Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File:                     XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier:          E/XGRCC1sChpaeK2DV8yDMDJOPbeEZoz/8x7XzRA1Ko=
Subject key identifier:   52:15:30:22:3B:EA:8C:5C:5A:66:CB:EB:75:27:05:8E:4A:28:16:0A
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer:       /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial:       01962F7499F6809209850DBADE0E0F24FB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number:          0F4E
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
                          2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: n1KBKok8zyaNaK7bM8zcE6MmwbXmyqx6QgOllNzpOjI=)
                          3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:f6:80:92:09:85:0d:ba:de:0e:0f:24:fb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=521530223bea8c5c5a66cbeb7527058e4a28160a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:64:c7:37:2f:33:ae:63:5d:92:a5:36:a1:
                    eb:6f:cf:84:22:5b:09:9a:b1:f6:e5:78:40:f4:ff:
                    c1:64:af:ac:af:a2:06:d5:46:1a:0f:5e:61:5f:69:
                    55:0e:b0:fe:1b:3a:6b:b1:9c:0c:b2:bf:f9:e9:7c:
                    b0:79:a3:4c:14:ce:ef:10:ea:bf:e0:82:c5:3d:43:
                    ad:09:56:72:01:c6:a1:76:94:0e:9c:e8:ad:94:cb:
                    7d:10:b4:42:25:f0:eb:cc:c7:e3:f9:34:c7:3a:6f:
                    8d:fe:50:ab:37:ef:9c:53:e0:a2:e9:04:f1:a4:74:
                    e2:89:06:fa:53:7c:f9:6e:a7:35:16:d8:cc:86:b3:
                    de:c3:fa:99:e2:e4:93:e4:d7:7b:65:2a:f9:65:3c:
                    2b:f4:21:1d:92:3e:d2:87:d5:27:3b:de:be:d7:60:
                    ca:2e:e3:66:05:18:7b:09:c1:91:8a:dc:3b:f9:65:
                    b5:31:c0:cd:fa:72:30:a2:13:c7:77:af:05:42:95:
                    73:05:a7:3d:4c:98:d3:ff:89:93:5b:db:b1:45:bd:
                    93:5b:c4:8e:96:a5:68:fe:ef:61:64:5b:a0:0b:e1:
                    85:7a:c4:f9:69:aa:e1:d1:93:fd:2a:5e:ed:3c:c8:
                    40:6b:90:e8:76:5d:12:9c:82:89:6b:d7:69:e5:0c:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:30:22:3B:EA:8C:5C:5A:66:CB:EB:75:27:05:8E:4A:28:16:0A
            X509v3 Authority Key Identifier:
                keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:b0:85:39:bd:e8:a5:b8:68:04:23:56:1a:87:3a:2a:7b:
         20:0c:e3:d3:4b:13:51:a8:36:86:2b:59:65:b1:80:be:1b:f4:
         e5:87:7b:b9:f0:11:f1:3a:49:8e:36:32:f2:7b:98:ef:c1:bc:
         05:c4:e7:e8:63:f2:48:5c:3d:70:e8:94:e6:3f:1a:46:85:c7:
         b9:c7:33:59:8b:74:ae:7b:44:86:a1:40:99:31:fd:e0:b5:94:
         2a:09:f7:5c:ee:3f:ae:5e:18:de:4d:77:01:ae:40:45:c4:db:
         86:65:6d:94:e9:73:d7:46:fb:1c:35:32:09:28:88:db:2a:18:
         5c:ee:fc:8f:32:14:df:d5:d8:18:b0:ac:ba:a0:22:9f:5b:e8:
         94:08:33:be:4a:4c:06:12:79:7b:25:f9:15:5b:6e:3f:fa:97:
         98:77:67:2d:bd:2e:ba:21:e2:99:bf:6d:d0:6f:ae:a5:c3:7b:
         48:61:eb:f1:9e:cf:0d:fa:56:6a:a4:93:fa:07:06:45:10:d4:
         71:7f:44:d4:4d:db:3d:4e:da:34:c7:b7:ac:d8:d3:6f:63:eb:
         a0:9d:a6:6b:7b:03:a5:93:48:3e:58:22:d9:5b:cc:67:da:19:
         07:e9:40:0a:72:15:14:ef:e3:5f:ff:01:da:83:a6:2f:1a:fa:
         f0:00:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----