Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File:                     Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier:          H6aaYFe/cpuQCzB8c6I0SGBy4xMtRNYAaypOPz7DT+o=
Subject key identifier:   25:10:EC:BC:3B:F5:DE:65:EA:AD:E1:AA:E0:F8:4D:99:7F:19:08:04
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       01962E61BAB11D71DA173EF3097343E3DACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number:          0529
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: QEss9zLOzbnk5Xa_0K4YXbMb5qY.roa (hash: OBsJALGCyyQG7Ejkwlv6+1osaKxY665jLogVGloKmd4=)
                          2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: eduNcW9yUIJAWS20K8k5rTbv2QgTSphhybYjXkYv6cI=)
                          3: tCB14kGV6U2NGcyfByN7-DomVJ8.roa (hash: UZ1VDBkhzAvTXI924h/1409nf6LFWjypU3ljSY/BZyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ba:b1:1d:71:da:17:3e:f3:09:73:43:e3:da:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=2510ecbc3bf5de65eaade1aae0f84d997f190804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:42:9e:a3:cf:cf:01:2e:48:02:2f:51:79:20:
                    e8:32:f2:67:e3:44:d3:01:21:38:7c:3b:e6:5f:92:
                    51:8c:13:b5:1f:1a:f3:a9:28:85:bc:1e:d9:79:10:
                    07:1e:51:98:65:63:ba:42:1e:53:05:1e:8d:68:d0:
                    be:71:7c:8f:97:93:09:43:1c:d7:10:42:4f:17:0a:
                    23:d3:2a:31:b3:22:4c:aa:24:e1:9d:98:a2:fc:2b:
                    7a:f5:c5:ed:9a:aa:a0:ed:29:23:e7:7d:96:2d:a6:
                    c5:06:39:ec:b0:b4:2e:c8:e7:6b:3b:c8:3f:f2:4b:
                    3c:f2:8d:3d:b0:25:3e:80:ec:75:1c:bb:17:79:f0:
                    05:b0:4c:7b:ab:64:1f:52:57:12:b1:f4:50:39:14:
                    0b:55:f6:93:ac:c1:a5:84:44:65:b0:9a:5e:2a:23:
                    b5:c6:06:12:c1:d4:0a:fa:ea:4c:6f:31:52:aa:d2:
                    fc:0f:24:4f:75:76:fc:1d:12:7b:f8:f5:a5:73:fa:
                    33:c1:dd:b7:a8:2b:50:e0:d0:d1:34:67:ba:d5:c5:
                    3e:0e:63:71:0b:f2:10:e5:1b:6e:5e:fd:d6:49:ad:
                    cf:3d:49:14:98:c6:67:6a:83:df:1d:6b:85:31:31:
                    ca:c5:73:a6:fb:52:e1:35:87:f0:79:5a:47:dd:8f:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:10:EC:BC:3B:F5:DE:65:EA:AD:E1:AA:E0:F8:4D:99:7F:19:08:04
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:36:3b:fd:a0:7c:de:fa:4d:6a:ec:18:77:c4:c8:d4:35:56:
         35:cc:f0:37:a1:5d:c2:85:22:75:ae:7b:d5:c9:36:4a:da:1b:
         95:2d:b2:b6:82:66:7c:81:06:b7:ab:83:14:04:56:b5:ca:16:
         8a:f3:d7:d8:f1:ce:2b:69:b2:bd:f0:7c:9e:55:64:23:53:b6:
         75:22:ca:22:e5:a5:83:39:75:dd:dc:0c:f2:36:6e:a6:06:4b:
         00:57:e9:e2:f9:28:42:c5:7c:5a:75:44:44:ac:9d:75:93:01:
         4d:43:13:2c:ad:ec:9e:81:0d:56:41:19:38:ae:7d:e5:ad:d7:
         e1:af:b6:d5:17:ff:93:0f:4d:62:a4:dd:d9:6a:32:be:3e:48:
         d5:66:81:a6:ec:c1:cb:57:21:35:6c:9d:db:cc:55:18:52:79:
         4f:4a:ae:55:f6:e4:f6:1b:ed:4e:38:30:4a:44:5e:8d:5b:8e:
         d3:61:0c:87:9a:fc:62:57:4f:a8:e0:55:c6:c7:cb:ed:d2:2c:
         9b:5b:66:2b:fb:59:71:48:0f:1a:3c:8f:96:2b:e0:e3:e9:f4:
         4f:17:5a:5a:e2:20:71:4a:57:29:e7:86:e3:41:79:3f:42:97:
         b0:3b:37:31:96:53:a5:72:d4:93:fa:4a:1e:92:1b:b8:2f:00:
         67:b3:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----