Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
File:                     xagvOTbyRO3LYBPhIdUadpDRNZk.mft (raw, json)
Hash identifier:          WeiCgMeIkLsSMaj8v/eQOhWA/nJluW0TGZkzWwDh5Qg=
Subject key identifier:   60:F5:FF:F9:B8:A0:A7:3A:43:EF:2D:83:15:D8:AA:74:0C:C3:60:61
Authority key identifier: C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
Certificate issuer:       /CN=c5a82f3936f244edcb6013e121d51a7690d13599
Certificate serial:       01979B9873553F566677A05AD79D8240AEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
Manifest number:          12F7
Signing time:             Mon 23 Jun 2025 07:02:28 +0000
Manifest this update:     Mon 23 Jun 2025 07:02:28 +0000
Manifest next update:     Tue 24 Jun 2025 07:02:28 +0000
Files and hashes:         1: XSbdHCVCRCiTj8mv8uqC5jKu2Wc.roa (hash: 5E+fKGQdMloCaM1N6c8AjIuVH6v9QdhsvGHXvp3zGN0=)
                          2: xagvOTbyRO3LYBPhIdUadpDRNZk.crl (hash: zSuymekictAt4ykndHBxW+XjFj8DmYbB86vtkOw2Gro=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:98:73:55:3f:56:66:77:a0:5a:d7:9d:82:40:ae:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a82f3936f244edcb6013e121d51a7690d13599
        Validity
            Not Before: Jun 23 07:02:28 2025 GMT
            Not After : Jun 24 07:02:28 2025 GMT
        Subject: CN=60f5fff9b8a0a73a43ef2d8315d8aa740cc36061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:f8:20:9e:cb:cf:00:7f:fe:ee:3e:ab:2d:
                    1d:94:29:3b:fa:ca:8e:03:d1:19:1f:bb:eb:9b:4e:
                    54:04:43:74:57:ce:83:2f:ef:8b:da:4b:ab:2e:2f:
                    68:28:13:f6:bb:c9:d1:c0:be:ba:6b:64:3b:8f:c0:
                    eb:6a:08:ef:c2:15:4a:9f:c1:18:ad:6f:0a:a2:ae:
                    1d:60:56:98:90:27:52:91:aa:a2:f1:e4:42:01:19:
                    95:74:76:63:5d:dc:56:e3:68:7d:1b:15:81:63:ad:
                    eb:cb:65:cb:af:b1:fa:4c:a5:22:03:ab:94:bf:30:
                    6e:ae:24:e6:a1:bb:b4:f9:96:16:2e:8f:5a:f4:34:
                    4d:2c:73:fc:c4:b0:2d:76:a2:58:a1:c5:d3:1b:cb:
                    c9:7f:d7:33:a7:d5:3a:7a:5c:8f:82:21:74:b4:76:
                    f3:65:2b:f8:6a:04:31:c5:b4:73:86:5a:07:c3:30:
                    be:81:d5:70:de:93:60:65:7b:2d:c6:66:22:a9:4e:
                    6d:88:5b:2c:2d:f1:15:67:50:af:1c:c0:d7:86:ca:
                    b6:90:7c:dc:8c:37:55:ae:e2:e5:2e:3f:08:8c:c1:
                    8e:27:32:87:b7:e9:72:36:8a:09:9d:7b:a4:ed:ee:
                    22:0c:b8:b2:64:60:2c:34:5c:4c:2e:de:69:e1:d9:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F5:FF:F9:B8:A0:A7:3A:43:EF:2D:83:15:D8:AA:74:0C:C3:60:61
