Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File:                     xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier:          h/GSWC3ZUGs0Fq0RAachNlcF0d19soF0VgOLJ6mIIio=
Subject key identifier:   83:7F:74:D4:F5:67:9C:15:5E:FB:F3:84:8C:48:3E:68:F9:BE:16:20
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer:       /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial:       01962E2B07E31BE32C32BCDCCA1E1DA3E2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
                          2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
                          3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: vzaIeiWNkjcqqWCAAmFX8JLc3TxtRoDHqR/xXSPZzzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:07:e3:1b:e3:2c:32:bc:dc:ca:1e:1d:a3:e2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=837f74d4f5679c155efbf3848c483e68f9be1620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:14:9f:05:0a:52:3b:48:8d:aa:6f:6c:ba:
                    f3:5e:c8:d5:02:03:13:d8:a0:64:eb:83:bc:a0:97:
                    74:ea:e8:d2:23:59:f3:b4:ec:0c:84:e2:17:b6:45:
                    20:6d:ca:89:fd:00:4a:3b:9f:32:ee:6d:4e:df:bb:
                    6f:78:dc:75:d5:1c:70:d9:83:9e:2f:bf:67:8c:05:
                    39:f4:b7:9a:82:93:aa:15:8e:73:31:eb:69:92:34:
                    06:7f:1d:50:76:2d:af:31:0b:7f:99:e7:3f:5d:22:
                    61:6b:d1:6e:36:ce:28:33:0f:1f:1b:51:16:16:ee:
                    7c:58:55:1f:ad:05:4c:c7:21:f5:3f:3b:a1:b6:04:
                    92:81:29:a1:c0:e7:66:78:bb:d7:76:ef:90:a2:2e:
                    0c:f1:ac:97:3d:78:85:85:37:85:fc:50:f9:e3:16:
                    ee:90:bd:6d:3a:d0:f5:65:1b:4f:32:8b:30:ee:4b:
                    ff:10:bf:16:cb:bd:b5:d2:14:ca:98:ac:40:7a:ea:
                    99:9c:a3:bd:f8:14:10:b8:2f:cb:00:31:77:b5:a4:
                    3c:d5:a1:97:80:73:33:d5:d2:68:51:7d:7d:55:f5:
                    b7:5d:ed:aa:26:99:22:5b:83:d4:52:4e:d4:45:dd:
                    6e:77:90:b2:fe:c1:19:2f:3e:6e:c1:cf:bf:d2:28:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:74:D4:F5:67:9C:15:5E:FB:F3:84:8C:48:3E:68:F9:BE:16:20
            X509v3 Authority Key Identifier:
                keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:b6:d4:8f:6b:00:fc:42:79:4d:49:79:e3:78:07:f3:ce:
         9c:d9:01:b5:29:39:cc:51:52:0e:bd:ce:53:0f:ad:40:f9:59:
         66:4d:36:76:72:c2:37:5c:e3:cd:e2:08:a7:2a:0c:c7:36:12:
         17:69:12:55:70:21:5b:de:ad:92:82:9c:5c:c9:f8:b8:bf:98:
         2d:eb:ca:1a:15:81:f0:da:ed:d9:64:ae:96:82:22:45:be:bb:
         58:25:bb:3d:7a:b3:05:98:9a:8c:8f:0c:40:16:00:1f:17:df:
         4c:83:d5:94:61:5c:0d:0d:c8:c4:34:78:ee:eb:b4:a1:77:b4:
         4c:17:4d:d7:e6:1f:d7:79:fb:43:4e:50:32:fa:0c:f7:59:08:
         90:96:01:9d:ef:30:e4:0d:11:00:41:bf:2f:ff:a1:cc:1f:f4:
         bb:63:90:92:3b:87:64:43:16:40:b7:4a:da:0f:46:98:61:79:
         6e:51:31:5c:b4:81:6b:fd:ba:cc:0e:80:19:8e:ca:a3:44:d5:
         22:26:39:57:2e:23:58:05:4a:1e:b0:eb:7d:11:9b:b3:95:44:
         47:ed:3f:82:4e:fe:23:0e:7b:b0:85:0f:3c:55:b2:e8:57:33:
         2b:7a:fa:3e:53:10:2a:39:20:b3:6e:6c:70:54:01:ed:91:04:
         93:3f:bc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----