Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File:                     xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier:          H9H9QGPHfda4BVxLPHvwPm1m4LYlJKVVvAng6pzc8iA=
Subject key identifier:   21:AF:B8:08:94:FB:CF:78:9D:7F:AA:7C:CE:14:A7:D1:85:A9:21:96
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer:       /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial:       01962F743D142641901FF5C2A35D9E16A547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
                          2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: bhsd9xqTryVVEi4fcOY/5C3nooX2tEUiEuZBoTTGTyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:14:26:41:90:1f:f5:c2:a3:5d:9e:16:a5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=21afb80894fbcf789d7faa7cce14a7d185a92196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:94:1a:c7:df:91:99:7a:7d:88:3c:a4:79:
                    34:27:08:bb:68:91:68:f4:eb:34:b3:96:ba:9d:b0:
                    6b:f2:54:c8:f4:d3:55:b8:3e:9b:83:80:41:8e:65:
                    87:3a:f1:eb:98:4c:85:d8:0c:d3:26:ed:67:3a:a9:
                    35:36:31:f6:2a:e8:f4:6e:ee:77:35:fa:bd:9d:ca:
                    ce:cd:8e:75:16:d0:be:c6:6b:06:8f:a0:1e:c1:3f:
                    04:90:e7:67:7e:97:87:c8:62:3d:b7:8d:0a:87:6a:
                    d7:a4:94:35:6f:58:0b:91:3e:5b:cc:46:b6:af:32:
                    db:4a:99:ff:c1:8c:57:fc:23:0b:b3:17:a8:51:e5:
                    1d:59:a9:10:26:1d:f9:8c:5f:69:a7:5b:6e:a4:0e:
                    4c:c2:a8:66:4d:12:2e:dd:4b:c8:69:55:1c:27:c6:
                    a3:eb:70:02:82:cb:2c:34:d6:86:5c:41:bb:79:6f:
                    be:0f:87:d1:5c:04:72:9a:62:8d:e5:9f:ab:3b:23:
                    82:b3:76:e4:ce:6c:0e:18:56:26:51:04:b9:54:40:
                    1f:15:10:2f:d0:1b:8d:be:44:ce:08:7d:62:e4:6d:
                    a2:00:13:50:09:fe:84:a1:8e:ad:db:9b:31:6a:8a:
                    92:25:71:9b:8b:90:21:2e:ce:cd:09:fc:c9:61:38:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AF:B8:08:94:FB:CF:78:9D:7F:AA:7C:CE:14:A7:D1:85:A9:21:96
            X509v3 Authority Key Identifier:
                keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:19:21:03:8d:70:ff:d6:13:c6:c4:07:32:c3:ab:91:c4:
         23:f3:c5:6d:53:0c:4c:43:4e:0f:0b:85:26:4d:64:65:54:4a:
         77:5a:b2:12:42:03:02:4b:1c:ca:9c:92:60:f7:f0:23:02:f9:
         86:5f:d1:2f:f7:12:b0:34:c2:8b:81:d8:6c:4a:be:fc:d4:5b:
         70:78:e8:b6:8e:ed:33:25:2c:99:32:4c:1b:49:12:d4:dc:ed:
         b0:02:d0:50:78:e2:a0:da:53:1c:18:f2:3f:9e:87:2d:d2:dd:
         ea:f4:b3:e3:5b:8a:4f:c8:ab:72:77:07:9a:99:32:17:f0:0b:
         31:69:b7:bc:29:18:ec:e2:61:41:70:05:17:ca:0f:ff:ad:f0:
         81:59:d1:e7:4d:9f:67:be:cf:90:ff:14:c6:08:8d:f8:56:49:
         af:ca:e2:4d:e5:27:32:9a:cb:9b:2d:fa:a4:ad:fc:cf:79:26:
         09:23:00:d6:a3:5b:d8:31:2e:01:5e:66:eb:c9:32:66:39:90:
         d5:57:58:ae:4e:f1:8e:c9:b3:c6:e4:88:8a:43:c8:c6:20:f9:
         b3:99:73:d2:28:06:8b:06:68:c5:f5:3b:f4:79:9c:ba:3c:cd:
         c1:73:45:8d:51:9e:d0:17:e0:3c:2e:53:62:03:29:4c:d9:2b:
         15:b5:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----