Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
File:                     sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json)
Hash identifier:          KZILLLULQFWRxcVrwYdGujbyCAXu42d6gQBim98DERs=
Subject key identifier:   55:B5:BD:DB:0A:A3:62:03:7C:0B:55:2B:79:20:47:B0:DE:FB:0D:81
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Certificate issuer:       /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial:       01962E61C188A1CD08CEA0A31A418085DB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
Manifest number:          0368
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: pBOBaEWXkYoN8gJBhZMkD24bH8M.roa (hash: yYFHTbbCS/jQtr+ov28WxXyLXELdV4Do2QZ+inX5RdA=)
                          2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: DxmvHER+oC1zUFDmTPvRJ/Y0chqVtIbk3xbW+2AKXgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c1:88:a1:cd:08:ce:a0:a3:1a:41:80:85:db:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=55b5bddb0aa362037c0b552b792047b0defb0d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:f9:55:1d:9f:ba:d7:5b:16:89:1e:f2:6b:
                    c9:22:94:bb:86:9c:bf:36:7a:48:27:78:b5:ae:45:
                    92:10:26:f6:70:b4:a5:b1:7c:4b:07:4e:50:36:d6:
                    d3:4a:1a:5f:9f:c2:b3:cf:46:e2:ce:1a:9a:6e:b0:
                    a7:13:d6:5b:4a:0e:62:e5:da:fd:a2:15:ae:9e:8f:
                    cd:6b:25:d0:5e:76:cc:6d:f4:e1:6a:b6:ec:70:9e:
                    d2:da:74:12:b3:5f:7b:c9:6a:44:57:ab:75:c9:e6:
                    43:4d:74:d3:b7:52:1e:17:9b:b6:07:20:4a:36:f4:
                    81:56:55:0b:f3:55:29:58:a1:ec:c0:11:d9:be:ac:
                    a0:ad:b0:1c:48:05:79:5e:98:96:04:8f:e7:b5:f9:
                    ac:61:88:c8:d4:eb:3b:c4:a7:71:03:15:0a:26:26:
                    c2:ae:3d:e6:a5:22:a0:bd:41:59:cb:00:e4:75:d0:
                    98:28:df:54:d2:ab:d4:7d:0c:fe:e9:4d:c3:69:f3:
                    ef:70:83:fc:8d:75:aa:0d:71:2f:fc:b2:7e:d1:41:
                    63:91:88:b3:fc:89:fe:66:b1:f9:0b:07:0b:1c:23:
                    88:cc:92:11:27:05:86:50:eb:72:7a:51:c1:bd:22:
                    e6:b7:90:8e:9f:3f:b0:2b:18:20:43:f7:fd:8b:09:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B5:BD:DB:0A:A3:62:03:7C:0B:55:2B:79:20:47:B0:DE:FB:0D:81
            X509v3 Authority Key Identifier:
                keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:77:5c:d5:79:d4:f2:10:b9:b4:4c:ad:27:c7:17:ac:70:2b:
         3c:36:76:e1:6f:64:40:53:e4:7a:13:e5:9e:e4:04:67:9e:b1:
         d1:86:c0:b0:85:16:cf:5b:21:7d:29:d5:47:02:0b:9a:56:19:
         4e:db:52:ef:32:37:f5:f0:4b:55:09:93:02:f0:a4:12:7b:29:
         9f:cd:14:f6:b4:70:14:8c:fb:ad:c8:57:86:31:bd:81:8f:15:
         e9:e8:92:89:d4:4a:3b:c3:ef:31:9d:05:c1:94:e5:ed:c9:ec:
         11:14:f8:4d:57:b0:34:6b:1f:3c:12:58:62:0a:e3:09:9a:02:
         60:1e:ee:0c:a3:5b:50:82:9d:3f:0f:6a:73:40:83:81:ab:c4:
         91:cc:35:e2:3b:99:70:cf:fe:d3:06:c4:f5:54:0d:ed:86:d3:
         07:2e:a0:3a:cc:7b:ba:24:fe:24:0d:aa:3c:c1:a7:f3:a0:c4:
         a8:33:88:d2:0a:14:60:e8:69:a1:73:1c:aa:ad:05:6f:16:6f:
         51:15:54:cf:fc:e8:a0:4a:c1:71:11:4a:e0:c3:e7:34:46:e7:
         6c:ec:bc:cb:b7:95:e5:02:aa:54:30:a2:0e:78:12:5f:12:da:
         d9:be:89:5f:3f:ce:c8:c6:42:f3:15:dc:46:0d:e8:2e:c1:b6:
         f7:f4:1b:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcGIoc0IzqCjGkGAhdt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTZhMDY4NGQxZDM4YmFjZjQzMzhjMmIwMWRiM2I0MTM3
MGViNDUwHhcNMjUwNDEzMDkwMTIwWhcNMjUwNDE0MDkwMTIwWjAzMTEwLwYDVQQD
Eyg1NWI1YmRkYjBhYTM2MjAzN2MwYjU1MmI3OTIwNDdiMGRlZmIwZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0P5VR2futdbFoke8mvJIpS7hpy/
NnpIJ3i1rkWSECb2cLSlsXxLB05QNtbTShpfn8Kzz0bizhqabrCnE9ZbSg5i5dr9
ohWuno/NayXQXnbMbfTharbscJ7S2nQSs197yWpEV6t1yeZDTXTTt1IeF5u2ByBK
NvSBVlUL81UpWKHswBHZvqygrbAcSAV5XpiWBI/ntfmsYYjI1Os7xKdxAxUKJibC
rj3mpSKgvUFZywDkddCYKN9U0qvUfQz+6U3DafPvcIP8jXWqDXEv/LJ+0UFjkYiz
/In+ZrH5CwcLHCOIzJIRJwWGUOtyelHBvSLmt5COnz+wKxggQ/f9iwk9rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW1vdsKo2IDfAtVK3kgR7De+w2BMB8GA1UdIwQY
MBaAFLMWoGhNHTi6z0M4wrAds7QTcOtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjct
MTRiOTdjZmJhZDQ3LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjctMTRiOTdjZmJhZDQ3
LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyndc1XnU
8hC5tEytJ8cXrHArPDZ24W9kQFPkehPlnuQEZ56x0YbAsIUWz1shfSnVRwILmlYZ
TttS7zI39fBLVQmTAvCkEnspn80U9rRwFIz7rchXhjG9gY8V6eiSidRKO8PvMZ0F
wZTl7cnsERT4TVewNGsfPBJYYgrjCZoCYB7uDKNbUIKdPw9qc0CDgavEkcw14juZ
cM/+0wbE9VQN7YbTBy6gOsx7uiT+JA2qPMGn86DEqDOI0goUYOhpoXMcqq0FbxZv
URVUz/zooErBcRFK4MPnNEbnbOy8y7eV5QKqVDCiDngSXxLa2b6JXz/OyMZC8xXc
Rg3oLsG29/Qblg==
-----END CERTIFICATE-----