Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File:                     _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier:          oRsOg0qFIgAVnZuy6674+PHZFmCDCNxfAbIv/qfxddI=
Subject key identifier:   13:03:95:F0:E0:80:6D:4E:0C:0C:F0:F8:CB:27:7C:34:E9:1E:89:AB
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer:       /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial:       01962F74EF254431E8E0CA2E6C80DEAB44DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number:          0519
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: 7OcKPN2xzgYo5wb8CxNSaSWr6UXhNG06t92iJI0hAtc=)
                          2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ef:25:44:31:e8:e0:ca:2e:6c:80:de:ab:44:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=130395f0e0806d4e0c0cf0f8cb277c34e91e89ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:39:e1:b3:6c:fb:d2:f5:76:79:65:66:db:
                    3f:3d:94:df:56:b6:ad:ed:10:9f:b8:7e:73:91:54:
                    f4:cd:64:4d:21:9e:99:df:4a:7b:46:ec:65:45:bb:
                    78:00:96:13:95:7c:de:83:94:d8:ad:70:b9:0c:4f:
                    4a:ab:36:c7:96:b1:b9:f7:96:a2:61:45:2d:10:d0:
                    66:06:86:b2:24:f8:4f:76:95:92:ae:0f:3d:76:33:
                    f3:e1:df:9b:cc:63:27:42:0c:e6:dc:89:e6:ab:4c:
                    df:db:da:87:9e:ea:39:15:e4:4a:77:28:ac:ef:10:
                    52:16:32:98:23:f3:23:9d:ad:fe:5d:b2:07:41:f2:
                    48:d3:6d:e4:a8:42:a2:bc:d5:2b:61:8f:d8:46:7a:
                    7d:85:55:38:44:95:93:7a:2c:4f:f6:d1:10:fe:18:
                    a1:f2:ed:8c:6b:b7:af:33:3b:3d:46:ab:14:8c:38:
                    d3:aa:41:54:9c:23:29:ab:d9:fd:9c:a2:aa:a9:2d:
                    f3:7d:41:1a:c1:1a:3d:33:f4:0a:a1:c3:3c:3e:c8:
                    1f:ce:35:39:3a:80:70:d8:d9:c2:5e:04:35:f4:b9:
                    de:83:b9:09:e8:ad:e9:a0:2c:9c:de:ce:a2:54:70:
                    46:73:66:f4:bb:48:22:30:7c:b6:a6:c2:62:f2:a8:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:03:95:F0:E0:80:6D:4E:0C:0C:F0:F8:CB:27:7C:34:E9:1E:89:AB
            X509v3 Authority Key Identifier:
                keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:3e:65:11:6a:60:f7:07:1c:3b:99:b6:52:b5:1e:2a:32:
         d3:1c:b2:4b:43:5f:13:e1:78:d7:f7:b7:69:1a:d9:ca:68:b0:
         77:47:8b:86:3b:80:08:0a:03:e0:dc:5e:ab:bb:df:60:1c:5f:
         c9:37:2a:6f:73:82:bb:4d:1e:9e:f1:4b:c7:f9:9e:ba:25:9d:
         a2:ca:87:58:ab:81:40:09:53:72:16:26:a6:61:36:95:1e:27:
         38:5a:45:66:21:27:fa:33:d1:28:68:b3:e2:92:c1:83:68:99:
         e1:ab:93:b6:55:7d:46:53:6d:ac:32:dd:33:12:8e:fa:66:d9:
         d6:d8:bd:8b:c7:bf:57:5f:e9:cb:5c:1e:e5:f6:26:1e:9d:c5:
         a8:e8:45:74:3f:27:15:58:d5:ef:02:fc:90:ae:61:7a:32:0e:
         ff:44:eb:01:3a:3d:a1:db:c8:45:89:5a:20:bd:99:26:d8:a5:
         a6:b0:cd:d3:0e:7c:e2:77:c6:b5:de:cb:cb:6e:10:e4:0c:1b:
         95:d5:d7:43:95:e0:14:36:f5:5d:67:42:c1:62:13:3f:a4:43:
         25:39:7a:8e:9d:1b:10:65:d8:77:2b:26:0f:07:69:e9:0f:02:
         56:e6:5c:43:c8:48:fe:14:38:6a:82:d3:eb:bc:ed:19:c2:c6:
         27:a5:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----