Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File:                     Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier:          7YE+vhd5S4meWB99aLDqaDx7zEqnmK0oYvIVwBgFIdw=
Subject key identifier:   87:0B:1A:B1:01:08:64:AA:3F:7E:EF:8B:CE:A1:60:77:D2:CC:70:4C
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       01962F3DCFA5B5BEEECC50E5663D1EEB4D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number:          0CB7
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
                          2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: ssKpZCONPuQMExtiifWNwr+irRrDYzIUGkt6rnzlkZ4=)
                          3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cf:a5:b5:be:ee:cc:50:e5:66:3d:1e:eb:4d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=870b1ab1010864aa3f7eef8bcea16077d2cc704c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:83:8c:48:43:ae:f1:f7:aa:89:7c:5c:ac:
                    e0:12:d7:d0:fa:12:3e:e7:f3:08:09:81:30:82:ac:
                    a0:47:92:c6:8f:9b:d7:ab:fd:db:22:7e:f5:fc:27:
                    c2:19:f9:7b:e7:1e:9f:15:a1:09:67:88:76:e8:c6:
                    35:1b:d6:7c:7b:cd:59:28:cb:5e:77:e9:b2:ec:2c:
                    78:b8:0d:06:72:d0:93:78:5e:97:e4:a8:d4:e9:95:
                    1b:3b:0b:6f:7b:7c:db:fe:e3:e0:1a:2b:e0:f2:b0:
                    05:a2:08:35:fb:91:1a:3e:15:5b:7f:93:59:3e:a5:
                    9c:b6:d3:f1:f0:73:c7:fb:75:16:da:73:19:76:77:
                    38:5e:1a:c6:58:c2:3f:97:c0:f2:77:15:0c:68:c7:
                    fc:f1:7c:2d:84:fd:ef:19:86:b3:c8:de:cd:12:96:
                    7c:4b:fc:f2:94:7a:2c:7d:6c:20:70:0b:b0:0f:a7:
                    42:22:d6:6e:71:22:2a:3e:52:ec:2f:7b:4e:9e:fb:
                    97:67:93:d8:c5:5d:c8:5b:1c:e6:01:21:8c:07:ce:
                    0e:63:fb:c6:c2:82:f1:38:86:a5:65:e5:e8:15:5a:
                    1c:ae:67:aa:9a:b7:00:50:9d:ff:80:fb:22:8f:be:
                    13:e6:76:8f:e7:5f:65:ad:de:f5:e9:35:13:61:75:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:1A:B1:01:08:64:AA:3F:7E:EF:8B:CE:A1:60:77:D2:CC:70:4C
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:01:1a:5c:50:89:37:17:cc:c6:15:63:25:cb:a6:7d:69:df:
         dd:7f:e9:39:c5:b6:85:8f:6e:16:3e:d5:f8:ed:52:4f:64:fc:
         8a:f0:8b:e1:f8:af:c9:8e:43:c4:02:ab:b6:b0:2b:49:73:09:
         5a:99:30:c8:92:2e:3c:c2:7f:7d:9f:41:44:64:63:1e:50:9c:
         ff:15:a2:60:ad:e1:80:a5:fd:c4:b3:22:4d:65:2b:95:9d:49:
         7f:a6:cd:5c:b7:9d:ff:5e:13:43:62:be:3f:58:97:a6:9c:7d:
         2e:e1:37:68:f8:98:b9:16:6c:5b:30:ed:85:30:88:d5:4d:70:
         af:3e:3c:47:63:17:f9:cc:77:6c:b0:8e:f6:0c:3d:79:7f:68:
         f0:38:3f:04:ac:8e:91:8a:d1:c6:35:06:5b:b1:f1:fe:de:b5:
         3c:cd:16:df:92:40:40:c8:0f:08:cf:78:b5:a2:82:a0:69:a8:
         a2:7a:c5:42:bf:27:05:db:13:d7:da:d1:54:da:ac:9e:c8:58:
         01:ff:97:fc:ec:59:38:3a:a7:ba:37:7a:15:8b:18:34:cf:65:
         35:05:49:02:3a:75:8d:0e:0f:cb:c1:f9:54:1d:6a:a2:67:bc:
         08:b6:09:63:f8:40:83:5c:86:12:7d:4b:03:44:a1:a6:7c:47:
         86:37:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----