Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File:                     X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier:          lqUyXGCqBAqA0xZk41eE8Vn+VDBkyNAUGKCTfVE1sn4=
Subject key identifier:   03:0B:89:BD:A3:29:55:1B:A7:17:04:16:8F:E5:52:A2:47:95:EC:50
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer:       /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial:       01962F3DE527312482CED30FC60309FA9289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
                          2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
                          3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: xLxzRxJ5xSCBKAKW++lN6GZrRfc3LY6DzDnIzJO2FHk=)
                          4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e5:27:31:24:82:ce:d3:0f:c6:03:09:fa:92:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=030b89bda329551ba71704168fe552a24795ec50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:ae:89:87:d3:c0:7a:cd:16:7d:3d:0a:7e:
                    7c:d1:4f:ac:af:51:c5:e6:78:42:66:74:7e:21:be:
                    22:21:c0:07:2f:78:fe:b2:ed:39:4a:19:8e:aa:4e:
                    07:95:d6:e6:17:f9:47:19:53:cd:7c:55:ae:9d:19:
                    53:cb:57:4c:07:d4:87:9b:88:a0:69:0b:c1:db:d0:
                    1a:a1:15:d0:6e:ce:e3:e8:fa:bd:af:44:f1:dd:02:
                    ea:0c:6b:4b:11:24:1f:02:f8:4b:3b:3c:d5:2a:6f:
                    43:b6:a3:15:ed:51:9a:ef:27:e4:70:66:8a:fc:b5:
                    bc:cd:a9:79:38:b1:f1:0d:94:4f:95:9a:9c:5e:3e:
                    07:fb:de:c4:85:f1:0d:b4:f6:3d:f2:43:dd:3e:d0:
                    48:e7:40:92:98:55:32:f7:f3:57:ca:8d:a8:b9:d3:
                    73:90:94:fa:8f:1d:4d:d0:74:c6:35:b3:25:ae:52:
                    e1:df:2f:45:de:12:9b:0a:1d:64:e3:c6:a0:75:29:
                    24:a1:b4:20:57:f7:c7:e6:a5:2c:97:82:be:a4:12:
                    34:18:0f:ba:20:80:f9:e6:e8:4a:94:85:47:e7:15:
                    7e:65:57:bd:62:14:76:8b:09:69:5c:40:19:e9:25:
                    c2:67:d9:69:22:18:c4:96:d5:3e:03:3d:d4:51:a7:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:89:BD:A3:29:55:1B:A7:17:04:16:8F:E5:52:A2:47:95:EC:50
            X509v3 Authority Key Identifier:
                keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:50:32:dd:61:16:0d:55:aa:f6:95:c7:7f:08:86:78:3d:a1:
         a3:73:f3:db:cd:e9:02:d2:75:ad:eb:49:35:72:e0:7f:49:c7:
         12:ce:cf:6b:3f:bd:ff:09:c6:f1:10:6b:85:04:d8:e5:91:ee:
         9c:d2:a0:dd:b9:46:65:c2:1f:5c:36:dc:40:84:ff:23:a3:ba:
         5b:b6:32:ee:19:47:35:d4:0c:cb:a3:44:a1:a0:70:8d:83:3b:
         82:d5:1b:ef:80:86:e1:e4:a1:27:39:39:d8:8d:a4:66:d5:d2:
         04:19:a0:72:59:11:55:9d:c3:73:cd:e4:5d:d8:ea:23:98:57:
         b5:c6:82:c3:95:9c:dc:9e:03:66:b2:49:ad:08:e6:69:4c:f2:
         2a:46:df:75:43:73:5d:54:62:bb:58:33:d5:b9:d5:b9:1c:02:
         20:32:bd:9a:97:6f:67:95:c6:f2:c4:24:3a:7f:e7:88:a8:45:
         b7:b8:f8:88:94:69:04:de:49:f2:1d:13:56:1d:8e:2c:26:21:
         1b:b0:6a:62:74:10:e9:7e:ab:0d:0a:fe:8c:89:d6:93:ed:d9:
         f7:33:24:83:f5:cb:7b:e1:f4:cd:11:70:5a:a1:45:72:6d:cf:
         b5:4c:a8:bb:15:24:07:4e:04:37:cd:b6:da:77:4d:c0:f4:33:
         ac:38:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----