Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File:                     5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier:          A3f5unVmrycuPjJBT44CIYGXdL1aUl/leFKsALMiGrw=
Subject key identifier:   BB:DC:A3:2B:EC:71:5F:19:B0:8D:C5:E1:29:A9:21:4F:34:4B:CF:DE
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer:       /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial:       01962ECFD7B48AEF0B7774953D878D15A4BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number:          06F9
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: RMh7ZokNGe/zukW+f0MmIM4FaMjVi1jQXzOsysrCoZA=)
                          2: U6VNcEpQLheujm9tfxISPahfL9s.roa (hash: tqMx8bcAAmv5ueMpkfbZ9NeoounqgDLr2ieBeeNoTVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:b4:8a:ef:0b:77:74:95:3d:87:8d:15:a4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=bbdca32bec715f19b08dc5e129a9214f344bcfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:50:f9:36:6b:0d:f6:d6:1c:88:74:84:d3:
                    ae:af:de:63:0f:65:4c:5b:9e:23:82:18:e5:e1:8d:
                    d3:bf:ee:30:59:7a:9a:46:3c:c9:3b:72:c3:81:07:
                    d5:3e:bf:b1:25:cf:3d:5d:0d:42:f1:50:a8:78:b1:
                    c4:b3:e6:65:a5:c2:f0:c7:a9:ba:89:56:eb:86:e1:
                    5d:1f:b3:57:95:8e:af:32:69:f7:90:6f:4f:d6:a3:
                    6d:9c:09:e3:12:ee:c2:8a:e3:48:b5:70:d9:e5:45:
                    59:be:de:3c:9c:00:d9:5b:a7:90:b3:02:d5:26:f1:
                    fc:4d:a0:ee:ee:47:fa:dd:a2:44:37:29:ea:8e:82:
                    30:59:71:12:6a:29:db:33:54:18:56:70:df:27:28:
                    34:39:d9:88:b1:9b:5f:70:ae:e8:1c:1a:aa:4e:c2:
                    b6:2d:6a:f9:4f:16:94:b3:c0:a2:51:e7:8e:55:72:
                    2b:1a:9a:d6:c3:89:f1:08:90:06:e7:11:4f:9e:7b:
                    23:15:9a:fc:30:7e:75:2b:2a:fa:b6:97:a5:89:2b:
                    f6:eb:62:cd:03:31:32:c0:da:75:61:97:c2:41:c4:
                    18:41:14:ce:cc:86:03:09:c4:8b:1d:d2:36:63:eb:
                    75:24:a1:7c:78:d3:68:d2:32:da:1d:72:ed:3e:11:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:A3:2B:EC:71:5F:19:B0:8D:C5:E1:29:A9:21:4F:34:4B:CF:DE
            X509v3 Authority Key Identifier:
                keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:ff:16:0e:c9:88:13:cf:6f:ba:a0:a9:03:23:8d:59:9e:
         4d:0d:cf:5b:07:0d:ba:39:93:2b:c5:fd:02:62:31:f2:b9:3c:
         e3:96:1e:fd:60:99:3c:0e:8c:e2:8e:74:01:e6:91:6d:50:2d:
         0e:54:15:ff:89:f4:28:b1:2c:73:50:9b:e3:8e:76:9d:83:69:
         3e:0e:00:03:b0:4a:1c:cd:6c:9c:b2:32:5b:27:d7:d8:22:a5:
         b1:47:d1:43:9e:41:3f:5b:d3:c8:19:b7:a0:a9:2b:f6:ae:7d:
         48:64:8b:52:78:20:cf:85:ee:ab:45:c4:c0:e2:55:fc:48:32:
         fd:90:78:26:b9:af:d1:37:37:b0:6b:60:46:75:53:c5:ef:1b:
         5d:48:55:49:88:f1:1c:78:f7:f1:8f:93:d7:87:e4:60:b4:f8:
         6a:d1:2c:58:b1:bb:fa:86:d3:41:79:c8:7f:75:e8:3a:87:7a:
         66:98:74:42:bc:51:ff:60:e8:76:e2:69:76:e9:ad:5c:2c:8e:
         e6:ee:a4:7e:97:90:42:d7:bf:76:16:dc:f0:b1:91:ad:ec:8f:
         73:f7:e7:fc:f8:4a:d3:51:0a:76:9f:37:1c:07:61:90:b3:65:
         51:2b:7a:c1:32:48:d4:2a:f4:df:32:0a:99:d5:fe:97:e8:f6:
         d1:db:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----