Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File:                     d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier:          XnC6NOlpI6wkGj+K2eWupLPGXKAODFC5C6RJi/PRess=
Subject key identifier:   1A:51:B9:24:83:F7:80:54:03:F4:49:31:B1:AE:A5:73:57:B8:B1:BD
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer:       /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial:       01962E2AF07273CB5EACE69ED6AAB20ADB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=)
                          2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: t0cZovqL9NeDItd2zxBIJAFWanL5b2HdQzDA83GibIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f0:72:73:cb:5e:ac:e6:9e:d6:aa:b2:0a:db:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=1a51b92483f7805403f44931b1aea57357b8b1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:9d:13:09:6f:cc:ae:84:4d:19:2a:cf:f9:
                    2f:c7:9a:10:23:96:4f:3b:7b:66:ca:5e:86:1f:e8:
                    f5:85:38:03:d3:de:3a:69:64:76:f8:58:22:29:ce:
                    09:4a:bf:80:63:cc:7a:da:e8:d2:a8:51:5a:9e:79:
                    fa:4d:05:da:6e:ea:d7:1c:50:bb:31:93:c4:0a:a2:
                    3f:0d:ce:a8:7c:22:27:e6:72:3d:72:89:9a:b3:80:
                    1c:ed:84:63:2e:4d:ba:ea:63:3d:29:bb:56:26:5e:
                    df:70:9d:d2:f1:fd:4d:29:b1:70:d4:1f:dc:ad:8e:
                    30:1e:8c:49:74:fc:ec:1e:f3:cd:75:9b:d1:cd:78:
                    db:35:a4:dc:ac:e5:24:b1:39:70:84:df:d1:2e:c9:
                    fe:e9:51:ac:d5:ea:63:2f:28:0f:08:f1:0e:37:61:
                    16:4a:f1:92:c9:50:6c:1a:d0:d9:cf:36:49:6d:c4:
                    0a:7c:ef:d2:14:43:6f:23:a9:11:4a:5c:f7:fe:23:
                    0d:37:32:02:aa:46:66:29:bc:02:85:21:e9:a5:ef:
                    7c:90:a1:6a:7c:48:f6:97:8c:b4:22:be:2a:f9:c8:
                    fb:01:22:b7:cc:c6:e0:66:2a:2f:22:88:65:6f:18:
                    13:79:81:de:8a:c8:de:42:43:2e:65:dc:c5:07:cc:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:51:B9:24:83:F7:80:54:03:F4:49:31:B1:AE:A5:73:57:B8:B1:BD
            X509v3 Authority Key Identifier:
                keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:51:df:90:ac:f9:fc:f5:19:bc:3f:96:e6:f2:5e:39:c8:9e:
         53:86:e3:2a:89:82:38:f7:95:23:4f:13:6d:4e:ee:7a:81:f5:
         6b:e3:29:7d:6c:90:a4:68:0c:b4:be:3e:d0:93:ba:06:c0:2f:
         24:22:21:75:93:80:99:63:8f:a0:5b:16:73:38:3d:bd:50:55:
         8d:f7:fe:38:92:eb:69:28:07:7f:e9:8b:90:7f:d0:d5:ff:5a:
         d9:02:82:10:c6:66:9c:d4:c7:79:f8:54:fd:d4:3c:79:ce:99:
         98:75:0c:c3:da:f4:fc:50:2f:98:8b:92:62:54:6a:5d:13:c9:
         1e:08:bf:bb:ec:6c:b6:b6:1d:76:bf:c1:0a:44:e9:95:df:8b:
         43:6f:d3:ba:a7:93:bf:1b:ee:01:3a:9c:90:b6:bc:76:2d:d5:
         1f:d9:c5:da:78:02:90:c8:fa:eb:f7:73:d1:7d:36:37:2d:f6:
         bb:6e:e7:a0:b5:ba:48:5c:8c:43:21:a6:94:cd:9b:67:51:06:
         9a:53:81:c4:fe:c8:56:5f:05:c6:92:f4:01:04:b5:7d:e6:9c:
         1a:60:63:ab:6d:c1:f3:49:9f:d0:d0:d1:e5:48:20:c5:2e:da:
         7a:a1:ea:7e:d9:8a:8f:40:17:a5:93:8b:9b:1f:ea:79:a0:94:
         aa:5b:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----