Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File:                     UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier:          XvHUv0wTK4BxfrtlfxDTu+obNITR0A64KzOy2j297v8=
Subject key identifier:   9F:6D:4A:09:71:F6:FD:88:4D:71:4F:23:58:67:10:2C:6E:B9:2F:92
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer:       /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial:       01962ECF8F9CD75319301B0580AEAA824C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: MtwVjtWHtlIOm6tSxJtr7jEIbwFaEQ/POgSQbH8DCHk=)
                          2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:9c:d7:53:19:30:1b:05:80:ae:aa:82:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=9f6d4a0971f6fd884d714f235867102c6eb92f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a3:47:06:eb:1c:13:e1:d0:92:d9:5e:89:16:
                    b9:69:10:28:1e:84:d0:62:7f:a7:ab:b3:54:fb:d9:
                    8c:e5:ea:f4:0d:7b:98:e7:70:4f:fb:a3:b4:b8:69:
                    55:87:20:21:28:51:f2:dc:6c:a6:52:2b:82:15:2e:
                    62:b7:f5:aa:1e:19:02:14:9a:a8:88:bb:81:da:51:
                    56:55:2a:0c:6f:a5:cd:5d:33:b8:00:44:42:95:2e:
                    c2:1d:2b:f6:ef:97:76:03:40:72:ba:4f:78:3d:22:
                    c5:5f:dd:7e:52:55:38:36:f9:6d:e1:6f:dd:ba:d0:
                    e4:6e:39:5a:62:15:83:6a:4b:32:0a:31:89:5c:ad:
                    c1:56:1e:96:b2:41:17:2c:7d:84:3b:31:f0:97:fc:
                    09:e9:9a:23:e5:47:ac:3a:ba:41:30:32:6e:a6:e6:
                    90:c8:c9:77:de:7b:41:86:85:eb:f9:9d:76:c7:14:
                    ec:04:6d:12:4b:39:b8:83:4d:13:c0:63:63:a0:95:
                    1b:1f:82:4c:35:69:a3:fa:cd:17:43:73:36:f7:c6:
                    e0:6f:6f:cf:32:b8:d5:d4:e7:2c:5b:76:f1:d5:72:
                    31:92:fe:f5:e6:61:ff:7a:66:42:62:59:d9:b8:27:
                    c5:e5:ff:2d:b2:4c:50:79:40:83:ba:7f:58:8b:00:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:4A:09:71:F6:FD:88:4D:71:4F:23:58:67:10:2C:6E:B9:2F:92
            X509v3 Authority Key Identifier:
                keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:59:ba:20:1f:cb:f0:32:7d:de:6c:53:f0:cc:91:79:1a:8e:
         a2:a8:28:6d:eb:0e:4c:a5:d0:1c:1e:e4:3b:db:87:a5:ae:49:
         22:47:07:8f:7f:23:cb:e9:7e:49:87:4d:da:21:82:ce:2c:94:
         8b:f1:17:55:ea:6a:d3:c7:e5:a3:fd:7d:1f:01:a9:c6:63:26:
         78:58:4f:59:b4:1f:62:bf:1f:ef:1b:00:12:07:b9:7c:b4:11:
         ff:f4:c6:8e:e5:c6:88:a2:9f:ec:5f:e0:0d:eb:49:ff:53:ca:
         2a:84:40:0a:20:31:af:06:e8:cb:dd:f1:0e:85:be:c7:8d:eb:
         99:80:7f:a8:8b:ff:8a:3e:0c:04:c5:fe:80:2f:e8:73:e5:0b:
         3f:a5:7a:fb:5b:c7:ba:a4:63:93:ec:91:12:90:9f:ea:a4:cb:
         be:19:b7:c2:16:9e:eb:aa:96:80:8d:33:4f:f9:97:9f:8b:ca:
         a2:4e:6d:d5:73:49:d9:e3:dc:24:36:f6:c5:0d:f9:b2:ad:fa:
         37:8a:06:9e:ae:41:5a:c7:c6:41:18:4d:68:75:b4:78:1c:d9:
         81:e6:28:ee:55:2d:d9:2c:47:59:18:5f:f8:78:00:b9:3e:dd:
         75:3a:e6:1c:58:67:88:e9:d9:c4:3f:f9:89:26:cd:8d:60:9b:
         5b:2e:bd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----