Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
File:                     XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft (raw, json)
Hash identifier:          Wi+Kt+2Jmc1yCDFX4PTw3sYjCuK4zVn8px1Fq0PecYU=
Subject key identifier:   59:56:A1:9F:EE:93:3B:71:91:BB:86:D9:EB:A9:35:57:8D:3B:84:B7
Authority key identifier: 5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
Certificate issuer:       /CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Certificate serial:       01962DF456506AF87AD9DE77B1204F24002A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
Manifest number:          01E3
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl (hash: lt6at5w9ehS4kFQza/mXNYETt/260WBBNSnEsjes0y8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:56:50:6a:f8:7a:d9:de:77:b1:20:4f:24:00:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=5956a19fee933b7191bb86d9eba935578d3b84b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:67:64:a5:1d:fd:72:25:fa:e3:44:53:e1:
                    46:fb:66:88:cb:1b:d6:20:30:89:86:58:bf:a1:a9:
                    cf:5d:8f:a3:8a:54:40:50:12:b0:a3:66:df:15:fe:
                    18:93:ce:ad:7f:61:da:64:d9:cc:b6:12:90:9f:da:
                    b9:fe:1e:ec:08:92:40:9a:ff:35:57:7a:03:df:68:
                    87:fa:1d:a4:9d:a7:94:7c:2f:13:91:b0:78:91:60:
                    3a:a1:29:7e:24:46:b6:8f:4a:64:c8:e7:49:8a:86:
                    ab:95:92:40:c7:c3:9c:c1:7f:61:ed:d4:ec:21:39:
                    95:52:81:2f:46:5c:3d:f6:e4:01:b3:4b:59:7b:fc:
                    5e:b0:7f:da:c5:f2:00:60:3b:b0:bd:67:59:e8:55:
                    6f:db:f3:1c:3d:f4:96:8c:ca:45:4a:11:f2:38:b3:
                    9d:1b:01:91:56:46:0d:74:df:d9:ed:6d:25:d3:b8:
                    d5:40:c8:11:a9:c7:17:af:eb:20:5b:dd:03:2d:9b:
                    ef:e4:d9:61:12:a3:00:c8:6a:3e:d2:0c:12:9a:db:
                    be:55:05:97:7f:16:f1:3f:98:69:15:ad:92:ce:d1:
                    cd:f7:81:35:77:15:d8:2e:c5:06:f5:98:a0:12:9e:
                    64:67:e7:e5:45:42:52:69:9f:3d:ee:e1:2e:5f:27:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:56:A1:9F:EE:93:3B:71:91:BB:86:D9:EB:A9:35:57:8D:3B:84:B7
            X509v3 Authority Key Identifier:
                keyid:5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:df:54:43:67:05:f2:d6:04:e2:b2:4b:16:de:fa:8c:38:eb:
         bf:d7:bf:f0:ce:b4:05:59:68:b3:b6:39:82:81:09:05:71:1f:
         f2:ca:6f:21:25:5d:80:cd:05:9c:a8:c8:d5:c9:3a:7a:f7:29:
         82:31:d8:84:0a:fc:44:ef:05:be:07:5c:27:fc:70:54:9c:01:
         f2:15:e5:94:fd:af:26:ac:a6:1e:28:84:48:6a:3e:f4:2b:c0:
         8f:53:b2:aa:77:56:c9:5d:09:6b:66:ea:07:80:1e:d6:03:6d:
         5b:e2:cc:0e:1c:8e:07:12:ee:77:9e:44:fc:f9:b5:f0:00:31:
         1e:f3:dc:12:ed:c4:3d:cd:47:1f:d4:e4:5f:ce:92:88:9a:fe:
         94:3f:52:5b:9a:0d:81:81:38:20:2c:e8:e4:6a:4b:00:10:06:
         84:53:f3:ca:9b:bc:63:cc:c9:e3:69:3d:c0:d8:44:94:a7:1f:
         05:4d:7d:0b:7f:c8:20:33:ad:ff:68:11:cc:52:74:66:b7:41:
         85:38:c1:d4:d3:f5:2d:60:9f:e8:57:a4:bc:a0:7b:7c:c5:c9:
         6e:36:67:ab:48:88:03:f7:bf:28:65:e5:ee:6f:d8:ad:87:c0:
         b2:6b:a9:ab:09:8f:b9:5b:5d:cd:2f:a2:da:32:20:c6:64:4d:
         4b:dd:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----