Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File:                     xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier:          Qil48ZF42tK9sKYT20H2R1n9VAF33tMp3fecp00QAio=
Subject key identifier:   B9:16:94:FD:2A:9B:AB:B0:CD:11:6F:B4:E1:67:AB:0E:B9:44:CE:31
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer:       /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial:       01962DF3ACAEC88500AEB26254832F8F10AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number:          11EA
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
                          2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: AU6qTBcriyhQ8/lpmeAGjVVvi4xTRSZNGJ9RVcUEsBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:ae:c8:85:00:ae:b2:62:54:83:2f:8f:10:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=b91694fd2a9babb0cd116fb4e167ab0eb944ce31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:ca:b9:a2:22:e6:f4:e3:1d:ee:f1:53:e2:
                    89:a3:fe:2d:c8:e9:1d:df:24:a7:e8:a8:6a:bd:a8:
                    7c:95:30:29:ee:e8:03:7a:b7:75:58:33:3a:4b:4d:
                    d4:1c:29:2f:57:93:c7:d4:bb:d5:1d:36:9d:64:d7:
                    d3:c1:95:fa:22:b0:aa:1d:2d:4b:ef:ff:5b:71:58:
                    fa:c7:5c:a6:c0:fb:2f:f1:18:68:e8:68:b3:02:bb:
                    0a:c5:c8:5d:42:bd:50:d5:8f:54:97:d2:70:44:bd:
                    19:6d:08:45:5e:19:e7:a2:a6:02:b9:71:83:91:be:
                    13:2a:89:b7:91:e2:33:81:b1:07:47:26:6f:b1:ca:
                    57:d8:b3:5b:44:10:e0:f9:bf:ed:06:c6:ae:6b:00:
                    23:16:77:90:89:b0:81:66:5d:d5:12:f6:83:43:83:
                    59:b9:e8:4f:80:3f:9a:c6:2f:5a:07:dd:34:4f:8b:
                    7c:8f:c8:ea:1d:1d:2b:34:c1:8f:c5:52:1b:2b:05:
                    d3:96:69:23:09:c4:a2:d0:54:26:5f:5c:80:ff:2f:
                    e2:9b:9b:44:fc:47:a5:28:eb:2a:e0:80:7d:f5:a7:
                    3f:ee:09:48:82:74:d6:52:58:f9:eb:5e:22:14:fb:
                    0f:79:38:92:0f:de:d9:4b:30:bc:76:e0:91:3e:67:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:16:94:FD:2A:9B:AB:B0:CD:11:6F:B4:E1:67:AB:0E:B9:44:CE:31
            X509v3 Authority Key Identifier:
                keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:ea:37:9a:30:10:34:e1:28:62:82:7c:a1:53:57:e8:62:
         bb:4b:c3:55:b8:04:a4:ac:bd:a9:44:d1:7c:ac:b1:02:c9:07:
         db:1c:72:eb:bf:de:8e:d2:3e:d2:c9:f7:29:c3:81:51:8a:73:
         68:b9:f7:c0:52:cb:65:f4:1c:42:07:5b:8f:d5:be:19:8a:db:
         95:6b:af:c8:a1:57:ef:3c:16:d3:5c:c6:7b:3a:c1:c2:f8:61:
         a5:4d:ad:c4:19:2c:c8:26:00:9b:b5:e9:88:94:b5:1d:db:7a:
         d2:fd:d5:19:fb:9f:8d:64:79:9e:46:f6:e4:2e:e8:70:fd:d2:
         2f:81:34:19:7c:80:da:c8:8c:a2:9d:8e:cc:fa:01:0c:f3:ac:
         7b:25:74:28:c7:fa:cc:35:d7:0d:c2:e4:88:45:41:25:af:be:
         fa:09:78:46:7f:f2:b4:d8:f8:9a:f1:0f:5d:a8:a2:e7:74:5b:
         d6:68:70:22:c1:3d:2e:e1:91:1c:6a:77:5d:9f:86:f7:e2:e1:
         21:fd:b7:b3:09:fe:ae:f7:e0:ad:9e:ff:1b:77:d5:10:00:f9:
         39:c6:c2:37:9c:50:ac:15:8d:cc:f3:4e:62:eb:28:a9:c9:67:
         f1:e2:f3:a2:e7:f2:00:00:1f:79:76:81:a3:16:59:39:0a:ee:
         01:86:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----