Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File:                     5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier:          cp4VOjMDNJ1u3BEUHn9ukqwkh/Y4JS1WIS69q4jvpAI=
Subject key identifier:   0E:CD:73:23:9A:E7:6E:B0:2E:A1:71:DB:13:45:34:18:98:79:93:49
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer:       /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial:       01962E2B4118A7A273E127CE089CB896A1E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: vHyKVUqF8zfvti+XgxpY7cJZoCxknl+dRaurgb1dXBU=)
                          2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:18:a7:a2:73:e1:27:ce:08:9c:b8:96:a1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=0ecd73239ae76eb02ea171db1345341898799349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:0e:98:dc:d6:ec:fb:71:ad:e7:5c:fe:14:
                    76:c9:26:a4:d2:49:12:31:06:88:3f:c7:6d:4d:b7:
                    58:3b:ae:cd:bf:44:fe:83:4b:08:60:dd:fb:03:26:
                    a6:86:65:d8:4c:e8:9b:49:34:15:7b:4d:16:69:37:
                    cc:bb:a0:f8:e9:51:0e:a0:71:80:ea:ad:4d:ef:9e:
                    e2:99:05:61:8a:8f:4c:a1:fb:c6:f3:90:a2:9b:ad:
                    75:8e:73:22:08:5c:e1:40:8e:67:39:47:eb:ba:c2:
                    e5:8b:41:5c:b7:82:46:a1:c9:9c:7e:ae:c6:56:41:
                    67:6a:b0:9a:6d:66:19:cb:8b:b2:69:e4:37:3a:44:
                    4e:01:82:9e:a5:9a:4c:9e:c9:ab:c9:0a:e8:ef:73:
                    50:37:5d:9d:ce:cd:75:57:b8:02:e4:fd:6c:94:44:
                    41:c1:e0:e3:37:b6:c8:83:f7:89:39:d0:e2:61:3b:
                    bb:0d:fa:45:03:09:86:64:c5:90:74:0d:04:1c:2d:
                    46:0c:63:f6:82:86:12:97:42:d5:97:e4:50:8b:2c:
                    8c:be:f4:f6:ce:0c:b7:0b:8d:e9:93:7f:80:c9:bc:
                    38:c6:8d:64:a2:44:39:08:f0:01:0a:9d:c3:a5:f7:
                    04:60:c5:4b:70:de:d8:e4:6a:88:87:3e:66:e0:32:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:73:23:9A:E7:6E:B0:2E:A1:71:DB:13:45:34:18:98:79:93:49
            X509v3 Authority Key Identifier:
                keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:c1:40:24:a5:28:d8:47:ab:52:b5:81:9f:0d:e5:0e:d3:
         dd:81:80:24:fd:43:47:b1:93:3e:99:3f:58:65:43:9f:7c:93:
         40:a2:4e:08:38:42:1d:00:b3:b0:0a:cc:6b:d2:24:4f:87:8c:
         05:3c:c9:d3:92:db:fc:5a:25:28:e0:64:f5:2b:aa:3a:df:11:
         42:28:f0:10:af:99:31:9a:35:a3:e5:d6:8c:94:3d:dd:b0:c4:
         6e:ec:28:95:15:27:97:5f:30:62:0e:6f:d5:d8:a7:e7:b3:e0:
         18:fd:db:01:fd:c0:d4:b9:c4:45:a1:50:d4:58:a2:8b:3c:00:
         05:2d:11:19:26:e1:3e:0d:be:2e:93:71:1e:e8:9f:8d:24:fc:
         5b:8f:96:74:a5:16:38:7f:ae:bb:e1:71:69:04:18:f1:b6:f4:
         de:53:35:f3:46:d5:8d:f1:d2:e1:91:71:d8:34:41:81:5b:50:
         83:6b:d9:2b:80:a7:8a:31:22:d0:13:f0:9a:a6:93:40:8a:98:
         62:7d:3c:64:cf:c4:ce:e2:99:59:8a:0a:f7:38:10:6d:43:2c:
         7c:92:45:d7:45:96:8f:ad:d1:a6:76:55:4e:35:c9:81:c8:14:
         b4:43:86:93:27:94:7c:80:28:61:65:e9:56:ad:2b:33:2a:cb:
         4f:d7:60:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0EYp6Jz4SfOCJy4lqHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MTgwNDVjZmJkOTZhMzc2ZWM5OGUzZjVlOGIyYWZiMTRj
Y2E5M2MwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
EygwZWNkNzMyMzlhZTc2ZWIwMmVhMTcxZGIxMzQ1MzQxODk4Nzk5MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdoOmNzW7Ptxredc/hR2ySak0kkS
MQaIP8dtTbdYO67Nv0T+g0sIYN37AyamhmXYTOibSTQVe00WaTfMu6D46VEOoHGA
6q1N757imQVhio9MofvG85Cim611jnMiCFzhQI5nOUfrusLli0Fct4JGocmcfq7G
VkFnarCabWYZy4uyaeQ3OkROAYKepZpMnsmryQro73NQN12dzs11V7gC5P1slERB
weDjN7bIg/eJOdDiYTu7DfpFAwmGZMWQdA0EHC1GDGP2goYSl0LVl+RQiyyMvvT2
zgy3C43pk3+Aybw4xo1kokQ5CPABCp3DpfcEYMVLcN7Y5GqIhz5m4DLr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7NcyOa526wLqFx2xNFNBiYeZNJMB8GA1UdIwQY
MBaAFOUYBFz72Wo3bsmOP16LKvsUzKk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kYjgyNTgtMmYxOC00ZjQ4LTg5YTct
ZmM1MDU2NmIxMThmLzEvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kYjgyNTgtMmYxOC00ZjQ4LTg5YTctZmM1MDU2NmIxMThm
LzEvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwnBQCSl
KNhHq1K1gZ8N5Q7T3YGAJP1DR7GTPpk/WGVDn3yTQKJOCDhCHQCzsArMa9IkT4eM
BTzJ05Lb/FolKOBk9SuqOt8RQijwEK+ZMZo1o+XWjJQ93bDEbuwolRUnl18wYg5v
1din57PgGP3bAf3A1LnERaFQ1FiiizwABS0RGSbhPg2+LpNxHuifjST8W4+WdKUW
OH+uu+FxaQQY8bb03lM180bVjfHS4ZFx2DRBgVtQg2vZK4CnijEi0BPwmqaTQIqY
Yn08ZM/EzuKZWYoK9zgQbUMsfJJF10WWj63RpnZVTjXJgcgUtEOGkyeUfIAoYWXp
Vq0rMyrLT9dgTA==
-----END CERTIFICATE-----