c:c9:e5:38:d8:e7:
                    bd:4f:a5:8e:1a:4a:bb:90:8c:58:f3:5b:4b:09:14:
                    8c:dc:66:fe:b0:1f:16:94:80:a3:80:15:ec:3b:32:
                    41:da:fb:7f:37:c4:73:f8:55:41:a1:2a:4e:21:9c:
                    43:4e:10:dc:02:2c:2e:78:35:cd:be:03:ce:27:d5:
                    e0:85:28:88:9a:a2:b4:82:e7:12:28:36:ce:28:33:
                    eb:90:36:f7:1a:8c:2f:74:c7:e5:00:9d:92:71:23:
                    1c:fa:b5:1c:d1:a8:f9:15:f1:b3:cc:dd:6a:fc:02:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:1F:59:BF:7D:71:3B:11:54:CC:A8:F5:5A:EF:23:7A:18:F4:14
            X509v3 Authority Key Identifier:
                keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:74:e4:aa:a0:80:a3:76:fd:08:d8:50:e9:f6:e3:ae:c8:a1:
         a6:b0:f3:f4:6c:5a:e9:91:f0:55:de:d5:6f:68:dc:80:54:e4:
         16:89:a6:7c:36:57:af:b0:40:8d:52:46:b4:69:69:56:4b:db:
         89:3b:4a:11:80:a5:a7:0c:d9:4c:52:a6:1d:24:25:7b:58:4b:
         7d:38:2f:33:84:fc:86:ed:c3:1c:56:77:f3:e5:6d:83:8f:6a:
         3e:c3:01:1b:54:c7:06:3f:6b:58:df:7a:75:2b:7b:0b:d0:a9:
         5d:44:65:b8:89:ff:22:01:dc:4d:e0:20:24:33:18:fe:74:01:
         2c:bf:0f:6f:19:a9:3b:b7:ae:cf:57:db:de:11:96:44:6f:d6:
         86:ac:27:a6:33:c5:5e:48:29:e7:a7:d2:16:9c:af:a1:95:bb:
         d2:9d:d9:02:dd:fd:f8:9d:19:a8:82:f1:cd:3e:19:0c:b0:17:
         59:33:92:ef:aa:10:ba:5e:92:bf:6d:da:73:eb:02:da:f7:ba:
         c4:aa:f0:c5:91:fe:25:9f:04:13:5b:69:3c:10:a9:da:a9:cf:
         b4:4d:cb:23:c3:10:3f:f9:f0:1b:0e:6e:d2:45:c3:4f:f5:17:
         d8:1f:dc:60:dd:7e:e1:d8:28:22:88:b2:c2:4f:92:34:2d:90:
         b7:e0:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----