Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File:                     XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier:          B4514xt9mIvrSpnuukEso9mQ/CgmWNRT09jXWzvoDf8=
Subject key identifier:   CF:07:9B:FE:E2:B8:20:F4:1B:26:BE:26:28:47:9D:69:8D:D8:32:48
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer:       /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial:       01962E99359C62FD9B36648B81859B3A2FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number:          0AF4
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: bY6pRIEWv2YW5NhDUZen8wtyMLddtmyNiiehcSEajk0=)
                          2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:35:9c:62:fd:9b:36:64:8b:81:85:9b:3a:2f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=cf079bfee2b820f41b26be2628479d698dd83248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:2d:7c:53:a3:93:6a:a8:56:e7:7d:84:e5:
                    f4:2d:47:8c:27:10:1b:53:e9:aa:17:92:c1:23:20:
                    00:37:6b:74:5d:2e:0c:65:b1:bf:60:7a:3a:2a:6d:
                    b0:e9:aa:1f:e8:2d:48:8f:5f:e5:b3:a0:00:e4:84:
                    31:23:6e:09:c6:88:d6:fa:fd:ce:f9:04:ac:d9:01:
                    b4:e6:fb:ea:2f:ca:d1:b9:e3:68:8c:99:c2:0f:ed:
                    9d:f9:a3:f7:3b:7c:fa:b3:95:57:66:10:1f:5c:db:
                    36:89:99:12:45:e5:15:23:38:ee:f4:83:62:7b:aa:
                    44:f4:06:5a:1d:bd:f3:69:48:2e:8b:d9:fd:a7:a9:
                    82:77:b9:c8:8b:40:10:67:2c:13:af:0e:7e:99:ea:
                    89:7e:d6:e7:2d:5e:25:31:e1:e4:d0:59:32:72:7e:
                    f8:5d:34:dd:f5:e3:b6:41:8c:65:b9:f2:89:44:a6:
                    63:61:ad:94:04:63:3c:b6:ec:fd:30:bf:49:7f:1e:
                    19:be:e4:71:26:fc:30:a2:8e:dd:44:71:21:e9:28:
                    09:39:1c:5d:ac:ba:fd:3d:16:32:44:c2:3b:4b:f9:
                    3f:2c:82:51:01:86:1d:f2:28:88:a8:38:2d:b4:a9:
                    7a:a6:34:2f:e4:91:35:f5:21:99:f8:b0:0c:2f:c5:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:07:9B:FE:E2:B8:20:F4:1B:26:BE:26:28:47:9D:69:8D:D8:32:48
            X509v3 Authority Key Identifier:
                keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:2b:46:d3:06:f6:e9:a4:1f:7f:cc:f9:a3:b6:89:37:1a:57:
         40:2c:5e:58:f5:17:98:0c:ac:7c:5d:85:c2:c6:25:13:a8:50:
         1b:f4:c3:29:19:30:13:b0:97:6a:46:cb:f8:ba:15:0a:4c:30:
         d1:1a:2e:05:ce:f3:94:6a:01:89:be:6a:f2:89:2c:74:5e:24:
         72:a6:45:96:b0:65:f1:54:52:8f:08:9d:90:e1:d6:52:aa:27:
         35:ee:f7:b8:39:5d:1e:0f:f6:95:93:40:41:ca:2d:18:8d:bc:
         74:1d:38:b7:bd:a3:b0:b5:76:22:05:3c:5e:45:14:ef:2d:25:
         fd:03:7e:a3:de:4d:c5:2b:6b:85:6a:ff:f9:60:a3:bd:70:89:
         87:9a:bc:7a:af:60:8a:4a:94:97:7a:17:02:0b:79:58:1a:23:
         03:03:a7:af:e7:1e:a9:86:42:45:e1:3f:26:53:e3:18:de:38:
         ab:4d:2f:f0:24:5d:50:4c:cd:be:39:5d:c9:e8:2e:b7:80:09:
         de:0a:e7:f3:f9:0c:8f:33:fc:50:64:66:ea:41:52:2c:ea:44:
         5a:92:37:ed:8b:b6:0d:3b:fc:de:71:eb:2d:aa:7c:ef:12:45:
         93:df:c0:f9:4f:c0:37:7a:6e:a2:35:e1:45:9e:fe:53:64:72:
         05:24:e8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----