Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File:                     xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier:          3qZZLlLOekGtAcm+1G6VLTmg0pNRGB+6P+ZRwgHyZW4=
Subject key identifier:   18:E2:78:59:3F:56:E8:23:C1:9F:15:C4:41:7B:3F:A1:06:08:17:08
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer:       /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial:       01962F067217073E206D534E47AE24805384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number:          08D4
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: XiJTC9uZE64JLQ-yExGhaUIj9ts.roa (hash: GHx3lHTTCp62cSR5kKkHCq7uXPra6/CRt/DIw9vc7JY=)
                          2: _OTw40dYuvm2lSGl7nH25-3trl0.roa (hash: p5Ks+k8ODIcgQU/rYDBPfBUWvMQU0O3hHWpG/Svrc7o=)
                          3: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: Vo1YD085wyMmjXS+kf9RjBDbqoI4J4IGE1U09bQXW0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:72:17:07:3e:20:6d:53:4e:47:ae:24:80:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=18e278593f56e823c19f15c4417b3fa106081708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:e6:e0:24:25:43:28:e2:7c:21:9f:61:2b:
                    ae:b7:6b:46:66:7b:9b:9f:94:93:c6:c1:05:67:34:
                    0f:5d:e5:f9:d8:a4:b1:55:f6:35:26:aa:7c:ac:99:
                    20:81:5f:5c:a4:8e:59:d8:c8:f7:29:f2:2e:51:98:
                    69:22:e7:ec:e8:bc:e2:ee:e4:d1:d2:d0:91:01:39:
                    1b:f9:53:60:c7:1c:b8:f0:ea:fb:b4:f2:61:6e:d9:
                    80:38:aa:09:97:bb:27:c2:0d:8a:f2:81:ee:7d:c7:
                    29:69:7e:3b:86:f5:90:e1:06:61:10:6a:a5:5f:f5:
                    46:ee:ad:db:99:fc:ae:63:70:e9:ef:53:7a:2f:d9:
                    a4:57:f8:05:39:3d:6c:56:d1:74:fd:dc:86:f2:b2:
                    1c:a6:3b:7b:c3:c6:35:88:b4:13:57:45:67:de:15:
                    81:59:75:f1:b8:2a:df:c2:fb:d4:c7:b9:3b:0c:db:
                    c9:90:72:31:97:2e:86:44:3c:28:ee:a1:4a:f2:8c:
                    2a:e2:53:43:ab:ee:6e:e4:91:a9:32:f7:a5:d3:4e:
                    bb:e3:7b:51:88:bb:32:9d:45:30:bb:2a:d5:79:22:
                    36:84:65:3a:25:0c:3f:45:9c:dd:67:93:bd:18:df:
                    5f:da:43:c1:6d:6a:0c:04:9e:88:10:00:f8:df:6c:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:78:59:3F:56:E8:23:C1:9F:15:C4:41:7B:3F:A1:06:08:17:08
            X509v3 Authority Key Identifier:
                keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:33:0a:ed:74:99:a9:e9:53:93:de:00:8e:7d:50:cf:16:
         09:3b:80:5f:7b:0b:7b:e3:99:46:74:64:c4:38:27:78:02:bc:
         e6:d6:f4:e5:05:39:55:ca:ea:49:8e:14:d5:61:ee:07:d6:fe:
         8c:63:f0:2b:d5:6f:d9:66:f3:31:fa:82:0e:87:18:7f:1f:b0:
         80:ca:16:52:13:78:3b:94:56:a1:23:90:10:64:45:d8:e9:51:
         35:bc:02:73:a8:15:38:0d:da:a0:79:c3:11:e2:3a:f2:fe:5e:
         31:4f:2f:fa:53:66:a2:8e:0c:33:d7:2d:2d:ae:89:45:c3:32:
         b5:8b:b0:44:5d:c8:73:56:f8:46:41:ab:d6:c4:5a:d1:16:28:
         62:c2:98:4c:af:d4:8a:63:f2:26:82:10:49:24:4e:87:2e:54:
         b8:b5:d1:d0:98:43:14:8b:de:e0:2d:1b:5a:1e:31:1c:59:83:
         6a:ca:f2:1c:bd:f9:9c:9a:90:06:f1:2f:31:6f:cf:5c:1d:e2:
         03:f1:15:38:96:75:96:d0:15:c2:e2:72:7e:bf:e3:af:07:ab:
         80:c9:d0:84:67:9c:dc:01:48:c6:14:1a:66:3b:86:73:0c:50:
         56:c4:22:01:f1:cb:72:91:16:34:c6:18:5c:f0:c1:d9:86:28:
         6a:09:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----