Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File:                     5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier:          8z9lkvFlVUF4TKOl1EGDdTiNO0ZtSRBq3v+Igf24YxU=
Subject key identifier:   70:76:42:8C:8D:CD:E3:4C:7E:0F:47:B9:E6:89:9A:B8:C4:EC:C8:3D
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer:       /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial:       01962DF42D07BB41AF7926105362EAF47F54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number:          1196
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
                          2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: mZXZB+VWRCmTqzDkqSE7Iy0foGVYu9taDnBxcNl8Yog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2d:07:bb:41:af:79:26:10:53:62:ea:f4:7f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=7076428c8dcde34c7e0f47b9e6899ab8c4ecc83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:55:eb:11:cc:a2:54:15:c1:89:50:96:20:
                    70:13:3c:1e:26:25:84:7b:6d:71:d9:1f:98:d8:a5:
                    32:ec:bb:73:4d:89:d9:5b:0a:02:d7:ad:ac:af:3f:
                    b6:fd:f7:b2:02:9f:fe:f5:aa:8f:a1:2e:06:c5:c1:
                    62:22:21:d7:fd:52:82:36:3a:20:ac:d9:28:79:6a:
                    50:9d:01:a6:ad:a0:41:32:7c:fd:cb:ca:f2:3f:55:
                    41:10:86:2a:e3:66:70:d4:45:83:f4:e6:9b:b7:c4:
                    b9:71:91:eb:3b:19:e9:16:9f:78:a3:90:96:62:f7:
                    ca:22:ae:26:b1:d3:13:44:d9:09:4f:46:43:71:8b:
                    61:f2:33:eb:71:8a:31:93:8a:d5:08:27:82:35:c7:
                    11:5a:a0:80:46:76:c2:71:3e:a3:44:10:25:31:1a:
                    92:c9:6d:62:80:d4:b3:9f:bc:81:3c:27:38:1f:d5:
                    a3:81:94:b7:f7:40:01:7c:cd:be:58:4e:8e:b2:65:
                    e8:a3:2f:c4:33:d8:b5:d8:9c:5b:56:c2:1c:20:2a:
                    d5:be:ed:02:88:f9:d1:9d:c6:6e:c8:1f:24:5c:7f:
                    7a:33:49:b0:e3:64:5a:26:90:6a:70:0b:8b:b8:3a:
                    16:c2:b4:d3:65:b5:90:d3:d6:b9:c3:d0:f5:de:bc:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:76:42:8C:8D:CD:E3:4C:7E:0F:47:B9:E6:89:9A:B8:C4:EC:C8:3D
            X509v3 Authority Key Identifier:
                keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:27:67:7c:50:d2:61:51:88:23:cb:c5:d5:b1:88:67:b3:fd:
         f1:36:3c:f5:a6:2a:ca:c4:5d:87:79:91:f7:71:39:d0:98:dc:
         0c:7f:d2:ff:69:48:01:b7:70:b1:3d:97:bd:87:e2:c8:c5:8f:
         60:8d:4a:b7:0d:7c:e2:4f:85:1d:3c:ed:d4:e9:fc:e5:65:1a:
         b5:4f:8c:b1:f8:4d:73:8c:75:b6:27:53:33:e6:80:5c:df:1e:
         5b:19:99:6d:fa:10:7c:b5:1a:c3:d9:5c:d3:ff:b5:e7:b1:2a:
         71:1b:19:e1:04:36:c0:14:ef:44:7a:e6:d8:5a:7a:d7:c6:bb:
         34:57:20:c9:bf:7b:af:e3:25:24:08:dd:b9:54:82:3d:2e:df:
         e4:4b:b9:a0:cf:9d:07:2b:66:2f:2b:82:a5:66:9a:03:95:79:
         3d:8f:38:1b:bf:e7:8a:7a:37:b2:d1:89:d9:31:e4:ec:1a:0b:
         6d:e9:9c:de:a1:09:4f:62:a9:bf:0d:8e:17:de:86:0a:b2:18:
         fe:c3:6f:c5:5e:53:2c:a9:9e:b3:31:32:e0:2e:35:12:28:46:
         22:02:40:80:b4:94:01:2b:53:89:7a:76:4d:04:51:38:2b:76:
         d4:eb:d0:b3:34:2f:21:39:8e:80:42:9d:eb:6c:e4:21:d0:75:
         58:58:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----