Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File:                     XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier:          NxBwcRx3CGGW703yRfpbL3qREQ5VeaJWgMXr3UYkDKI=
Subject key identifier:   F5:37:47:39:B8:5B:24:CE:49:F8:D9:B1:10:DE:A0:71:4F:8E:B2:A4
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer:       /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial:       01962E61FED0F5B42FC26DCADF5877C012C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: F9aqD+PDX0NeXOqjXkZRb7GwQeF3VaYhf94pGuwmmzo=)
                          2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
                          3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fe:d0:f5:b4:2f:c2:6d:ca:df:58:77:c0:12:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=f5374739b85b24ce49f8d9b110dea0714f8eb2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:91:30:19:ed:ba:e6:e7:7a:88:22:1c:3c:
                    44:dd:9c:f7:53:70:5f:09:b6:a5:7a:d3:80:ed:72:
                    ed:08:24:32:54:6a:a2:7e:06:de:cd:16:a5:4e:38:
                    e7:f7:74:39:c3:9c:76:a3:74:11:cd:2b:5b:0a:d9:
                    b2:4b:f4:c6:a1:09:90:04:79:4a:26:8f:c8:81:13:
                    1d:69:f1:74:a1:89:1b:b2:dd:86:0f:47:83:01:3a:
                    fc:72:29:83:a3:d0:40:22:38:a3:c4:94:70:bc:45:
                    7a:b6:24:4c:00:37:a4:fa:a2:4e:89:52:81:00:35:
                    1c:16:6e:d3:63:36:6c:01:c2:4c:5b:22:9c:c3:69:
                    09:d4:8a:e1:c2:98:6b:a9:92:6f:41:17:8d:f6:c5:
                    84:73:4b:c2:62:a0:50:3a:54:27:3d:2c:71:52:59:
                    ee:18:b7:35:d6:32:11:20:39:c3:ca:c4:b7:d2:f5:
                    e3:8d:34:25:aa:41:04:f7:de:c1:df:5a:97:ab:e6:
                    af:32:74:f4:5e:0d:db:8c:06:62:cc:c8:41:b8:11:
                    ca:9f:a1:68:2e:f4:7e:8c:a1:45:f0:d4:c4:1f:04:
                    28:77:a0:15:92:70:41:12:c3:b9:ce:1b:6f:c2:da:
                    28:83:29:8f:74:37:a4:e8:55:8e:05:91:c9:7d:cf:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:37:47:39:B8:5B:24:CE:49:F8:D9:B1:10:DE:A0:71:4F:8E:B2:A4
            X509v3 Authority Key Identifier:
                keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f8:6e:ea:48:2d:0d:3d:6f:8d:fa:7e:d7:e1:6d:a2:c2:5d:
         de:8c:4d:97:3b:dc:05:11:c6:31:1e:af:94:09:88:05:98:84:
         43:50:84:b0:3d:64:c0:40:7c:61:2e:83:7d:9d:60:b2:21:88:
         91:54:f0:77:16:d2:fe:7c:36:59:ba:cc:9d:ac:7a:e6:8a:dc:
         33:9b:c8:0f:ea:18:ca:91:ee:30:f4:b6:15:18:68:8e:f5:ef:
         9b:19:f2:0d:25:c3:53:6c:9f:b6:d4:7c:9f:c9:8a:4a:b2:4d:
         bd:48:e2:1a:87:5c:7f:fa:ec:e7:5e:78:4e:da:04:ec:cb:f7:
         9e:d1:ed:1c:7d:21:0f:9d:40:87:87:3a:0b:6d:9a:3a:9f:5f:
         a0:01:b1:e2:31:66:25:f6:10:c3:c8:2e:49:a7:c7:0b:0c:74:
         81:86:95:bb:99:41:8a:5c:10:3c:87:94:e0:2d:b4:4b:52:95:
         10:20:4c:33:4c:d7:06:de:c9:ce:e3:6b:91:17:0e:a3:6b:62:
         1c:8e:04:0b:eb:b2:85:d4:e5:38:17:4d:c1:a4:a7:6a:4a:21:
         5c:3b:44:ca:26:47:9e:bd:b5:ad:26:fd:d8:55:50:4d:ca:36:
         cc:4a:dc:5c:ea:5f:d4:64:d8:67:91:47:7e:0d:b0:f0:80:56:
         2e:1b:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----