Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File:                     xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier:          allog6ymwKD1AuWTM2jcdF1i/bDzVuzP7Tm84tKx9PU=
Subject key identifier:   52:CF:0B:D7:C4:4D:21:7A:DD:48:87:69:E4:97:72:ED:0F:BE:38:D1
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer:       /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial:       01962F0709239106988C23AA52BB48F19B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
                          2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 4X6CqA2ZpGdL2kY0H4NK0f/i3RoC4j55y30DRWyqas8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:09:23:91:06:98:8c:23:aa:52:bb:48:f1:9b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=52cf0bd7c44d217add488769e49772ed0fbe38d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:99:66:11:75:56:24:f4:4e:e4:d0:ae:03:
                    75:f2:7e:d2:d4:46:4b:94:0b:eb:f4:6f:24:6e:f3:
                    ce:70:52:91:e6:67:33:47:73:a1:0d:30:c6:e8:ca:
                    b7:bf:ce:bc:28:16:fc:1a:51:4d:af:e5:13:b8:56:
                    30:e8:c1:bb:81:63:57:6f:7e:07:92:e0:28:a1:6d:
                    5d:8b:65:9d:c3:6b:c2:e7:8c:e3:2f:4e:27:7f:d8:
                    09:2a:0c:db:f5:f1:fe:35:72:e8:69:fd:77:25:be:
                    69:61:2d:37:32:c3:02:b9:c6:4c:5e:98:1c:21:ea:
                    c3:bb:a2:53:0e:5e:da:5d:f4:62:f1:0e:0b:7b:9e:
                    fb:54:a7:d1:8f:ea:f3:8f:10:2c:97:38:0f:e9:f6:
                    e3:1e:d0:0b:12:01:ca:4d:35:61:03:7d:ed:e5:e4:
                    84:45:8c:9c:18:cd:74:30:ad:50:ba:8b:68:64:ca:
                    3a:08:fa:4c:5d:ea:36:7d:6c:24:c3:9b:5a:9c:bc:
                    1f:95:15:59:11:72:66:66:f2:8d:f4:9c:c8:1d:77:
                    e2:c8:1a:9f:a3:41:04:ac:de:5d:51:ed:66:d2:db:
                    20:fc:0c:c6:1a:2f:e7:03:62:a3:89:c6:d2:b6:85:
                    3e:10:8e:12:ed:12:2a:c5:44:c5:39:4f:e2:1c:6d:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CF:0B:D7:C4:4D:21:7A:DD:48:87:69:E4:97:72:ED:0F:BE:38:D1
            X509v3 Authority Key Identifier:
                keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:ac:60:ba:94:8a:3d:8e:61:2a:86:ca:21:92:0e:97:ab:
         bd:cd:9d:8e:39:cb:69:84:17:b8:05:6e:a8:62:73:2a:a4:ae:
         1b:55:3a:00:e6:29:34:32:9f:78:64:db:08:ee:c1:63:38:11:
         f7:f6:e4:6f:d2:b5:ce:01:d8:bb:ee:06:cb:2e:1e:14:8a:ca:
         a8:e4:5f:e3:38:a3:17:f8:7a:ad:7a:a1:ac:be:53:a8:ca:bd:
         46:4a:3f:e9:5c:6b:82:c8:45:45:fb:72:47:1c:e7:06:7b:0f:
         f4:17:ad:a3:c4:ef:7f:ab:8f:3f:b3:ef:71:32:bc:56:a5:fe:
         cd:d2:ad:dd:f1:98:85:46:36:ca:66:4e:5e:3e:8d:51:20:0a:
         f3:29:a7:21:d2:e4:31:51:ab:91:bf:75:64:96:87:8a:5c:ba:
         9f:de:f8:65:f9:d5:d4:7c:8a:24:bb:a3:ba:16:19:9c:6a:e4:
         00:06:ae:92:89:fa:c7:de:d6:00:51:2c:4e:0e:06:22:e9:a3:
         ed:9c:d3:d2:3d:1f:40:eb:a4:96:09:9c:20:c6:26:5a:92:0b:
         20:50:d9:0e:6a:02:66:36:ff:a0:93:6f:a3:8b:43:3b:c7:3d:
         0d:ac:2f:e5:90:c9:88:61:80:96:ed:75:cc:43:93:60:53:a9:
         44:75:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----