Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File:                     XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier:          kvG0igZVFN7nJ9LwWOBsBdDUqAKPphodXrqJe+oq9d8=
Subject key identifier:   17:B3:35:A3:F7:6C:5D:3C:F4:7B:BE:2A:D2:0E:85:C5:5E:7E:FF:03
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer:       /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial:       01962E997E19D38AA6881055551E3B6B27A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number:          C7
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=)
                          2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: 1mQyfig2pMzDuebHuiKZm7EvCRPNyWBNhXNOu9RZj1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7e:19:d3:8a:a6:88:10:55:55:1e:3b:6b:27:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=17b335a3f76c5d3cf47bbe2ad20e85c55e7eff03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:20:bc:30:26:56:2b:ee:e4:49:cf:70:36:
                    b8:11:4f:cd:99:8a:4a:4c:69:d7:7d:ae:66:19:0e:
                    b3:af:7e:cf:2b:47:88:9e:27:a9:a6:ee:33:48:9f:
                    68:03:79:47:39:8e:86:db:23:12:95:62:50:44:d3:
                    c2:09:a8:75:34:2b:fe:c1:be:f5:56:94:13:e8:ba:
                    41:a4:c1:a3:e4:01:35:80:36:14:2e:e9:85:3d:cb:
                    d1:4a:09:38:91:bc:46:af:d8:76:dc:1a:90:0c:cb:
                    68:be:02:3a:c8:ca:ff:c6:67:64:4d:c0:14:88:ac:
                    ef:40:b1:9c:c7:e1:b9:48:43:db:2a:ae:db:e9:fe:
                    ae:52:24:d1:ee:a8:31:0f:76:94:e3:74:ae:e7:4d:
                    fd:28:2b:76:27:9d:f1:ba:3c:69:7e:43:5f:db:04:
                    f4:7c:c8:4a:8c:e9:50:32:dc:22:25:7a:2f:16:40:
                    20:2c:1f:4f:ff:ab:b4:2c:23:4c:63:e1:4d:37:57:
                    02:35:a6:08:73:b8:2b:d7:a3:8d:e5:6c:8b:c9:62:
                    ab:3f:ca:9d:3c:a7:7e:30:cd:6e:c6:99:05:bc:a3:
                    db:e4:16:11:e8:ad:ce:5e:d7:98:24:6a:d4:c1:8e:
                    5f:15:d6:32:19:13:d9:6e:4e:04:fa:56:e8:d3:e7:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:35:A3:F7:6C:5D:3C:F4:7B:BE:2A:D2:0E:85:C5:5E:7E:FF:03
            X509v3 Authority Key Identifier:
                keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:75:66:f2:2d:96:70:7b:87:66:98:38:e1:70:ad:3b:03:bd:
         a7:14:ae:b6:18:9a:15:6a:1c:ed:4b:29:44:73:fa:ec:0e:66:
         3b:9c:f2:f3:58:4f:7d:e3:10:2d:ea:97:4d:c2:a0:0c:50:c0:
         45:05:d4:13:69:96:bf:ab:91:cc:e0:72:db:4a:c0:88:71:c9:
         a7:a7:28:7f:d7:11:9e:cd:e3:13:5a:04:c4:08:fe:8a:52:77:
         75:43:64:f5:13:68:7b:81:73:20:57:be:1e:7a:6d:37:9b:50:
         ed:76:27:e1:8f:3c:91:77:64:c3:80:d3:d6:64:b3:3e:ac:ed:
         04:78:a0:bc:e7:91:3f:0e:21:f8:6c:ab:8b:f6:0d:00:f6:2f:
         64:b3:10:a7:34:56:50:14:22:11:b2:92:1d:e2:a4:05:41:1c:
         90:39:db:d7:08:60:1e:42:d4:7f:82:74:eb:85:7c:91:2a:ed:
         d4:09:c7:5c:84:51:77:94:d5:5f:02:9d:22:13:46:10:61:d5:
         de:17:7e:7c:6a:1b:2b:11:f0:44:e3:68:96:a7:ca:65:6d:42:
         4f:db:5c:72:17:e8:45:cb:16:03:2f:b9:51:44:45:e5:0f:d6:
         ad:75:12:da:ac:e5:07:24:2b:52:08:31:dc:af:bb:c8:51:a1:
         0f:5e:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----