Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File:                     5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier:          K1reHqQM89LBp4HTsPymkMHbFiwiGzmiMna6yRXdRVQ=
Subject key identifier:   69:CA:4C:6F:6A:FA:16:30:67:56:4C:F3:63:F7:48:3B:D1:F5:D1:8D
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer:       /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial:       01962F064BA65D87932FE94632D50AD6955D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number:          04FD
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: q8H7odvqV13qeZmwIFnhWNxP0hpHmFUFNzWhCa2zbnQ=)
                          2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=)
                          3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=)
                          4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4b:a6:5d:87:93:2f:e9:46:32:d5:0a:d6:95:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=69ca4c6f6afa163067564cf363f7483bd1f5d18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:d1:bc:41:5c:d9:a8:f7:4c:7c:5c:ba:50:
                    46:46:9e:66:c8:2c:68:2f:46:3e:2c:e4:07:78:07:
                    2b:a1:e5:e7:c7:b7:78:e1:00:c4:fb:87:fa:ec:7e:
                    14:e6:e7:42:87:f9:39:ca:ad:d3:3f:a1:b9:f3:fd:
                    65:5f:bf:62:29:71:23:4e:85:84:0c:25:10:a4:ab:
                    ae:94:82:25:b5:87:00:6e:ae:0a:1f:c8:48:75:ae:
                    de:fe:48:78:50:d7:ba:9f:90:13:38:89:be:24:a9:
                    00:c0:f6:69:9f:ec:65:d4:35:3a:46:14:94:3e:c8:
                    9b:c3:49:d2:bb:db:39:63:6b:fc:a4:1d:d1:e1:c6:
                    b0:c4:f2:1c:f2:bf:ff:86:9e:df:13:3f:f7:38:37:
                    05:a4:6a:6c:74:bf:b5:af:c0:0d:a1:ce:0a:3c:2f:
                    a5:fc:2a:7a:ff:3b:bf:f1:54:49:f2:7a:30:9e:be:
                    cc:9a:75:d0:5e:19:b8:a9:72:97:63:d2:67:02:5d:
                    44:94:d2:31:84:93:f6:59:68:9d:b6:33:bb:a1:15:
                    85:23:d7:3a:f6:38:1d:3d:98:14:fe:8b:db:c6:09:
                    12:e3:27:9d:1a:4c:ac:76:66:e5:af:78:42:02:a9:
                    9a:de:87:a6:15:95:a3:ee:44:29:16:ae:ff:d4:28:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CA:4C:6F:6A:FA:16:30:67:56:4C:F3:63:F7:48:3B:D1:F5:D1:8D
            X509v3 Authority Key Identifier:
                keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:90:83:b0:b8:92:c4:7c:24:52:96:5e:c7:7c:07:7a:bb:a3:
         61:6e:7e:5f:a8:ba:0f:43:7d:d8:30:6d:a3:35:28:50:92:70:
         ca:37:bc:89:6b:59:f6:9d:94:fb:a9:ab:f8:da:da:9e:40:61:
         90:85:77:71:a5:21:2d:d8:76:86:4f:16:60:f0:10:e7:88:76:
         82:07:c5:19:2f:b9:fe:55:21:25:07:2b:8d:db:d7:85:59:4f:
         74:9f:20:f2:f4:2a:21:bb:12:f8:c6:d5:cb:c6:51:d2:bf:aa:
         24:95:97:62:d2:1a:38:af:d6:d6:25:0a:dd:13:77:60:e1:20:
         87:43:42:67:a7:3c:08:7b:41:68:82:99:b1:e8:94:59:cc:53:
         2c:18:af:25:f1:6f:29:f0:cf:42:d3:75:7a:79:5e:71:76:59:
         18:01:f8:02:00:a0:24:3a:d6:4d:7c:e2:ce:4a:9d:79:41:0d:
         7a:7e:d4:2e:64:7a:bc:3d:d4:8b:31:bb:a5:4b:7f:c2:8a:c2:
         6f:71:26:3c:32:89:b8:9f:30:fb:4d:4c:aa:1d:25:82:84:f1:
         50:b4:01:5e:5b:6e:58:31:00:09:20:83:a5:a8:1d:92:84:55:
         96:8d:1b:af:6f:b4:4a:aa:2c:47:33:f1:01:ff:3e:f2:59:7a:
         02:5a:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----