Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          k5mdnTnX7XAO7xVEbTRajmQk9mQrzcv6SdzJizi/f50=
Subject key identifier:   BA:8A:A5:64:2C:25:E0:FF:37:A9:D6:02:DB:58:06:F5:A0:08:A1:69
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       01962DF4248D0D5EC08AB84B223CDB4FB625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          17E1
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
                          2: Sh0_buHkWXJwnQ-XEy5OOz_SGY0.roa (hash: K8R9P9+JyXSxzWg59QqqJldbaJpbMvlOvc7l32oVzqA=)
                          3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: D0PXHuB4jV5acaSxW7YZlZtIxhLuX8CY8thm1G7hx7g=)
                          4: g-gDnGYDElbKgzwYSDP2gPdUjgU.roa (hash: MWhLlIp3CcNIM+/42QFT1hg73NCRkvj/qnVhMmAdqeY=)
                          5: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
                          6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:24:8d:0d:5e:c0:8a:b8:4b:22:3c:db:4f:b6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=ba8aa5642c25e0ff37a9d602db5806f5a008a169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:24:fd:23:80:91:0f:a0:55:63:b9:c4:f2:
                    16:72:8e:03:59:ec:03:4d:86:fb:cc:e8:10:d5:5c:
                    92:47:3d:dd:a3:1e:aa:c8:e2:d4:be:9b:ad:a9:3c:
                    f6:d8:1a:28:fe:be:77:7d:00:e3:a6:be:38:47:4e:
                    b0:8d:52:1b:50:e9:4e:d5:1e:c6:f8:9e:14:96:86:
                    01:a2:05:1c:36:e3:35:95:a2:89:af:92:29:a3:81:
                    ee:96:46:92:bc:f0:73:f8:92:84:ba:37:bf:77:4a:
                    4d:6d:24:72:f6:e0:5d:4d:0d:47:c6:4d:d5:4b:76:
                    89:4f:f0:47:4b:67:23:33:87:5f:0b:41:43:55:13:
                    a8:55:3b:4c:5e:5a:e7:dd:49:7e:2a:29:08:c5:7a:
                    4e:55:bd:28:01:05:b7:49:cd:7e:d8:48:2b:42:78:
                    fa:59:b7:51:62:14:46:c1:d4:43:7b:ae:c4:c1:0f:
                    bd:a6:ca:5d:33:65:5f:3d:87:a7:97:86:2a:ac:3f:
                    83:16:8a:53:f5:d4:7d:12:e6:42:0c:9f:6e:f0:7d:
                    9b:e6:f1:cc:91:28:df:2f:73:00:e7:69:18:8a:9a:
                    c5:f0:04:06:84:54:bf:e6:55:d0:9d:2d:f8:9d:cd:
                    e3:76:dd:0e:c5:3b:44:2c:47:6a:f2:8c:e5:56:88:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8A:A5:64:2C:25:E0:FF:37:A9:D6:02:DB:58:06:F5:A0:08:A1:69
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:b8:6d:e8:dd:97:d8:77:d1:41:ff:ac:f8:f1:1c:90:98:
         9b:d5:59:71:f7:d1:9b:8f:96:f4:17:63:8e:ea:44:46:e7:1c:
         9e:56:62:ae:52:13:7a:ab:92:3d:d7:a2:63:0f:2d:0d:4b:2c:
         10:c2:45:ee:4c:20:32:81:92:2c:02:ed:45:6e:f5:fa:2f:fe:
         11:17:51:4b:1e:e4:8a:38:f2:d9:47:56:4b:02:b5:4c:9b:20:
         2a:80:0c:bc:a6:6d:81:b4:89:9c:77:20:80:48:50:3f:d0:a7:
         f8:05:3e:af:e7:d7:6b:18:79:41:9e:b8:d4:45:98:d7:4a:d1:
         4d:99:f9:77:7c:b3:0e:81:90:f9:fe:11:66:62:24:04:06:7b:
         96:63:7d:98:c1:32:db:64:5c:6b:06:1a:c7:8c:ab:a0:61:4e:
         0e:05:b5:aa:37:38:7a:9c:f5:b4:3d:f7:67:d9:6a:6f:a9:e3:
         c3:ba:90:29:21:7c:86:9c:2b:b3:2e:0e:22:34:71:63:f8:47:
         90:4d:35:ea:a8:5c:e3:94:ca:0f:ca:18:03:c3:0a:0c:23:da:
         77:6d:28:41:29:cc:b8:69:8a:ff:a1:de:d7:2e:c5:23:7f:ab:
         07:d7:17:6a:43:ff:57:7f:26:b7:0f:76:9c:e5:14:28:20:e1:
         9b:8a:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----