Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File:                     xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier:          0bC0jse5ttnWDke7u4FTXNrWKUmNOFwWhL8NxRqoc1c=
Subject key identifier:   35:D2:DB:36:DA:8D:BE:3D:B8:C9:62:9F:2C:3B:F5:D0:B9:24:81:9F
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer:       /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial:       01962E61B93E49DC338E658D0B15243262A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number:          043F
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
                          2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: ymtR42NtkBliv992SGXAcYV1SPRCt11eYG6+eWtCiN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:3e:49:dc:33:8e:65:8d:0b:15:24:32:62:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=35d2db36da8dbe3db8c9629f2c3bf5d0b924819f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:89:a1:09:3a:d3:57:26:7a:c9:bb:b5:2f:eb:
                    bd:d0:1c:c8:41:79:e5:7b:ba:b3:65:a9:f3:5f:e3:
                    e6:63:94:2c:de:2e:f3:b3:cc:f3:8b:81:ed:f7:1c:
                    aa:7b:8c:41:86:ed:4a:60:57:54:10:72:2a:d8:7b:
                    bb:06:16:73:50:b7:d3:48:d7:74:56:d5:fb:c4:da:
                    57:08:9c:f6:11:b7:7f:61:e4:eb:89:3c:86:0b:6a:
                    5f:8d:1e:5c:04:c6:75:e5:93:ef:af:cf:15:60:f3:
                    ed:14:22:f7:d2:f7:d3:12:e8:1a:ed:a0:7b:41:38:
                    da:c5:36:29:cf:1a:b8:d0:bd:6d:85:8e:61:db:af:
                    1a:c6:05:35:20:f3:79:3b:9f:61:4d:1d:0e:e0:a6:
                    0b:23:6d:9e:fe:c2:dd:ad:ad:16:f6:74:d4:30:11:
                    f9:bb:ad:22:63:cb:a5:44:f9:e4:aa:cf:d4:bd:c3:
                    73:9e:86:1c:aa:06:6d:dc:13:43:42:24:be:c1:1c:
                    8d:f9:a7:ac:67:e6:fb:fd:b7:55:2d:1b:1e:a0:db:
                    74:ec:87:78:99:51:c6:7a:41:f8:65:e9:74:0c:4d:
                    45:15:77:bf:1e:30:bb:7e:a3:3f:e2:94:47:8b:84:
                    2f:2c:33:de:00:65:e8:00:20:16:18:e9:a4:8b:cc:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:DB:36:DA:8D:BE:3D:B8:C9:62:9F:2C:3B:F5:D0:B9:24:81:9F
            X509v3 Authority Key Identifier:
                keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:95:a7:f9:e2:1e:a8:19:77:2e:ef:21:96:07:b4:70:f5:b1:
         e7:d4:78:9a:0d:cc:f4:93:19:63:d6:26:75:cd:2e:3a:22:4d:
         f9:41:59:d1:89:38:37:01:df:b6:cd:a7:ed:e1:9f:ca:66:a3:
         8c:1d:91:3d:6e:c0:ad:d0:e3:2b:2f:e0:2c:81:57:2a:32:cf:
         3f:91:69:ce:ab:6f:b9:af:ec:69:73:da:89:04:ee:05:23:3c:
         74:ea:1c:99:17:99:0e:66:c7:89:98:9f:a5:e0:ca:21:39:7a:
         54:0d:f6:ff:d5:74:a7:b0:d9:aa:55:59:37:7c:7f:68:f5:d7:
         01:7f:79:03:8d:9e:b3:e8:4a:d1:79:cb:4a:b0:a1:6c:10:1a:
         6e:13:35:61:9b:f6:19:ce:fb:b1:27:40:27:02:85:64:3e:7e:
         b6:68:8b:4f:99:4d:60:fb:fd:d4:ce:ae:c7:b9:67:10:31:a7:
         23:88:ab:c5:a1:0f:3d:cd:b0:d5:78:b0:a3:12:23:91:f2:f2:
         f7:c2:6c:6a:40:97:bc:bc:92:d8:af:2b:25:c5:4a:a7:8f:dc:
         7c:7d:81:a4:44:b1:01:fa:9f:2f:29:26:07:8b:79:04:aa:0d:
         bb:71:6a:c8:ae:49:16:ff:94:c3:a3:50:c3:bf:c1:33:fa:b0:
         84:1c:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----