Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File:                     5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier:          aXjcMwYpjj3k+y+6+jIIxY63esQpMLLIs8sL+tREdb0=
Subject key identifier:   29:4F:33:20:A4:27:24:64:A0:A2:1C:5A:6B:B3:54:B4:D9:51:65:D9
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer:       /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial:       01962E98CA9555A60D1860735A1146BCA618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number:          14A3
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: Xc6RlWNVAqS9a+vkwYypbHrp5WketGxU/X9nL3CLgNk=)
                          2: KRSzUBxyLebIHKF4Pc56YInJ7G4.roa (hash: bYjIh5qsMD47j13Dp6UvpgvAJLXcSZU6nC4Ef8AfKgY=)
                          3: twkvRlKBbWGvXorm0QWgUQL2aXw.roa (hash: RdMA83SLaDMkPV3ykgU6NQ7K1hlLuBXMiacxW37ziVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ca:95:55:a6:0d:18:60:73:5a:11:46:bc:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=294f3320a4272464a0a21c5a6bb354b4d95165d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c9:0a:d3:ca:71:69:db:29:2b:1a:33:5e:d3:
                    11:13:62:44:cf:14:4a:ea:6a:1b:57:b9:c9:cb:8b:
                    fa:43:5e:f4:c2:d0:1c:66:c4:32:d2:99:e5:9f:1a:
                    8c:e3:80:11:a3:1f:bd:b6:da:55:58:ab:d2:44:92:
                    47:90:82:80:49:80:e9:f7:1e:a3:fb:cb:23:93:bf:
                    2b:ef:d2:a8:a8:0f:af:1a:40:31:a5:a9:74:ce:ac:
                    d5:6b:44:79:13:36:be:cf:c6:6e:20:ff:81:8b:f0:
                    47:49:78:a8:a5:7c:75:c7:2e:88:e3:06:ad:82:aa:
                    98:e9:0f:e2:66:4b:f2:62:c5:fd:7d:58:da:06:15:
                    6d:26:f3:1c:d8:72:82:27:df:81:eb:ac:62:3e:73:
                    d2:66:d6:d7:f4:bd:b8:03:16:56:d2:97:0e:bd:8f:
                    1d:5b:1d:c6:09:78:49:89:05:bd:7f:57:46:e7:07:
                    ff:90:77:03:d4:47:3e:53:7e:22:34:c3:5f:f5:ab:
                    4e:28:9e:7e:e6:b9:f4:ca:92:bc:0e:a1:00:23:c4:
                    85:c4:92:c2:24:46:a8:28:45:a5:aa:9a:10:11:a5:
                    fc:6f:96:dd:1e:35:e2:67:d9:32:48:eb:da:1d:ee:
                    d3:bc:bb:8c:6c:d5:f3:77:55:61:47:d5:a5:00:31:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4F:33:20:A4:27:24:64:A0:A2:1C:5A:6B:B3:54:B4:D9:51:65:D9
            X509v3 Authority Key Identifier:
                keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:bd:51:ed:e9:9c:f2:cf:6b:0b:0e:7d:f3:65:33:08:45:
         6e:3e:99:67:de:d8:3e:10:93:2b:1b:b0:f4:a4:27:be:d9:69:
         5e:de:38:5f:c0:04:be:f0:44:50:77:b6:ac:08:13:cf:43:9f:
         48:48:49:54:c4:95:6c:93:92:2d:7d:d5:7c:2f:11:4f:d4:7f:
         a4:b6:2b:d6:ec:3a:d0:ab:5c:c0:ff:6b:54:2c:be:13:07:06:
         56:8c:68:f7:24:70:12:60:93:bd:44:a2:f8:ba:15:dd:f2:47:
         81:a5:69:c4:06:2c:18:53:19:ec:2e:ac:a5:4b:ea:20:29:4c:
         bb:bf:9b:ca:45:63:5a:8d:f2:39:34:2e:68:34:97:8b:d9:73:
         1f:28:7d:e4:60:eb:8c:32:b3:3a:75:d4:cb:88:df:1d:9c:a0:
         5b:48:f0:53:9e:41:3c:99:61:55:39:a8:8b:57:af:48:8e:10:
         bf:c2:cd:a2:3c:a3:d2:df:2d:22:df:3a:fd:50:eb:7c:90:03:
         b8:b2:76:b3:22:98:92:72:6d:5e:fc:66:c4:dd:73:9a:5c:4f:
         37:60:df:b2:5d:2d:03:69:b1:37:c8:9c:a8:96:e5:36:6b:9f:
         6f:b0:22:44:2b:14:51:11:dd:f0:ef:16:dc:95:06:ff:60:2e:
         58:65:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----