Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File:                     X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier:          BPlp2mbDXaSczHkSsZ3YCGDyGJBa7s/MQZuXlraXI48=
Subject key identifier:   E5:A2:2F:BA:8A:B8:1F:AD:1A:45:C8:76:1E:FD:01:CE:60:F4:F9:43
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer:       /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial:       01962ECFC4C90B9DE94C53F58537B6BB1645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number:          0310
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: dNiLVxPCtaj5v1x/5YNm9NmvqOOsy/Ww7eMLqZyCrsk=)
                          2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c4:c9:0b:9d:e9:4c:53:f5:85:37:b6:bb:16:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=e5a22fba8ab81fad1a45c8761efd01ce60f4f943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:55:86:f9:e8:0c:35:b9:14:0a:86:fc:77:
                    c5:15:4e:b4:fb:c4:83:4d:84:26:2d:21:c2:c7:d4:
                    00:e2:ed:80:50:8d:fa:9a:89:41:e8:f8:21:f7:93:
                    de:e9:ef:41:d4:ce:21:ac:e6:55:d6:08:47:ea:d8:
                    a4:fa:f4:46:56:7a:54:b8:28:7e:e5:31:fa:7b:5b:
                    74:b0:6f:ad:d8:09:c5:ab:c6:91:d6:fe:6d:ed:5d:
                    06:c5:59:ec:25:00:29:3b:28:be:19:d5:0b:2e:af:
                    62:2f:47:de:a2:24:9b:f7:d8:96:78:74:60:f4:43:
                    c5:67:0b:0b:2a:fe:f4:7e:ce:97:fe:55:a6:72:e7:
                    d7:ab:b6:79:60:fb:ea:e8:27:5f:aa:43:47:68:42:
                    23:58:34:e7:17:e2:30:e2:94:d4:dc:83:07:10:77:
                    13:ee:db:71:45:6e:ee:79:b2:94:99:f7:02:08:89:
                    ec:8e:e9:f6:d9:31:4a:1f:ae:bb:e5:5a:c1:98:4d:
                    52:16:cb:12:a6:a0:0c:80:a5:66:26:c1:ac:76:c1:
                    40:e8:e9:ef:79:c9:58:a1:52:33:03:f7:2c:df:ed:
                    70:d1:96:fc:ca:c9:65:e5:e1:13:48:e1:f4:12:01:
                    46:5b:98:24:27:08:34:bf:f3:b4:dc:e8:b6:e4:d9:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:2F:BA:8A:B8:1F:AD:1A:45:C8:76:1E:FD:01:CE:60:F4:F9:43
            X509v3 Authority Key Identifier:
                keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bc:69:ab:e0:0c:6b:85:56:ac:08:33:50:40:10:dd:70:c8:
         9d:ba:93:16:21:e2:bd:d7:99:96:90:a0:0e:84:29:11:aa:df:
         b9:67:38:22:c4:0b:5b:78:cb:ae:76:b6:7d:63:2d:46:ed:64:
         22:54:9a:a8:40:9e:38:2a:3c:2d:11:da:3b:4b:1f:1c:8b:c8:
         51:68:ba:00:5c:48:e8:10:38:9d:39:c4:6e:ee:f3:13:41:cf:
         25:cb:43:33:90:49:19:59:1a:05:0d:6e:39:bd:1d:29:a2:f2:
         73:4e:ff:0b:f7:18:2f:0a:d0:ad:08:29:cb:85:e5:35:15:b4:
         9d:33:13:5f:40:40:c9:c6:5f:13:e6:56:50:ee:96:78:b9:82:
         af:9a:07:0a:60:3b:ad:89:e7:87:1a:4e:d6:bf:83:af:a5:53:
         1a:88:7b:5e:bb:aa:f5:8e:e3:8d:65:2c:ef:21:96:6d:61:42:
         cc:99:4c:df:ff:5d:c9:2d:a3:96:2b:82:f3:ff:91:9f:29:75:
         10:1e:52:3c:b9:b3:aa:ea:54:36:a0:4d:c0:d5:ad:e8:b4:85:
         51:b3:e0:87:bd:92:0b:43:c2:85:0c:30:c0:49:b4:0e:49:64:
         52:ce:0d:41:08:0f:25:17:3b:0a:2a:c8:37:87:56:a4:71:78:
         7c:5c:63:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8TJC53pTFP1hTe2uxZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYWIwMTlkOThiODhjNTg1ZDVmMDE2MjA0MTEzYzgzOWFl
MDY3ZDEwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
EyhlNWEyMmZiYThhYjgxZmFkMWE0NWM4NzYxZWZkMDFjZTYwZjRmOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHRVhvnoDDW5FAqG/HfFFU60+8SD
TYQmLSHCx9QA4u2AUI36molB6Pgh95Pe6e9B1M4hrOZV1ghH6tik+vRGVnpUuCh+
5TH6e1t0sG+t2AnFq8aR1v5t7V0GxVnsJQApOyi+GdULLq9iL0feoiSb99iWeHRg
9EPFZwsLKv70fs6X/lWmcufXq7Z5YPvq6CdfqkNHaEIjWDTnF+Iw4pTU3IMHEHcT
7ttxRW7uebKUmfcCCInsjun22TFKH6675VrBmE1SFssSpqAMgKVmJsGsdsFA6Onv
eclYoVIzA/cs3+1w0Zb8ysll5eETSOH0EgFGW5gkJwg0v/O03Oi25Nmq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWiL7qKuB+tGkXIdh79Ac5g9PlDMB8GA1UdIwQY
MBaAFF+rAZ2YuIxYXV8BYgQRPIOa4GfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTct
Yzk1M2E4OGJiZmEzLzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTctYzk1M2E4OGJiZmEz
LzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrxpq+AM
a4VWrAgzUEAQ3XDInbqTFiHivdeZlpCgDoQpEarfuWc4IsQLW3jLrna2fWMtRu1k
IlSaqECeOCo8LRHaO0sfHIvIUWi6AFxI6BA4nTnEbu7zE0HPJctDM5BJGVkaBQ1u
Ob0dKaLyc07/C/cYLwrQrQgpy4XlNRW0nTMTX0BAycZfE+ZWUO6WeLmCr5oHCmA7
rYnnhxpO1r+Dr6VTGoh7Xruq9Y7jjWUs7yGWbWFCzJlM3/9dyS2jliuC8/+Rnyl1
EB5SPLmzqupUNqBNwNWt6LSFUbPgh72SC0PChQwwwEm0DklkUs4NQQgPJRc7CirI
N4dWpHF4fFxjZw==
-----END CERTIFICATE-----