Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
File:                     XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json)
Hash identifier:          YIlZO3kCyOOfXvmupmnNwq6smR2CkLpLnd1ju26PJVg=
Subject key identifier:   4C:02:94:54:F6:17:7E:99:78:7A:C0:87:D7:45:A4:07:E5:AF:E3:AD
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       01962E2B39795A59931585A8054D3398CEFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
Manifest number:          123E
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=)
                          2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=)
                          3: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=)
                          4: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=)
                          5: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=)
                          6: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=)
                          7: JRsS63OEIg-RDEt77cmLzheKteg.roa (hash: 6PR4Cpk+9BkN+AncsoVUiTEwpS1IqPFK3JqRVNAKG/Q=)
                          8: Jy2dzojQmDDHrT1ZglR62KXl9KE.roa (hash: 9d9Gsb0ep9phZqm2SLYU7Tj/IcHV8fHdUCwzejsx/PY=)
                          9: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=)
                          10: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: eTGHMbVkRZcaQjre9yuz4oIffvHg9N5c01jm9LoI9oE=)
                          11: bYPfKSp3uay7u1IBGQCfz9PB7s8.roa (hash: cQdCPGlvEZyuveyWWb2XndmUwLnId4QzQGpaXozykOM=)
                          12: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=)
                          13: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=)
                          14: kFVkpx97TB72EKQ4ruzAfgCkmLQ.roa (hash: 1FA9Vl6Gc5MRJ5uyClcUL5q5Uvzb9XvC2S9BIvyjxzc=)
                          15: u1fx_e153PBDwPgyvx0qhpf_7-c.roa (hash: rIfGEdBSwuolAjKZu/D3tV9dA5ieH7tsIwRBMyCCMhA=)
                          16: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=)
                          17: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=)
                          18: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:79:5a:59:93:15:85:a8:05:4d:33:98:ce:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=4c029454f6177e99787ac087d745a407e5afe3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:40:69:36:89:ca:db:cb:dc:7a:78:6c:0d:
                    99:b1:5e:0b:5b:92:4d:8f:a1:d1:6f:df:a3:91:11:
                    22:1e:03:ce:d3:8a:a6:1f:94:3f:68:24:7e:ac:e3:
                    63:35:6e:0e:e9:84:8d:f8:17:d6:19:06:99:f2:2c:
                    9d:a9:92:3c:e5:b6:28:90:2b:80:42:63:43:40:86:
                    e8:b9:a4:ab:62:12:f2:ec:a7:90:b3:ca:4a:ed:80:
                    f5:7e:ad:11:eb:b9:2c:e6:92:ac:e3:95:fa:29:b3:
                    62:2c:07:80:33:fe:c8:4f:f9:3e:74:bc:fa:3b:75:
                    6e:58:86:2a:ec:ff:af:b8:c6:44:3f:7d:32:92:d5:
                    1c:e2:e1:24:a6:6b:41:4e:67:79:e7:11:ed:26:33:
                    00:4b:6d:d3:9a:cf:b2:6a:58:9f:3f:2f:95:9e:5a:
                    5d:9d:4f:9a:d8:5c:55:6e:0b:e4:6f:fa:06:e6:a8:
                    a5:e9:df:ff:0b:81:b5:7f:90:36:da:64:dc:10:ac:
                    0c:da:d3:d2:db:d3:a0:fb:2d:3a:a6:7a:2b:f8:97:
                    16:7f:75:53:bc:67:7c:38:3a:b0:f1:54:60:7a:4c:
                    a4:bf:c6:32:29:db:06:63:64:96:e3:eb:0b:8d:fb:
                    a2:72:34:0f:0b:38:14:96:9d:37:22:77:84:17:4a:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:94:54:F6:17:7E:99:78:7A:C0:87:D7:45:A4:07:E5:AF:E3:AD
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0d:c8:c5:8b:ad:0b:fa:ba:f9:b0:e6:ac:70:61:22:3e:d2:
         5f:02:96:60:89:e5:8d:63:1e:e8:a1:4a:5c:ff:fb:e4:00:a1:
         51:ad:2d:82:4c:c0:84:9c:3c:80:af:45:db:78:3e:ed:81:d0:
         dd:03:65:3d:11:cb:ac:6b:65:7e:a3:9d:6f:64:55:27:33:3d:
         14:4e:27:8a:16:f9:ba:46:1a:f6:a7:f7:30:24:c3:1c:c0:30:
         56:25:61:d8:65:7e:7b:0b:d1:ec:ab:0b:2f:c8:62:af:41:72:
         bb:5c:bc:dd:cc:78:4b:eb:4c:b9:6a:20:ff:87:ba:cf:92:4d:
         12:3f:11:aa:fd:70:3f:e0:16:86:72:59:0d:3d:7f:91:fa:e7:
         f4:6a:f0:b5:d4:c0:d2:fa:8a:2f:2b:c1:26:79:8c:01:e0:31:
         96:f0:b3:fb:a7:e2:e0:86:70:8b:35:7c:9a:71:ac:98:5c:00:
         17:c4:c5:28:25:67:75:42:75:da:2e:1d:72:f4:4c:3a:5b:67:
         da:36:63:cf:a8:59:56:dd:2b:8f:08:48:7e:77:7c:62:c6:ce:
         aa:79:b2:89:95:ab:e7:7f:af:56:de:08:96:17:74:e6:3b:44:
         fb:82:d2:c7:c3:28:ce:b3:50:77:d2:ff:9c:8a:80:01:e8:be:
         0c:5e:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----