Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File:                     5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier:          82uSjyUHIPKoiOlBCF/+RM1fTzWA0gdwPzp8PczrqT4=
Subject key identifier:   67:8C:9C:93:97:B6:0A:47:9F:6B:CE:7A:6F:93:55:F0:66:F8:2A:4A
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer:       /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial:       01962DF4177963E4172BB48C4016B9C01312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number:          1278
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: fNrCrkVc5OLHQYRLoYm8ZiEaJg4dZMI7PSYptWNRhf0=)
                          2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
                          3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:17:79:63:e4:17:2b:b4:8c:40:16:b9:c0:13:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=678c9c9397b60a479f6bce7a6f9355f066f82a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:07:03:4e:de:c1:2d:b7:1e:4b:fb:35:7f:
                    2e:4a:3c:70:45:1a:9e:2c:89:64:63:00:7b:50:d0:
                    d4:9e:bf:0a:61:69:9f:9e:bf:00:9e:6e:9f:ad:56:
                    a5:de:8d:17:c1:34:bd:97:15:94:49:95:29:88:54:
                    05:07:23:d5:6e:1d:44:1f:fb:13:a3:ae:78:26:e0:
                    9b:c2:22:78:b8:c0:f6:60:31:61:e9:a5:c9:81:78:
                    31:2b:75:83:57:31:70:91:38:10:4d:51:1c:15:a1:
                    c7:ef:8d:b2:95:36:0d:24:90:5a:f2:23:9e:e5:36:
                    ac:88:ea:65:f6:2e:8f:03:24:17:08:d1:5e:d2:8f:
                    44:71:9f:c4:25:5c:71:4b:78:07:de:08:e3:0a:e4:
                    0d:67:39:98:13:d0:94:48:e1:0b:ce:92:81:91:f1:
                    6e:94:e1:4a:8f:cb:88:39:5d:ed:e2:92:f7:d1:61:
                    59:e3:f4:e3:a8:e2:8a:e3:fa:1a:fe:ef:16:7b:96:
                    78:e2:98:58:34:dd:2f:9d:54:f9:23:1e:b2:e5:3b:
                    bd:57:96:cf:82:84:1c:a9:4f:35:59:aa:b9:15:21:
                    f1:c8:67:70:e2:e3:2d:d7:de:94:57:69:21:ee:79:
                    06:2f:f8:8b:bb:92:70:21:61:71:62:56:4e:f6:12:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8C:9C:93:97:B6:0A:47:9F:6B:CE:7A:6F:93:55:F0:66:F8:2A:4A
            X509v3 Authority Key Identifier:
                keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ad:4c:75:e0:0d:6d:21:f7:b9:96:62:7e:9e:87:22:84:39:
         f2:22:0b:e9:8e:ce:40:c5:0f:a3:1e:d6:c6:25:59:a6:ca:22:
         f0:0a:43:88:62:0c:eb:74:82:c1:65:f7:15:1b:25:36:73:49:
         64:ac:50:23:e4:ed:f1:a0:84:c1:35:9d:ca:07:4c:0a:df:7e:
         c1:3d:b6:df:e6:4b:c6:85:71:4b:1c:81:60:99:9d:2c:e3:47:
         95:ef:78:47:ad:35:57:ee:1a:c3:9f:c8:c8:44:a8:9c:61:8f:
         ff:36:14:1d:2d:c4:2f:e0:66:db:04:be:a6:ce:a7:c2:ce:08:
         16:37:4a:1c:9e:68:d8:bf:15:05:5d:5c:f6:91:b2:07:15:31:
         26:79:8e:a8:1f:5f:2a:78:c4:2c:33:68:f6:2f:df:1a:5d:1a:
         00:77:cd:11:39:73:cd:6a:ff:fd:1c:2f:93:cb:b9:63:54:ed:
         71:5e:39:97:07:cd:e3:e3:80:47:24:d2:b7:b9:76:25:90:9f:
         8a:70:85:d4:6a:13:4b:00:c5:56:57:d3:9e:54:e4:3f:27:d7:
         d6:c3:b5:4a:9e:a1:4e:88:27:42:7a:cd:00:97:8a:60:9c:a1:
         6c:6c:c9:6d:1b:9b:f2:4c:72:70:d5:08:f9:90:e8:ee:f9:6f:
         d3:d4:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----