Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File:                     xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier:          zq8j6ZdR7Co0ElZQ3ZGpi191ERuXEzlQU5MJh0iFo7E=
Subject key identifier:   06:BD:97:5C:AC:4B:A8:09:3C:AB:C7:AE:87:3B:41:2D:FB:B0:5B:8E
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer:       /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial:       01962F74C6AB9078478F2C7F1F9061A38DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
                          2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: 7apUg8sK98S43o7KZsVEA5S92EjxIHK2F+HzG++Ypq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c6:ab:90:78:47:8f:2c:7f:1f:90:61:a3:8d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=06bd975cac4ba8093cabc7ae873b412dfbb05b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:94:8b:0b:37:6b:ff:b3:7a:35:91:ec:c4:
                    42:d0:9e:75:99:82:5b:b7:96:de:30:0a:51:42:e8:
                    dc:26:5c:1c:01:29:e9:32:ad:7a:ac:1b:69:09:cf:
                    f0:d3:db:32:9e:49:3f:cc:db:b5:d2:7c:52:0a:db:
                    da:d0:f5:ea:ad:d7:b3:43:b8:8d:57:67:da:94:3d:
                    d6:73:3d:53:32:4f:a3:85:02:c9:4a:a8:9e:a0:a3:
                    a9:89:c3:38:c8:f6:be:af:8b:eb:58:1a:3a:77:4d:
                    e7:4b:31:61:86:b5:39:3e:70:c7:c6:f2:33:1d:10:
                    40:1e:fe:f8:fc:f2:00:24:cf:ba:9e:10:9c:91:6f:
                    f1:e1:71:13:9d:a0:db:7f:13:da:6d:09:6d:c5:82:
                    d3:f0:ab:d4:76:d9:ab:3d:51:da:28:4e:98:18:f9:
                    6b:80:4b:9c:35:81:0a:55:e6:6d:ae:dc:c8:79:09:
                    ea:a6:9a:dd:d8:01:33:8f:73:d4:76:73:16:76:56:
                    2a:34:56:e1:9d:23:8d:fa:79:93:64:c8:34:74:50:
                    c1:d3:f8:a4:fa:32:e4:71:fb:8e:c8:9e:62:70:cc:
                    6b:de:c9:88:0e:e1:a0:b5:7a:58:57:e7:5d:1b:13:
                    08:0f:8a:32:c3:f8:84:2e:3b:94:a4:03:a7:eb:35:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BD:97:5C:AC:4B:A8:09:3C:AB:C7:AE:87:3B:41:2D:FB:B0:5B:8E
            X509v3 Authority Key Identifier:
                keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:20:77:18:73:0b:d0:51:d3:11:e6:45:4c:7e:0b:ee:33:
         5d:c6:e4:4c:5b:86:33:11:58:a2:d8:76:17:f0:76:a0:18:cf:
         d5:f7:50:fb:e6:53:cc:5f:4f:5a:a5:10:58:da:ac:4a:c7:18:
         c8:53:f2:9b:fb:6e:e2:a4:1e:f3:be:fe:4b:c0:e3:32:e1:05:
         ec:a8:83:4d:dc:77:fe:ca:26:91:2d:a9:78:21:00:4a:63:18:
         8a:23:b7:7d:e9:50:97:7d:c3:da:e7:cf:2b:fe:14:94:cc:d5:
         13:28:f8:03:69:f1:cd:d3:87:73:b3:a3:c1:ab:ee:44:8e:ca:
         ad:54:bf:b4:51:7b:79:5c:a1:f7:e4:28:da:e7:90:a5:ed:5a:
         92:63:a5:b3:fe:2e:35:08:7b:92:20:ea:3f:20:3c:63:77:51:
         19:9e:bc:c6:97:c3:07:4a:82:f5:d8:09:1c:6b:1b:93:b5:8b:
         63:da:fb:84:d6:9f:d5:d1:ac:02:b2:43:4d:cc:68:d6:45:8d:
         a1:24:85:b3:f8:2f:38:84:f9:1a:a2:c7:31:6b:19:2f:69:ef:
         68:ac:69:17:42:58:0f:ce:b9:ba:cc:0c:e3:fc:5c:e5:0e:6a:
         34:4d:c4:ec:b1:9b:f1:25:19:bf:b8:eb:5a:e9:f7:1f:b3:7b:
         55:60:4d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----