Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File:                     XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier:          eZKNyzdstFBgHpZVq3Zg0V8q1TVpHgBIIh/gPr7Z1e8=
Subject key identifier:   B0:60:D0:33:E2:03:05:39:28:61:05:12:59:AC:6E:25:95:3D:7E:23
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer:       /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial:       01962FAB49ABBA5F26DBB2C70799C3FA7D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number:          145B
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
                          2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
                          3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: q8uo9k0rs9deO/cROWXIxLJB17ywzng6affcodjdoRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:ab:ba:5f:26:db:b2:c7:07:99:c3:fa:7d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=b060d033e20305392861051259ac6e25953d7e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:6d:92:2c:f9:4e:28:5b:dc:4c:91:01:ce:
                    90:bb:db:b1:9e:8e:31:95:83:0d:bd:b9:ae:de:f0:
                    7d:1a:74:5b:3f:af:2a:74:9c:ec:ef:38:65:fa:9f:
                    7c:3c:44:86:94:33:0a:d0:c1:31:b4:94:5d:6a:23:
                    99:b5:9c:2b:93:c0:f2:f6:16:f6:1e:85:ca:4b:5d:
                    f8:52:86:32:71:45:92:11:3c:3f:5c:87:3f:81:58:
                    13:c7:35:9a:3c:78:38:1a:fb:01:45:4a:de:4a:b9:
                    10:77:88:d4:40:45:5f:a8:c0:cd:ff:e9:92:e9:aa:
                    bd:77:52:d6:98:3f:ee:a3:e4:d9:12:46:95:f6:e5:
                    01:ab:99:cc:01:01:76:46:29:bd:5f:3d:da:0c:97:
                    24:12:72:38:2d:eb:d7:bb:6b:64:f8:5f:02:8d:30:
                    b4:73:ab:c7:fd:98:04:e0:bc:ab:54:2f:58:cf:cb:
                    c1:50:f8:36:48:0e:c4:bf:3e:b9:06:dc:08:a1:5e:
                    f2:ff:6a:5e:42:6a:8b:90:2c:98:cc:fd:37:6c:54:
                    f9:0b:a0:2b:95:f7:a2:df:69:cf:b0:67:4a:6a:d4:
                    89:a0:3a:80:6f:97:1a:66:80:78:63:ec:c1:7c:42:
                    19:5d:14:9e:5d:0a:88:7e:19:9c:02:ca:f3:b3:a6:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:D0:33:E2:03:05:39:28:61:05:12:59:AC:6E:25:95:3D:7E:23
            X509v3 Authority Key Identifier:
                keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b5:d1:29:35:75:ef:36:c5:bf:11:62:4f:9b:aa:0d:2f:29:
         bb:5d:f0:82:df:01:d0:17:87:f0:11:da:90:a4:64:35:03:d7:
         9a:6e:06:13:35:e5:55:d6:30:77:35:62:cd:ca:b1:bc:ee:44:
         52:1a:9c:08:1d:29:c2:b9:60:dd:6b:8b:c1:46:b5:89:05:5d:
         4f:d7:23:6c:ff:3f:a7:7e:b1:a1:83:b4:50:b2:f5:ac:4e:c9:
         22:62:53:c6:74:fc:f0:b1:d5:39:24:3b:cd:a4:dc:37:7d:29:
         fa:91:54:a8:ec:6d:2e:35:6d:2c:d2:73:79:1a:e0:45:f1:69:
         0e:f0:09:be:d9:11:e9:5e:87:f4:db:2b:6e:b3:68:e7:72:cf:
         51:2f:ec:38:76:c0:d4:8d:13:73:e2:68:6e:08:45:35:e7:82:
         43:df:22:a7:cb:b8:ff:52:67:ef:56:3a:85:f2:a8:d7:5c:f2:
         1b:3b:13:b4:8a:37:9c:42:dd:98:28:19:43:6f:4a:dc:03:25:
         19:18:6b:bb:79:d6:4d:aa:f9:a3:9b:06:1a:17:d1:7a:bd:22:
         8b:af:a1:99:f9:33:f4:06:75:18:0d:b4:e5:25:f0:34:1c:6e:
         da:3a:de:a1:1a:22:37:a4:af:d2:54:90:c2:be:ff:f8:75:52:
         b5:06:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----