Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File:                     X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier:          eDiz7ME1IeF6i3PLltt82qmrPchOBcuSv0wID7zLaW8=
Subject key identifier:   EE:17:27:62:32:E1:39:4D:6A:71:5C:59:8D:6E:38:CE:2F:22:3D:AA
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer:       /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial:       01962F3DACBFB77210C4F194B5B44D0F5380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
                          2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: UbhAzFejDRxPpESyjW0WZ1oiyePXieU5X9iU3Bky+KE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ac:bf:b7:72:10:c4:f1:94:b5:b4:4d:0f:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=ee17276232e1394d6a715c598d6e38ce2f223daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:c7:54:a6:05:3c:5e:1b:23:02:fb:3b:7a:
                    ed:d3:22:12:5d:4e:ba:48:23:08:40:4e:52:e0:4c:
                    9a:78:f5:de:1f:bd:42:a4:59:bd:34:57:c6:fd:8f:
                    1e:4c:3f:60:d3:df:7d:d0:ff:41:ac:06:68:73:94:
                    f1:5f:13:d7:f5:02:56:c7:f5:5c:74:68:ab:24:23:
                    bf:15:de:58:79:c1:c3:bf:47:f0:14:0e:e8:12:20:
                    6f:f3:03:3d:57:0b:3b:a4:26:ac:c8:d8:e5:cd:9f:
                    df:dc:65:68:9a:7c:d0:2e:f9:91:e6:1b:e8:cd:76:
                    46:20:5a:c7:76:86:38:41:95:05:97:11:e4:88:e4:
                    be:5b:fa:bd:ec:4d:4e:85:7b:8f:c7:2c:38:53:d1:
                    77:d1:75:1d:a7:d1:46:e8:2d:37:ed:66:f2:f1:79:
                    40:47:2f:48:22:f5:80:a5:be:76:36:d4:da:4c:8b:
                    fb:b0:6d:e2:e9:f3:fe:b7:bc:94:57:80:3d:dd:29:
                    01:72:b4:32:64:0c:3f:50:d0:f3:b7:ff:bf:33:e4:
                    0d:0e:56:0f:9d:7a:44:c4:65:8e:28:47:61:ad:6a:
                    a8:e7:23:c3:7d:ff:dc:ad:c0:1c:0d:70:f5:14:ad:
                    1c:4f:40:90:2d:4f:5e:24:73:56:8a:f7:53:d9:c1:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:17:27:62:32:E1:39:4D:6A:71:5C:59:8D:6E:38:CE:2F:22:3D:AA
            X509v3 Authority Key Identifier:
                keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:46:72:e0:88:17:d1:e1:53:98:67:e0:3f:e9:d5:76:67:
         2f:88:4e:95:d5:97:d2:23:82:0b:d3:ef:bf:9a:ad:9f:a4:e0:
         5f:fd:e7:d3:8b:45:62:02:aa:76:b6:7d:6b:f3:a2:1d:99:ff:
         88:f9:08:f0:fe:aa:c6:4f:1f:a0:93:6b:7d:15:4f:47:c3:0a:
         a0:3c:08:36:cd:22:5a:02:3f:a8:97:10:b8:72:73:11:b7:dc:
         0f:17:31:af:a2:de:7d:34:08:58:3f:6c:be:de:81:27:16:67:
         47:6c:a7:f6:4b:5a:c4:35:0c:64:ab:37:3e:75:ca:54:aa:a1:
         81:29:7f:16:a3:1f:4d:fe:63:b0:8b:61:e0:97:ee:b4:53:1f:
         71:4d:a8:78:6a:00:bf:29:17:06:93:c2:54:de:6f:2c:0d:2a:
         c2:f8:73:92:f3:4d:fa:ec:d5:9d:a7:34:76:cb:b0:e6:49:60:
         59:8a:d8:67:a4:e2:f9:93:dd:df:25:36:04:b1:0f:6d:27:3f:
         4f:5f:d3:20:63:d2:be:f4:a5:77:6f:11:a7:44:75:7c:31:60:
         9c:27:2b:1b:44:74:07:72:19:ec:e0:81:7a:58:ff:26:8e:5a:
         7a:13:b6:38:c4:08:95:1a:b6:24:ca:ac:39:50:86:d8:14:5a:
         4f:a5:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----