Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File:                     xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier:          fU4/205IGDeMtd77CTAJMI4LxK4lr0vOagVbFgC4dmo=
Subject key identifier:   75:76:26:24:B1:E3:E1:2E:9E:6A:71:88:1B:65:A2:46:E6:5B:5C:FA
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer:       /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial:       01962FAB169C63CC2D5D74DEC3A014D6959B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number:          11F2
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
                          2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=)
                          3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
                          4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
                          5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: 3d8a+zb5gxAmoDp5fpfusaoHieUBUBjz7vCN2+nOyvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:9c:63:cc:2d:5d:74:de:c3:a0:14:d6:95:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=75762624b1e3e12e9e6a71881b65a246e65b5cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:83:72:6d:39:8b:06:2a:9a:46:bf:06:9f:
                    34:f2:93:53:56:01:4a:4a:39:d6:f8:03:de:76:0f:
                    06:1f:b0:63:d8:31:1f:94:51:16:06:6e:91:04:66:
                    e6:ef:f2:0c:0f:a4:19:18:44:16:16:a0:24:ff:ce:
                    91:e1:63:14:4d:36:6d:17:22:10:de:ae:33:75:b7:
                    08:c6:98:15:b5:c2:0f:02:04:d0:32:1b:0e:19:d5:
                    22:67:2e:f6:ce:f6:f9:e1:02:2e:94:05:97:e2:e5:
                    e5:eb:9e:d7:c0:2d:84:f6:4c:a5:dc:5c:9f:8e:06:
                    1a:a5:8d:0d:eb:96:24:63:29:59:a2:33:2e:80:90:
                    0d:4c:eb:9a:0f:87:fb:4d:0f:62:5f:b9:46:92:f6:
                    41:37:eb:12:7b:94:30:89:96:85:e1:c7:47:c5:f5:
                    16:1c:56:08:38:3d:c9:11:4b:c7:b1:45:84:5e:4d:
                    1b:55:13:ac:17:16:ab:b5:6c:43:96:18:11:1f:03:
                    9b:32:8a:27:94:44:73:3e:02:f2:c6:fa:1e:bf:b2:
                    6e:12:ce:c5:1e:d8:52:de:55:1f:fb:30:06:04:57:
                    b3:7f:56:6f:41:84:7e:71:f7:73:ee:07:d4:e8:29:
                    3f:93:36:f4:1d:1f:e2:08:11:07:4e:2c:4b:bb:e0:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:76:26:24:B1:E3:E1:2E:9E:6A:71:88:1B:65:A2:46:E6:5B:5C:FA
            X509v3 Authority Key Identifier:
                keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:bd:35:9f:5e:77:a7:dc:0f:6d:c7:d3:3e:ac:c4:09:5c:
         0a:42:2f:d4:33:ed:3c:d3:fe:32:62:6a:51:73:f9:77:1f:74:
         72:5a:f0:e9:7b:86:fa:d0:7b:e1:61:4c:b7:aa:3d:c8:56:ed:
         ad:33:52:b3:65:27:cd:4c:58:86:f9:39:f4:e4:ce:e9:1c:e7:
         0d:72:f3:8b:95:bf:dd:f3:90:86:63:1a:76:4a:ac:14:e1:0c:
         f6:43:aa:df:c8:77:59:9a:4e:88:f8:b6:51:f3:fe:e2:10:7e:
         f3:17:09:cf:d4:c1:d9:4f:a9:fd:2c:0f:6d:7d:96:78:d9:74:
         ac:3b:ac:8c:05:90:4b:ce:ae:2b:ea:3b:6c:50:59:0e:5c:f7:
         b3:3c:d5:6b:da:1d:96:4b:6e:f1:5f:fb:ba:5f:84:4e:59:67:
         d7:d9:fe:07:5e:3b:8a:31:9d:b9:b0:36:88:81:19:40:7a:99:
         13:9d:0e:7f:fe:93:e1:b3:39:77:53:6c:66:03:89:5d:e9:22:
         f1:ab:c8:b2:d0:98:41:0b:87:84:b4:4a:6b:64:c6:02:6b:86:
         d1:7d:32:00:06:da:67:59:21:3f:c5:c7:6a:8c:10:c3:1c:f7:
         7b:c0:ee:f7:55:c1:1d:a4:63:d8:fc:c4:f8:e5:4a:45:29:3e:
         e4:84:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----