Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File:                     Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier:          Ft1igqHTZ1kkz8O+uIbj7F6zuWV4yRRz4MEYpCu2QfE=
Subject key identifier:   0B:46:C8:6B:36:3E:AD:51:88:F3:A4:3C:C5:5D:CB:07:27:61:03:37
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer:       /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial:       01962FAB10ABD65BC3294B07C14B5C95588B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: PFVG5mF2IobixjvOMIKTt/19TTYbTHCbdbfEtp+G6ok=)
                          2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
                          3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:10:ab:d6:5b:c3:29:4b:07:c1:4b:5c:95:58:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=0b46c86b363ead5188f3a43cc55dcb0727610337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:1d:61:9e:f6:2e:a5:25:45:3c:f8:c5:1b:
                    90:76:f9:49:85:a4:49:94:44:a1:8b:ff:9b:7f:15:
                    28:9b:0b:8f:af:ca:fc:70:23:63:10:39:2e:0f:62:
                    62:76:0e:1d:37:fd:b0:c9:2a:71:22:ed:12:36:5e:
                    c1:71:c8:b2:35:aa:d2:e5:f3:dc:e3:e8:f3:f3:d0:
                    66:de:3d:e2:9a:c4:ce:48:df:66:6d:7f:83:e5:a3:
                    31:f9:ff:b7:3f:8d:41:19:54:04:60:3a:89:3f:dc:
                    75:bd:ed:f2:89:cd:c1:c6:96:19:77:ab:0b:cf:92:
                    9a:94:7d:7c:ef:83:97:4c:92:88:85:11:d4:72:f1:
                    3f:33:2a:e7:55:9a:6b:25:5c:62:8c:85:68:e9:98:
                    e0:fa:52:5a:d3:0f:a0:de:12:b4:81:bf:32:de:05:
                    61:9f:88:3b:5c:77:40:99:a9:ef:bd:e3:c9:fd:b5:
                    b4:37:a5:31:80:e6:a3:c6:7c:02:05:36:cc:55:ed:
                    61:65:d2:42:fc:ff:b0:54:8a:45:bb:aa:b0:20:bc:
                    14:72:b6:b1:90:4d:b2:64:93:51:e8:1a:67:e6:87:
                    4e:dc:c7:c1:ec:75:f0:98:70:15:65:ae:fa:30:a4:
                    d6:75:ab:a3:b3:1c:4d:45:bd:8f:01:0a:38:f6:ac:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:C8:6B:36:3E:AD:51:88:F3:A4:3C:C5:5D:CB:07:27:61:03:37
            X509v3 Authority Key Identifier:
                keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:27:bf:f7:95:40:81:a8:29:2f:b8:09:08:ca:03:f3:a1:64:
         0e:79:b4:e5:f7:74:05:39:39:ba:25:e0:eb:84:ad:de:bc:7d:
         9a:cd:23:5e:5e:0e:ec:b1:3d:39:6c:bc:42:1c:24:5d:83:5e:
         b9:d8:ce:27:3d:70:e9:44:cc:c0:bc:e1:64:c1:ce:50:8e:1d:
         d8:69:a8:24:ae:bb:bd:45:34:a4:bc:0b:0c:c0:cc:27:11:ed:
         d6:4a:b5:7c:74:da:1c:77:72:90:3c:68:be:42:49:5b:b3:dc:
         d5:0d:74:6a:5c:1a:33:4b:8c:27:29:eb:0a:51:cf:ec:0a:9d:
         7e:34:b2:b2:df:7b:43:28:06:da:fb:45:56:9a:60:1f:cf:9f:
         40:7f:78:f3:87:21:56:18:fd:ad:55:12:25:33:37:f4:c2:b4:
         be:25:a8:8a:50:f2:d2:d4:24:ce:ce:92:c4:c7:8f:4d:5f:0e:
         c8:0b:54:72:e3:9a:f5:23:67:dc:8f:70:f0:37:3e:a1:d0:a6:
         a9:52:11:20:7c:0f:4b:d3:fc:7d:20:ee:16:7f:24:9d:03:9c:
         63:16:28:85:0a:1f:b4:9b:ca:ce:fb:e7:ec:20:28:f8:ef:e6:
         84:00:48:a3:33:0d:53:82:3f:49:eb:73:0b:60:e9:71:36:82:
         fa:a3:d4:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxCr1lvDKUsHwUtclViLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTc2OGUyNmZmNGY5YTJhOGE1NmRhNGRjYjdlMWVjMGMy
ZTRhOTMwHhcNMjUwNDEzMTUwMTAyWhcNMjUwNDE0MTUwMTAyWjAzMTEwLwYDVQQD
EygwYjQ2Yzg2YjM2M2VhZDUxODhmM2E0M2NjNTVkY2IwNzI3NjEwMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx8dYZ72LqUlRTz4xRuQdvlJhaRJ
lEShi/+bfxUomwuPr8r8cCNjEDkuD2Jidg4dN/2wySpxIu0SNl7BcciyNarS5fPc
4+jz89Bm3j3imsTOSN9mbX+D5aMx+f+3P41BGVQEYDqJP9x1ve3yic3BxpYZd6sL
z5KalH1874OXTJKIhRHUcvE/MyrnVZprJVxijIVo6Zjg+lJa0w+g3hK0gb8y3gVh
n4g7XHdAmanvvePJ/bW0N6UxgOajxnwCBTbMVe1hZdJC/P+wVIpFu6qwILwUcrax
kE2yZJNR6Bpn5odO3MfB7HXwmHAVZa76MKTWdaujsxxNRb2PAQo49qy52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtGyGs2Pq1RiPOkPMVdywcnYQM3MB8GA1UdIwQY
MBaAFF8XaOJv9PmiqKVtpNy34ewMLkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgt
MWUwMzY3YzA3ZDQ2LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgtMWUwMzY3YzA3ZDQ2
LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZie/95VA
gagpL7gJCMoD86FkDnm05fd0BTk5uiXg64St3rx9ms0jXl4O7LE9OWy8QhwkXYNe
udjOJz1w6UTMwLzhZMHOUI4d2GmoJK67vUU0pLwLDMDMJxHt1kq1fHTaHHdykDxo
vkJJW7Pc1Q10alwaM0uMJynrClHP7AqdfjSyst97QygG2vtFVppgH8+fQH9484ch
Vhj9rVUSJTM39MK0viWoilDy0tQkzs6SxMePTV8OyAtUcuOa9SNn3I9w8Dc+odCm
qVIRIHwPS9P8fSDuFn8knQOcYxYohQoftJvKzvvn7CAo+O/mhABIozMNU4I/Setz
C2DpcTaC+qPUQg==
-----END CERTIFICATE-----