Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File:                     xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier:          wj3twwpwj1DcTOkUTKNF9yjwb32wqJax0h1FY4Iqh7c=
Subject key identifier:   32:9C:51:F2:35:DD:1D:90:44:8D:0B:29:52:F9:84:9E:1B:66:46:C7
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer:       /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial:       01962E98A5AE6069EE513AF17CC9DDB9DD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
                          2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: KppBkHaPplycemYxJePA4JFvHP2K1Fody6T87t5xJeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a5:ae:60:69:ee:51:3a:f1:7c:c9:dd:b9:dd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=329c51f235dd1d90448d0b2952f9849e1b6646c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:5f:32:e6:47:d7:85:62:01:1d:a4:26:9d:
                    24:8a:59:4d:3d:ba:c2:1f:5d:9b:6c:5b:ac:ee:10:
                    b3:2d:e3:5c:0f:4c:c4:72:db:de:47:a3:86:a1:63:
                    58:2c:82:34:aa:e3:e9:d2:cb:10:8d:53:3a:a4:01:
                    80:4e:6b:63:2c:54:2d:4e:b0:16:3d:59:41:52:4b:
                    8e:30:4b:fb:78:73:51:d0:0f:09:c9:b4:b1:fc:25:
                    6c:d0:05:87:78:e4:7e:9e:35:5f:ad:d9:cd:f7:d8:
                    52:af:60:36:a1:da:23:4d:ef:4b:e9:aa:b2:8a:a8:
                    23:7a:b2:99:40:0b:16:00:8b:9d:c8:32:86:fa:29:
                    3a:1a:6b:16:cc:a3:c6:48:92:bd:51:d1:9b:b2:d5:
                    17:e9:2f:6e:2b:a3:58:82:7e:3d:f6:cc:6d:f2:48:
                    95:0c:08:72:d1:9d:1c:35:47:2c:33:fd:29:0a:fe:
                    8d:ad:79:0a:8e:16:24:0e:4d:4a:ac:d1:3d:6f:a9:
                    3f:9f:5b:2f:ab:db:f4:a5:59:83:46:d5:6b:cc:22:
                    88:40:c5:da:b1:84:82:ad:c2:c5:3a:6a:ae:ea:c3:
                    35:a9:d2:ae:cf:01:fe:a8:4d:42:60:ae:23:5b:b7:
                    d0:d6:29:e6:75:9f:38:54:28:ac:58:41:f3:bb:ce:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9C:51:F2:35:DD:1D:90:44:8D:0B:29:52:F9:84:9E:1B:66:46:C7
            X509v3 Authority Key Identifier:
                keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b0:dc:eb:2b:c9:00:81:96:33:69:8d:63:f5:55:b2:0b:05:
         d8:c7:7f:0e:53:64:1b:cc:91:00:55:9f:4d:34:f4:66:ae:87:
         f7:58:65:db:62:ec:0a:19:b5:67:b1:16:d5:1f:27:20:f9:2a:
         2b:bb:3c:a7:30:89:49:b5:04:7f:94:ab:cb:ff:91:45:c0:8f:
         25:4d:6e:0f:9d:8f:06:e5:c3:c2:ec:8d:f3:d7:99:80:e8:ff:
         d2:b7:d2:64:17:8f:b4:31:d5:8c:b6:9a:0e:e1:3d:32:27:34:
         e2:7f:de:da:56:41:c2:6d:be:fc:88:cf:12:f5:b5:27:8f:72:
         1a:22:26:03:60:45:7b:c2:75:57:5e:6d:1f:3f:a5:26:51:3f:
         92:6e:b6:88:8e:41:06:56:ba:6b:62:e7:23:e5:2d:3b:02:5b:
         41:43:47:b7:1a:ed:18:29:2d:46:ca:fb:40:a7:15:60:b2:92:
         fa:77:63:8c:ab:15:ff:28:e1:e0:3d:36:c7:14:80:bb:de:56:
         c3:be:28:93:ad:19:ec:6b:07:88:fd:d5:0c:e4:44:78:63:ca:
         80:5b:b4:32:2b:e0:64:11:fa:a7:05:0b:cf:49:1f:87:d3:fe:
         6f:bf:52:ae:a2:95:69:5b:22:b6:da:89:06:5d:3b:e3:c4:96:
         f3:2e:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----