Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File:                     xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier:          09od7n7Tgnv/YwzTZN2p+8fzPYm+BoiKnw7J1RnwYAg=
Subject key identifier:   74:AF:E4:85:3B:CF:37:08:EE:37:C7:A0:30:44:63:6E:82:56:9B:EA
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer:       /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial:       01962E99A095A232E6C07391761501A3C34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number:          04A6
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: mljX4AreJlhcRI7sCIqcFhzX/Kt7GEzCaPCN8EVAXXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a0:95:a2:32:e6:c0:73:91:76:15:01:a3:c3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=74afe4853bcf3708ee37c7a03044636e82569bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:2b:02:fb:88:dc:e9:c1:b7:7f:b0:99:5f:
                    dd:9c:e8:54:77:92:91:30:c5:10:fb:aa:68:05:9c:
                    44:e1:6f:59:98:f4:e6:6e:cf:0d:fd:3b:e6:49:b5:
                    e8:83:dd:9c:da:b6:5f:c4:f2:32:b3:ab:c0:fb:14:
                    ea:1d:c7:3f:d0:e1:65:5c:8d:40:5a:d3:a5:2b:da:
                    d1:71:16:85:3c:28:7f:32:d1:e0:0f:4a:47:a5:1a:
                    80:2b:b7:fb:be:bd:fd:7c:51:ab:ec:4f:49:d0:51:
                    fb:75:c6:de:82:63:20:e8:c4:76:45:ba:ee:15:18:
                    13:96:88:48:98:b4:0b:d6:52:c3:28:37:63:d6:a2:
                    5c:e8:e9:c5:b4:df:77:82:6b:54:3b:88:b0:3c:a4:
                    ef:26:5a:97:ba:09:39:8a:c8:52:ca:94:f7:cc:3c:
                    22:bf:a1:79:b6:0c:5f:02:64:e6:e1:cd:3a:bc:dd:
                    59:cc:e4:eb:90:0e:7f:cb:df:50:86:52:13:b8:d0:
                    65:38:83:fb:31:48:d2:c5:31:d8:21:2e:5e:8f:db:
                    74:1e:a8:f5:1d:1b:9d:10:37:87:55:e9:16:b4:23:
                    19:1d:5a:16:fd:1e:b3:8c:92:70:04:17:4e:99:0f:
                    ba:15:23:66:d2:40:fc:46:43:ba:2b:b3:e1:2e:e3:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AF:E4:85:3B:CF:37:08:EE:37:C7:A0:30:44:63:6E:82:56:9B:EA
            X509v3 Authority Key Identifier:
                keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:6d:92:cb:6e:9f:01:07:aa:9e:bf:2b:0d:4d:05:9e:3a:
         f3:aa:0d:ce:02:47:bf:26:23:c8:a7:bf:40:bd:1d:59:b1:a2:
         c8:c2:0a:79:d2:af:61:e5:4b:82:a6:36:67:cd:59:17:b0:3e:
         50:c0:71:b5:77:6e:b7:98:21:5b:e1:04:06:a7:60:d5:30:da:
         3f:00:d7:e9:2b:62:25:4d:c0:c6:12:38:e5:b8:3b:75:18:51:
         56:f3:e3:6a:e3:8b:c2:ae:92:f8:e3:94:a2:71:63:7c:32:31:
         64:9b:98:8b:8c:4c:a4:65:f1:df:5b:b4:13:db:b6:a8:02:7d:
         33:9c:46:59:86:66:39:54:98:22:77:00:20:5f:ac:ce:5f:b1:
         d6:b2:17:61:9d:8f:dd:1c:9e:28:4c:e5:41:a0:c7:50:14:19:
         f5:6d:58:56:e1:0f:ae:d0:cd:b7:96:3c:d5:9f:eb:23:ee:88:
         a0:db:5f:b9:6e:39:7e:ab:17:bc:62:3c:ab:63:a5:0c:21:16:
         24:76:a8:9a:5a:1c:b8:b1:5b:54:60:b9:64:6c:13:44:69:15:
         ef:c7:e0:77:50:df:7c:bc:2d:5c:ce:c4:a7:46:11:49:aa:be:
         d6:c1:09:ba:ee:de:a9:76:a6:f2:1c:1d:57:d3:97:57:6b:1d:
         2d:9b:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----