Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File:                     XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier:          NIxb2TQQG7qtUnIFuexLTApo186zF02fRvHsPs9RxIk=
Subject key identifier:   BE:D0:8E:16:FF:64:4E:8B:3B:69:01:14:80:4E:96:AB:53:F3:4A:F7
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer:       /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial:       01962E61CA4C136E1EB729805D83FD04A9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number:          1056
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: U1VfHQKMAiRAjB7yCdkFGG8bIBIOM3BGXCl4r5Pl4uE=)
                          2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:4c:13:6e:1e:b7:29:80:5d:83:fd:04:a9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=bed08e16ff644e8b3b690114804e96ab53f34af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:86:b0:83:88:4d:a2:8e:38:3e:44:e6:77:
                    4e:2a:3b:c3:3d:9f:f3:55:97:16:60:e0:eb:4b:54:
                    ed:85:10:00:1f:ef:71:9c:70:57:c4:80:22:e0:d4:
                    b2:01:67:c1:5e:4c:1f:4f:81:18:fc:6b:39:a8:4f:
                    c0:ba:03:c1:b3:41:91:29:1e:7a:e6:2a:7b:0e:23:
                    2e:61:84:cd:fb:b9:cb:c8:35:ad:2e:f4:06:d2:3f:
                    77:2c:34:19:88:fe:3c:76:cc:5d:30:d9:f9:33:de:
                    1b:e1:1d:ca:c9:2c:f5:41:e8:4e:90:8e:a3:b0:73:
                    0c:6a:2e:fc:26:d2:b1:ef:a6:e2:ad:94:fd:32:78:
                    79:9a:f2:d4:6c:85:6e:e8:3a:c7:10:f2:6d:9c:ea:
                    28:cf:a4:fb:54:c2:36:54:11:57:84:2d:99:ad:3f:
                    e5:a9:cf:21:ad:14:99:2f:c8:e2:8a:de:3a:08:67:
                    32:bf:d4:3f:0c:71:d5:69:ca:64:2b:f7:03:97:1d:
                    0d:59:35:fe:09:c6:e5:bc:d8:38:da:b6:0b:be:fa:
                    3f:9e:d4:43:d0:11:26:db:ad:9c:fb:1a:0b:2f:19:
                    88:8d:86:99:e2:78:ea:5e:64:68:59:19:7b:c5:00:
                    04:0b:b6:1e:a6:39:0b:14:00:ba:80:2e:0d:f7:94:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D0:8E:16:FF:64:4E:8B:3B:69:01:14:80:4E:96:AB:53:F3:4A:F7
            X509v3 Authority Key Identifier:
                keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:3d:dc:ce:11:5a:e3:5f:9c:e0:a9:bd:16:f6:fd:aa:4d:
         9c:1d:56:a0:66:73:51:53:eb:56:f6:7d:da:a7:3c:5b:df:1c:
         c0:a8:29:da:3b:14:e9:e5:7e:64:25:7c:f3:02:b2:2d:b9:9c:
         8e:45:a4:3d:a7:c0:61:9c:fb:02:b3:65:c1:1d:0b:18:f3:98:
         1d:48:dd:9f:21:4c:04:fd:55:6a:e6:82:9f:a9:e5:2f:d5:b1:
         3f:4e:19:c4:17:4e:6f:85:8f:a1:88:fc:9f:86:d3:9e:e9:7b:
         de:66:f5:98:1f:81:24:f9:39:59:4c:e0:d6:90:62:19:06:77:
         54:f5:73:68:fc:d7:f0:90:c9:8f:14:2a:e7:39:b6:a2:7c:83:
         a2:05:23:5f:f7:f9:e3:13:ef:4f:8a:39:1b:85:c1:4e:6c:38:
         76:cf:f1:d3:d7:8b:db:9d:12:05:1a:8f:67:1b:75:6b:00:69:
         95:c6:ef:c9:68:e8:9a:c3:d8:74:14:bb:a0:c3:7f:ac:9d:69:
         63:2e:69:a0:be:ec:a3:f6:52:2c:12:e6:2e:f5:16:69:cc:7c:
         b5:03:54:9d:29:59:eb:4d:47:f4:09:e9:c2:8e:a0:55:76:dd:
         2a:b1:fa:82:24:71:0b:4a:22:a1:73:2d:15:47:56:9c:09:e6:
         07:77:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----