Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File:                     XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier:          BQqViv/fevums9fCxwFujWYtn88sLodepNev1ZHVm7E=
Subject key identifier:   FD:8E:F0:98:13:1A:FD:55:EE:56:A7:79:00:CE:5A:FA:E2:87:B0:24
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer:       /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial:       01962E2AF634678C34F5C802EF02B732B2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number:          0579
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: 0nmOrvX9oa9iHiNBM9G1z5B5dTUB74T1h68b2lc5ilQ=)
                          2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f6:34:67:8c:34:f5:c8:02:ef:02:b7:32:b2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=fd8ef098131afd55ee56a77900ce5afae287b024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:28:2c:79:a1:50:3a:bb:ca:9a:90:5a:23:
                    99:eb:7d:a0:e9:50:41:df:40:46:f7:77:9b:89:5c:
                    d0:a3:d4:d8:9e:99:21:36:16:17:01:22:2c:98:b1:
                    a5:7d:d3:f2:77:5b:4b:2b:84:ac:2c:41:10:60:fb:
                    da:f3:0f:6f:6e:ec:e3:86:61:5b:d9:5a:8e:ca:de:
                    1f:21:7d:7a:99:83:db:68:c5:5d:c3:aa:5b:d5:29:
                    1b:09:49:76:b4:9e:34:35:d4:af:54:a0:b0:ee:ef:
                    65:04:65:07:3a:8b:1e:81:ec:5c:f8:ec:98:53:62:
                    8c:dc:cd:43:68:c0:07:4f:35:ff:e9:fb:96:9b:54:
                    d7:b7:5b:17:ca:b4:6a:fa:78:06:de:71:22:0e:87:
                    d1:4d:66:ba:2a:dc:9a:25:4e:5c:fd:d7:31:67:d4:
                    6b:5d:76:3c:11:6d:42:36:3a:50:d4:c9:30:d7:8b:
                    a9:61:c9:66:fa:b8:96:e7:8b:0c:31:5c:6c:6f:07:
                    4b:f3:aa:04:1e:bb:30:d1:d8:35:68:1b:6e:55:d4:
                    3c:b2:c2:79:7d:d3:90:82:47:8d:93:2a:09:f2:75:
                    57:33:a6:f9:cc:8b:73:36:59:9d:5d:bf:07:11:48:
                    de:6a:0d:58:3a:ad:97:9b:8a:87:b5:ef:b8:f9:31:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8E:F0:98:13:1A:FD:55:EE:56:A7:79:00:CE:5A:FA:E2:87:B0:24
            X509v3 Authority Key Identifier:
                keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:01:5c:f4:b8:bd:e6:92:ab:1e:e7:a4:1e:2d:5b:20:73:3e:
         40:34:ac:89:25:bf:17:a4:de:a2:f1:b6:4a:4e:fe:31:c5:02:
         c1:41:57:d3:a5:21:b9:87:f1:c4:87:72:f3:91:2f:46:10:63:
         0b:c7:26:18:85:d3:53:74:ea:72:3d:81:10:7e:fb:1b:06:9d:
         e0:55:6b:03:40:7f:19:db:1a:ea:b5:5f:93:ff:dc:99:96:04:
         6a:14:da:4d:5d:c2:7f:a8:31:5d:49:52:82:b1:f6:6c:13:a3:
         d0:43:4b:96:0b:81:41:14:9a:a7:88:50:90:c5:e8:7e:e5:96:
         86:de:7d:2a:80:40:34:4d:0f:2d:1b:57:a7:2b:70:cd:e7:da:
         1f:17:dc:d4:bf:e0:0c:97:b4:9a:8c:0a:1a:a2:4b:46:da:9f:
         4a:b8:ee:96:8b:0c:39:46:ed:25:8f:d2:53:b0:c2:d0:fb:9e:
         bf:01:95:99:44:b7:41:bc:7a:0f:04:56:1d:fb:82:5e:cf:b2:
         75:68:54:b9:8a:d1:3d:b6:53:a6:e8:9f:5c:40:01:c5:14:1e:
         69:c8:9a:0c:7b:3c:2c:f2:26:1f:f6:50:15:01:1a:da:60:2e:
         91:03:f4:41:21:38:dd:07:aa:7e:f5:a4:64:f4:e9:d8:0b:68:
         c9:1c:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----