            X509v3 Authority Key Identifier:
                keyid:C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:e5:0f:0a:3e:33:75:ae:f4:63:69:a0:ff:9d:0c:a2:96:
         b6:96:d6:91:e1:01:44:61:4a:4c:15:ef:3a:fb:2f:0d:83:82:
         29:25:fa:db:ea:4c:ac:b8:a3:df:cd:f6:d8:ca:54:24:fc:f0:
         aa:cb:4c:30:bf:fd:48:c7:ef:76:4e:b6:82:20:2c:0c:35:31:
         b0:3d:b5:97:52:94:2e:8c:15:94:49:ea:4e:61:29:7f:14:00:
         6c:14:7d:80:5c:21:5b:24:f6:68:bc:35:6c:60:7a:99:d2:52:
         ca:4b:b9:af:09:2d:ea:b3:6b:06:82:ba:34:5c:19:32:ef:1d:
         a2:12:c4:d4:28:a8:6d:2d:22:5e:a3:71:ce:b1:63:56:2b:46:
         e4:b9:02:fd:50:c4:54:40:9a:29:76:4c:f0:ea:77:31:d2:f3:
         6d:76:ef:1c:a3:5b:fb:1c:d2:74:6d:4b:86:ce:6b:b6:ec:eb:
         87:91:c7:70:cb:86:0d:a6:e5:7e:9e:fe:98:1e:8f:73:17:88:
         8c:06:6c:89:7d:d5:19:46:39:c2:f6:14:75:ec:89:7b:86:f6:
         d8:f4:3a:45:f7:d0:0b:83:d8:a8:72:12:74:e5:91:08:78:9f:
         b1:6d:54:00:02:bf:7c:a4:20:6b:e6:82:74:17:53:bc:93:17:
         b5:5e:27:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZebmHNVP1Zmd6Ba152CQK7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTgyZjM5MzZmMjQ0ZWRjYjYwMTNlMTIxZDUxYTc2OTBk
MTM1OTkwHhcNMjUwNjIzMDcwMjI4WhcNMjUwNjI0MDcwMjI4WjAzMTEwLwYDVQQD
Eyg2MGY1ZmZmOWI4YTBhNzNhNDNlZjJkODMxNWQ4YWE3NDBjYzM2MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zr4IJ7LzwB//u4+qy0dlCk7+sqO
A9EZH7vrm05UBEN0V86DL++L2kurLi9oKBP2u8nRwL66a2Q7j8DragjvwhVKn8EY
rW8Koq4dYFaYkCdSkaqi8eRCARmVdHZjXdxW42h9GxWBY63ry2XLr7H6TKUiA6uU
vzBuriTmobu0+ZYWLo9a9DRNLHP8xLAtdqJYocXTG8vJf9czp9U6elyPgiF0tHbz
ZSv4agQxxbRzhloHwzC+gdVw3pNgZXstxmYiqU5tiFssLfEVZ1CvHMDXhsq2kHzc
jDdVruLlLj8IjMGOJzKHt+lyNooJnXuk7e4iDLiyZGAsNFxMLt5p4dmSNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD1//m4oKc6Q+8tgxXYqnQMw2BhMB8GA1UdIwQY
MBaAFMWoLzk28kTty2AT4SHVGnaQ0TWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFndk9UYnlSTzNMWUJQaElkVWFkcERSTlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ZjhjZWEtNTRiYS00OTY1LWE0NTQt
MDdhNDQ5YTUwZjA4LzEveGFndk9UYnlSTzNMWUJQaElkVWFkcERSTlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81ZjhjZWEtNTRiYS00OTY1LWE0NTQtMDdhNDQ5YTUwZjA4
LzEveGFndk9UYnlSTzNMWUJQaElkVWFkcERSTlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgc3lDwo+
M3Wu9GNpoP+dDKKWtpbWkeEBRGFKTBXvOvsvDYOCKSX62+pMrLij38322MpUJPzw
qstMML/9SMfvdk62giAsDDUxsD21l1KULowVlEnqTmEpfxQAbBR9gFwhWyT2aLw1
bGB6mdJSyku5rwkt6rNrBoK6NFwZMu8dohLE1CiobS0iXqNxzrFjVitG5LkC/VDE
VECaKXZM8Op3MdLzbXbvHKNb+xzSdG1Lhs5rtuzrh5HHcMuGDablfp7+mB6PcxeI
jAZsiX3VGUY5wvYUdeyJe4b22PQ6RffQC4PYqHISdOWRCHifsW1UAAK/fKQga+aC
dBdTvJMXtV4n9Q==
-----END CERTIFICATE-----