Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File:                     XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier:          3ANlh35fwWvasiFvmKKZz2Q9rT2N+C7jqp0Weu4YQR0=
Subject key identifier:   7A:45:AC:05:D9:67:5E:65:67:6F:A1:FC:48:D0:4C:16:90:C4:76:BB
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer:       /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial:       01962F74DA753F83233149D5496AA033FFEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: qP/vg26N4d9XolC2iqRm7FRFc/EmKmEctby9mfLjMUo=)
                          2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:da:75:3f:83:23:31:49:d5:49:6a:a0:33:ff:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=7a45ac05d9675e65676fa1fc48d04c1690c476bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:47:65:b2:fb:e1:c7:7a:20:3a:04:c9:5b:db:
                    8b:4a:80:54:2b:37:85:3b:62:9a:dc:9b:aa:1a:70:
                    41:02:a2:d8:35:fc:e3:0e:27:9a:2a:91:c8:15:2b:
                    fe:42:d3:cf:f0:ae:c2:b9:71:37:94:1a:14:57:a2:
                    04:2b:bb:9f:c9:39:a8:cc:04:a4:04:66:4b:3a:d6:
                    df:33:18:9d:88:84:9b:1b:5d:61:7e:67:93:07:77:
                    60:71:80:c6:92:0b:f7:82:da:0f:a7:f0:db:38:82:
                    cf:0c:35:d8:3f:af:8e:36:ce:2b:e9:e8:a2:4c:56:
                    5b:e5:54:8b:54:ae:92:8a:7f:57:f8:9e:8d:5e:f2:
                    ad:52:fa:d5:79:cd:45:c2:4e:b4:e1:2a:03:92:a4:
                    8a:8b:a8:3e:22:d8:c3:7e:da:d1:57:e6:13:71:39:
                    c9:2d:b2:b8:e1:2d:89:47:81:a1:48:09:72:f6:d0:
                    7a:a2:8e:8d:89:ae:e4:e1:dd:16:40:a0:45:2c:86:
                    e9:32:3a:e7:c8:e5:c6:55:22:c0:78:f4:dc:be:4e:
                    18:93:5c:c2:8a:cc:bf:b4:83:4e:f1:44:5c:fb:56:
                    5f:40:13:fc:d3:f4:d7:b7:ab:7f:2a:01:66:ad:31:
                    18:71:b3:7f:9d:9e:b6:f9:52:d1:22:1f:68:82:d5:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:AC:05:D9:67:5E:65:67:6F:A1:FC:48:D0:4C:16:90:C4:76:BB
            X509v3 Authority Key Identifier:
                keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:64:b3:bd:4e:e9:a1:d4:65:e8:2a:21:ea:a6:9d:54:f6:cc:
         46:a9:22:49:c1:12:88:42:9b:5c:28:51:ba:4c:52:a5:e7:36:
         81:80:29:9a:ed:6a:4b:c3:75:da:79:76:4d:c9:88:76:93:85:
         df:80:1b:82:83:01:e7:5d:3b:18:aa:64:f6:9e:d2:9b:73:20:
         22:9a:cf:6c:9d:6a:9c:6e:27:4e:90:81:34:fe:ba:af:ad:ef:
         35:48:20:81:db:87:87:7b:8a:6c:6b:ac:79:79:5d:9f:73:15:
         64:fc:cd:68:52:b2:d3:43:b2:b6:8a:7c:c0:bc:5c:49:e7:70:
         73:ea:18:bf:61:ea:1b:16:29:18:eb:0c:26:c3:8f:91:c2:3b:
         88:32:f7:5d:b7:75:76:7a:89:c7:d1:0c:b4:b4:a9:64:7d:b7:
         b2:f3:78:e5:4f:39:85:b0:25:8c:9e:a6:73:e1:18:6e:79:9b:
         aa:13:bd:95:bd:f2:41:d8:84:94:c1:23:f5:bb:40:9d:18:dc:
         77:1b:35:da:38:b6:db:24:15:8f:d6:3c:41:dd:29:4b:31:97:
         e9:7e:44:af:7c:14:98:3c:46:1c:13:35:c0:c8:61:55:bd:b2:
         67:22:48:01:17:4f:22:d4:ba:df:5d:99:4f:e3:d6:db:54:0f:
         a3:c1:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----