Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File:                     Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier:          BxZnJ8S/OUXLuMgdhnjDiEAryZYjjpDhkaAsy13OiAw=
Subject key identifier:   83:BA:FD:18:26:1B:5A:48:0C:AA:4A:F8:DE:D7:DA:9C:32:CB:D1:CB
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer:       /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial:       01962FAB50821A977FD216965CE1C66C25F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: 4Es6t6T3lDUt/SWElWdFma8AkcSzmXkk4FvZDkDhjyE=)
                          2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
                          3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:50:82:1a:97:7f:d2:16:96:5c:e1:c6:6c:25:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=83bafd18261b5a480caa4af8ded7da9c32cbd1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:86:07:2a:4a:f6:f4:ae:c9:27:37:54:59:
                    7b:2f:35:0e:61:26:56:85:20:48:40:c3:f3:f5:e0:
                    47:fb:83:27:1f:67:f7:e7:28:f0:68:10:71:5c:c5:
                    ac:c3:32:60:6b:2f:b7:06:45:dc:fd:8e:10:89:f9:
                    51:95:60:56:66:8b:bd:4e:67:9a:52:17:51:a0:46:
                    19:c0:83:99:79:ee:a7:e0:d9:10:f9:c2:68:7c:d5:
                    63:97:3a:08:d3:40:ca:b2:7c:97:5c:da:90:8b:35:
                    57:5f:f5:10:bd:04:64:66:eb:92:98:86:7c:e1:c6:
                    f0:cf:50:be:9f:ce:11:88:59:af:97:8f:a5:7a:15:
                    01:b3:bf:31:11:3c:2f:e2:38:8b:c2:39:f1:1b:cd:
                    30:29:17:68:02:85:35:83:15:a8:0f:9d:02:f8:d8:
                    ed:8e:c2:9b:e5:99:04:c2:41:0b:78:a4:1a:a8:a3:
                    ae:f8:50:0f:1b:18:eb:d2:11:87:02:fc:e3:46:fc:
                    8c:f8:63:d6:7b:1b:4a:74:33:47:2b:e7:6e:72:50:
                    fc:ad:e2:c1:3a:f6:a1:04:74:9d:0d:b7:d9:38:40:
                    ba:c4:a1:cf:79:ee:40:52:c1:4a:e8:c4:44:21:45:
                    d8:8a:5c:9a:59:73:eb:13:1a:c0:a8:56:16:03:12:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:FD:18:26:1B:5A:48:0C:AA:4A:F8:DE:D7:DA:9C:32:CB:D1:CB
            X509v3 Authority Key Identifier:
                keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:f3:d8:99:75:93:c4:05:87:d4:b2:fa:49:9a:75:2d:1b:
         95:b8:c9:97:16:f2:5e:d4:6b:cc:02:7e:b4:13:a6:f6:e4:d2:
         d3:41:c9:33:9c:ca:a9:79:a5:e1:10:6f:ec:07:6d:cc:fe:bd:
         9d:d5:ac:4f:c5:f9:2f:7b:a1:dd:50:0e:64:33:06:48:0d:5c:
         8f:7c:18:9f:ee:d9:6f:e4:97:53:0b:e6:aa:c9:08:b3:94:8c:
         e6:0f:99:97:e1:80:d0:57:08:7d:37:6a:49:21:68:82:38:58:
         78:de:9c:ef:b6:06:c3:ac:ed:d5:cb:99:a3:97:8a:9b:ad:d6:
         d0:d8:db:80:c5:8b:2a:78:38:ec:e1:de:5b:6b:24:02:71:ae:
         c9:fa:65:81:81:69:90:21:87:35:9e:6b:5b:40:91:b9:9b:2e:
         6a:53:11:66:a1:5c:a6:77:c3:ac:38:aa:90:1b:b7:49:46:6f:
         34:d2:ee:06:a7:0d:e8:9e:98:8f:55:56:f6:4a:09:bd:48:b1:
         99:52:ca:f0:3c:6a:43:56:c7:6b:82:e6:c0:7e:45:19:49:cf:
         74:26:04:56:de:e1:02:75:0d:6f:9d:de:4f:f4:86:44:46:84:
         64:0e:54:12:b8:1f:6f:80:4f:4c:72:61:6a:4b:f9:53:6f:76:
         61:ef:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----