Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
File:                     4lzdUHOqVD30SJKA9n2uU_rCYXk.mft (raw, json)
Hash identifier:          AjYzyw8kGi0NPiHSyluaoRw+XWhz+Z9fBeiNFl7GHek=
Subject key identifier:   59:2A:8B:CB:CD:A1:95:39:B5:8C:34:2F:08:60:42:51:CE:E9:14:BB
Authority key identifier: E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
Certificate issuer:       /CN=e25cdd5073aa543df4489280f67dae53fac26179
Certificate serial:       0195C8E314206DF6E7BDE81A4F1F611FFC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
Manifest number:          0BF0
Signing time:             Mon 24 Mar 2025 16:01:19 +0000
Manifest this update:     Mon 24 Mar 2025 16:01:19 +0000
Manifest next update:     Tue 25 Mar 2025 16:01:19 +0000
Files and hashes:         1: 4lzdUHOqVD30SJKA9n2uU_rCYXk.crl (hash: 7vcW9HPCMKpNfcssV91nox6G5mw6soXUpaSMfB4vIo4=)
                          2: mBEegRP2fcMEeUaclOgLAwCugkM.roa (hash: B82VvCB/q+BaVI4/BoHfqo/wxEhTrze1CaetuXlR0ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:e3:14:20:6d:f6:e7:bd:e8:1a:4f:1f:61:1f:fc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25cdd5073aa543df4489280f67dae53fac26179
        Validity
            Not Before: Mar 24 16:01:19 2025 GMT
            Not After : Mar 25 16:01:19 2025 GMT
        Subject: CN=592a8bcbcda19539b58c342f08604251cee914bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:84:83:4d:d5:e9:1c:92:b7:4b:7f:c1:d6:
                    50:af:d9:7f:62:73:36:a9:ca:1b:8d:6d:a8:3a:f2:
                    a7:8a:66:60:6a:e0:f1:4d:d2:b2:92:9f:52:53:05:
                    39:70:b1:e4:51:3f:be:4b:ef:86:41:f0:d8:f4:1d:
                    d3:b6:98:23:12:c6:11:9d:b6:fe:1f:c2:e4:71:f4:
                    6f:b9:65:2f:31:b3:29:67:23:86:08:da:89:38:1c:
                    e1:19:48:3a:2a:7e:f0:a9:c8:93:81:ee:26:3b:b0:
                    67:32:cd:86:02:d6:7d:2e:29:12:47:0f:f5:a2:fd:
                    ee:a4:0c:94:f2:c4:da:60:a0:92:8c:da:c4:93:ee:
                    e8:5c:29:4c:0f:8e:9d:5a:51:65:d6:c5:9b:5b:31:
                    a9:71:be:6d:bf:7d:1c:b8:a1:6d:d3:8d:66:30:d3:
                    e1:30:c7:64:c4:7d:7e:30:36:29:4c:a5:77:f1:24:
                    22:af:31:50:5c:e2:6e:30:bc:1e:50:b7:c3:bf:f9:
                    a3:74:6a:40:62:94:50:9e:84:03:8b:76:44:9a:be:
                    36:43:1f:00:a2:ec:60:fb:0c:d6:7f:26:f5:49:b7:
                    64:c2:b4:92:ec:4f:06:3d:e3:c5:90:6d:58:0e:c9:
                    58:23:6c:e4:62:dd:f0:b2:a4:70:86:f8:2e:fd:e1:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2A:8B:CB:CD:A1:95:39:B5:8C:34:2F:08:60:42:51:CE:E9:14:BB
            X509v3 Authority Key Identifier:
                keyid:E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:ff:f0:a4:7a:f3:47:b1:b5:5b:50:e3:83:19:33:b0:f2:
         dd:8e:20:c8:29:11:9d:17:be:1f:ac:81:75:34:58:43:db:cc:
         b0:e4:b2:a9:42:51:9b:0e:99:fa:34:f6:38:c3:a3:28:e4:91:
         ee:e5:d6:13:bb:8e:23:04:aa:06:14:fe:cf:a4:59:09:58:e2:
         1a:a9:35:70:b3:e0:5c:cc:6c:4d:07:f4:49:13:12:ae:55:14:
         f4:7a:61:ab:c6:ea:b9:27:69:9f:6e:63:63:17:84:33:94:0a:
         92:7a:60:a9:81:2b:7e:aa:6a:34:b3:1e:e9:a9:52:68:ed:1a:
         38:0c:81:bb:58:d3:e5:38:35:95:ce:aa:23:40:0c:98:6e:38:
         3b:88:05:87:68:aa:d5:4f:98:c8:8d:0a:c9:30:dc:04:f2:6e:
         0a:3d:71:e5:68:92:3e:0a:2d:ee:a9:ba:e4:a4:eb:11:67:89:
         90:22:05:0c:69:f7:e4:9f:6c:03:fb:99:46:93:d9:60:65:c1:
         b0:2d:67:e0:e7:37:c0:ae:df:fe:00:75:48:4a:46:79:dc:a4:
         82:2a:b4:b8:a6:44:eb:15:0b:d0:96:4a:f9:59:4d:1e:b3:f4:
         ac:3d:e4:dc:a6:bb:28:d4:0d:8d:82:6a:a0:61:0d:b8:85:2f:
         b9:35:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----