Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File:                     a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier:          VGjqxUJGHGq5f5vMjIxN8u9P76WcunBKU2jcxZWppHA=
Subject key identifier:   DA:98:35:0D:2F:7D:44:4B:F7:2B:B7:80:A8:A2:09:6E:B0:5E:17:3D
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer:       /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial:       01962F3D591021EB26249C13122BA3C5D936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number:          0515
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
                          2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
                          3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: h8SPSC53vsOyrbhHiJnNfE3wcIgHeOWVVCEUIDfoEG0=)
                          4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:59:10:21:eb:26:24:9c:13:12:2b:a3:c5:d9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=da98350d2f7d444bf72bb780a8a2096eb05e173d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:21:ff:9f:3a:30:95:7f:fa:f8:16:b4:20:
                    5d:d9:91:82:f6:39:e6:a7:8f:29:39:ca:d4:71:f7:
                    58:21:a0:f4:1d:49:55:20:9d:4e:b0:ba:43:06:27:
                    5d:43:e3:70:eb:a8:16:6b:bd:a4:3d:f8:92:3b:11:
                    f1:44:92:35:73:61:90:64:4d:24:03:29:aa:dc:19:
                    c0:9a:e9:56:b4:a3:8a:f0:50:f8:3d:85:08:5a:60:
                    61:41:ff:7c:05:24:f2:fa:f6:88:e1:e5:ef:4a:37:
                    d1:ff:86:3d:e6:49:a2:fc:78:2c:10:56:1d:43:07:
                    ee:f5:2c:b0:5b:7a:82:3d:e0:54:00:1b:f7:c9:b4:
                    8a:25:64:02:e9:06:af:a5:51:5f:50:90:49:fe:7c:
                    23:e2:93:32:b6:db:bc:cc:93:0c:d1:2d:a7:ec:88:
                    9d:ca:1f:61:2f:0c:32:94:25:e2:6e:0a:79:54:c3:
                    87:3a:a2:5d:ce:53:e6:e0:22:36:10:c6:39:70:0f:
                    6e:a1:02:80:c0:a4:45:f7:ad:8f:41:f7:14:e4:1b:
                    12:32:0c:ff:e7:45:8d:ce:de:22:d4:8a:d6:5d:74:
                    82:99:79:68:10:d6:19:c1:b0:66:20:65:49:d6:17:
                    6e:85:f9:5a:25:ea:60:ae:e2:e0:b7:18:17:2d:8b:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:35:0D:2F:7D:44:4B:F7:2B:B7:80:A8:A2:09:6E:B0:5E:17:3D
            X509v3 Authority Key Identifier:
                keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:3d:42:9a:6a:9d:56:e1:9e:3a:f4:36:91:c6:2f:f1:9a:
         aa:43:fb:2a:cf:b3:07:6c:3d:4a:7b:c0:a0:87:98:ae:03:ec:
         21:0f:9e:7c:37:b1:59:ac:ae:46:38:c9:2f:aa:8e:72:9a:6a:
         ce:22:2a:6d:cf:b4:d2:ca:7d:06:6f:78:68:54:61:c6:a4:59:
         54:bb:44:c8:d3:39:4e:7e:d1:88:cf:94:11:b9:51:b6:02:aa:
         1b:8b:1b:4e:6c:e0:46:39:26:0a:03:eb:80:fa:51:fe:71:78:
         a2:e6:00:09:f1:3a:19:a4:97:0a:69:60:04:37:3f:6c:49:8d:
         3e:76:32:2b:5e:8d:e9:c0:e6:84:6e:e0:58:c1:0f:65:e3:01:
         58:9c:7d:e2:a0:af:41:c7:d1:70:02:da:ef:7e:e5:ce:c3:bc:
         0f:a2:bf:31:dc:6f:23:bf:b3:8d:ad:7d:8e:59:14:00:42:79:
         88:3c:3f:74:7e:f5:d6:a2:9c:a7:9b:66:3b:9d:18:26:31:5f:
         eb:79:64:49:74:5b:a0:8f:13:b7:79:39:ff:0d:0a:b7:05:6d:
         50:15:5c:c0:3a:07:ba:42:f8:67:0a:7a:03:c4:40:ff:06:ce:
         39:02:c1:87:89:3c:6b:8e:01:8f:cb:9a:6c:26:62:51:0c:45:
         60:94:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----