Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
File:                     xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json)
Hash identifier:          csNgMoUXO5wZ7l0XxOu1Ir+dsxFB0HFTvxwG0BhzcgY=
Subject key identifier:   B2:D1:20:00:D5:6D:D6:47:00:17:B5:EC:4E:47:19:F6:F3:03:CD:0F
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Certificate issuer:       /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial:       01962F3D8332068D9F480C78D5F73FF14FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
Manifest number:          A5
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=)
                          2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: gwHuCBNoDMALVs0ffzLjDPDjb36CqMKD+yyb+iK+ibQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:83:32:06:8d:9f:48:0c:78:d5:f7:3f:f1:4f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=b2d12000d56dd6470017b5ec4e4719f6f303cd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:3f:b8:3b:b2:f3:46:a8:f4:77:27:d7:8a:
                    8e:46:63:1d:15:26:f3:ac:44:7c:86:30:51:ee:bd:
                    21:e3:92:8e:b1:26:3f:f4:f6:08:fd:fb:a9:08:33:
                    c4:d2:ec:c8:6d:2c:01:8f:00:c5:8e:d1:eb:86:2a:
                    8b:86:e2:d9:a0:bb:77:ab:13:9e:9d:5a:10:35:9a:
                    b0:b7:6a:15:4d:97:bc:71:b1:89:61:40:ad:9d:2d:
                    bb:2c:c0:77:3a:8e:0a:22:81:20:83:3c:6c:fb:71:
                    79:90:a8:37:29:01:ca:cd:ed:2a:df:de:72:30:2b:
                    2c:11:28:ab:cc:10:3c:a7:fb:ee:57:52:b3:47:68:
                    ac:ea:ca:03:67:63:d8:bc:72:48:be:32:ac:80:9c:
                    99:35:40:f4:64:21:6e:13:da:12:e7:27:7d:7c:9c:
                    c6:5d:ee:cc:9a:c1:ef:65:6a:2a:46:1e:8b:ba:25:
                    5a:c3:cd:1e:83:ae:ba:a9:ea:cc:17:b6:9e:4a:78:
                    f6:19:fc:5c:69:2a:be:30:69:2e:ea:45:aa:64:37:
                    8e:a9:f2:6e:36:53:73:01:30:9c:2d:ba:a0:d3:8c:
                    f9:b3:b8:70:62:af:61:77:a1:5d:8d:ef:c7:e1:a1:
                    1e:c1:94:01:70:64:d7:12:38:39:5d:e1:36:39:dc:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:20:00:D5:6D:D6:47:00:17:B5:EC:4E:47:19:F6:F3:03:CD:0F
            X509v3 Authority Key Identifier:
                keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:45:e0:1a:cb:9e:e2:b6:df:41:69:b1:03:6d:69:5c:f4:6d:
         68:80:04:43:e4:27:01:5f:88:ca:1f:31:35:fc:87:82:99:96:
         d7:4d:80:a1:7e:9f:f9:cb:ff:33:67:b6:a9:43:0e:60:93:10:
         c0:1b:bf:d8:fb:a9:b0:ba:85:27:3b:7d:a4:ed:f5:87:40:02:
         29:df:97:a7:33:6d:96:9e:81:90:f7:2b:43:62:f2:f4:44:2c:
         63:59:fc:7a:43:95:60:71:69:7b:b8:51:d8:ab:6a:4a:e8:9e:
         5d:59:5a:cd:79:00:ce:c4:f0:05:79:ab:d1:7b:ec:d1:69:83:
         35:e1:a5:fa:5d:a0:39:39:37:67:9e:8c:54:e0:d6:5f:00:f1:
         ac:a5:d7:92:ad:33:b1:81:fc:c8:c6:60:9c:67:e9:30:6e:a8:
         d5:d3:89:d6:72:e2:a0:85:df:dc:87:21:13:af:6f:46:3e:61:
         97:da:c3:13:86:6f:1f:c9:2e:03:7b:6e:ed:c3:a8:85:f6:03:
         a4:2a:c7:b3:15:5d:84:73:88:b5:4c:bd:13:24:50:2f:7a:14:
         0b:74:3c:78:49:47:10:da:7b:bd:16:c5:b8:f0:73:97:47:de:
         b3:48:33:ba:7a:1e:1c:3a:c4:9e:29:a0:02:2c:9e:75:16:5e:
         cf:77:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----