Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File:                     x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier:          eBWTvlfa/9gkoIvChisGZQgEjMgFEkK5jBgL7xdu8jM=
Subject key identifier:   52:76:2A:35:45:58:2E:2D:D0:A4:29:A8:26:3E:5C:94:3E:FF:63:FB
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer:       /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial:       01962FAB72CB165DADC573E2E7630297A1E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number:          0C10
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
                          2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: wCiNqlSBFSCRj/SZCs7odIFuRpmhwFvkJDxwp36wsDg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:72:cb:16:5d:ad:c5:73:e2:e7:63:02:97:a1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=52762a3545582e2dd0a429a8263e5c943eff63fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:40:06:53:26:56:79:48:14:a0:27:e4:a0:
                    8c:48:b3:ed:f9:9a:d3:2a:1b:c1:c2:af:83:c5:6b:
                    7c:dc:0a:17:51:33:00:91:15:8c:ad:50:f9:11:9a:
                    ef:d3:97:07:a5:be:7b:ed:dc:4d:4b:02:ee:27:40:
                    3b:1c:e3:66:1b:14:b9:ec:52:47:40:9a:02:9b:55:
                    72:81:a9:88:46:76:7e:ee:89:4c:5c:19:8b:6a:53:
                    c6:c6:f7:54:cd:1e:9e:e6:90:6a:1d:40:1f:f4:31:
                    91:04:0d:ee:f0:92:47:9f:d1:6d:7a:41:ed:a5:dc:
                    77:de:7e:5b:4c:d1:16:67:8d:4f:05:72:12:a3:1f:
                    af:3d:12:85:89:de:f7:e0:c3:44:ad:0e:5e:7d:a6:
                    53:34:f5:90:79:02:06:48:5e:16:7a:70:fa:5f:23:
                    db:e1:cd:ab:cc:38:71:bf:24:42:06:b1:95:1a:2c:
                    d9:c1:fa:49:bf:1d:eb:97:bd:e7:ef:ad:f1:33:d0:
                    41:00:05:71:27:b8:34:96:f5:83:e1:cf:b8:db:aa:
                    b7:c4:5e:0a:0f:69:f4:f9:8c:05:59:67:12:86:02:
                    1c:24:c4:0e:b3:ba:f0:24:d0:7e:91:01:ce:90:10:
                    8f:ea:58:2e:0a:54:8f:8a:b3:3d:d4:46:1d:6a:24:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:76:2A:35:45:58:2E:2D:D0:A4:29:A8:26:3E:5C:94:3E:FF:63:FB
            X509v3 Authority Key Identifier:
                keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:56:05:96:e0:4b:45:95:3d:84:89:2e:aa:2c:73:c7:fa:ad:
         71:ee:6e:bc:ef:22:76:69:ad:96:39:14:d2:db:0c:dd:18:8b:
         2e:6e:a1:74:0b:2e:ee:fd:b1:78:79:2c:d1:13:85:00:82:29:
         83:dd:50:e3:00:7d:f3:13:d1:08:70:3d:63:a6:a0:f2:1a:ae:
         93:b9:4a:c4:4b:63:a8:3e:0a:f4:ad:84:2a:9d:74:e5:fc:ae:
         73:0c:c8:8c:91:2f:53:26:90:0c:3a:00:16:9a:c9:7c:79:5d:
         a3:42:c8:2d:12:cb:68:d6:d6:c8:91:05:95:40:3f:4e:a1:7f:
         67:b6:3d:54:0e:b5:cb:a6:98:9a:fa:6f:2b:3c:4e:ff:1f:24:
         f6:00:96:c9:cd:a2:41:4c:fa:31:3c:cc:b3:17:38:78:dc:02:
         bf:b2:7b:de:5c:a7:f9:09:14:e1:c4:3c:79:13:99:fd:43:74:
         be:75:a4:a6:84:c9:cf:78:1d:90:4d:48:de:9c:b6:dc:05:02:
         2b:7b:46:e3:71:d3:9f:67:cd:60:14:4e:d0:c5:a5:c5:e0:f9:
         ed:ab:f2:63:8f:5f:67:ac:99:ff:a1:8b:30:07:e7:dd:70:51:
         5e:0f:da:c7:3e:f2:cd:50:e4:0e:6a:f2:38:21:0b:2e:76:94:
         16:5f:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----