Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File:                     UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier:          OJOMETcgMkKnFDJrvmCx/Pqm2GN40Hs3Z7FwQmvVZ2Q=
Subject key identifier:   74:A2:CE:A8:89:2D:FA:36:27:CC:44:5E:6C:C3:11:DF:25:AB:14:E7
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer:       /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial:       01962DF42BF304884832CC4D47FF22B326FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number:          14BC
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
                          2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: tMss9vFCSBoTHGp6xOc0xdIdXSPzGOUyNXrExI+ikk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:f3:04:88:48:32:cc:4d:47:ff:22:b3:26:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=74a2cea8892dfa3627cc445e6cc311df25ab14e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:bb:14:b2:d7:54:5f:8a:27:65:f4:3c:03:
                    8c:cf:97:a2:da:78:9e:d8:a3:0d:e5:8f:b4:39:3c:
                    63:54:41:3e:cd:ba:ee:0a:96:c1:5b:bf:ab:ba:09:
                    a6:21:72:cc:9f:d4:53:62:37:ed:a8:1d:b6:d3:77:
                    8b:3e:38:65:d9:d6:12:e4:b9:96:97:3e:41:78:87:
                    2e:6b:03:2e:f6:c2:1f:79:26:21:f0:ff:25:21:ec:
                    14:bc:02:63:ce:28:fb:7d:5a:b1:91:84:ee:64:20:
                    21:2c:a4:da:ed:87:3f:7e:bf:12:3e:e1:be:c3:ba:
                    39:05:a7:bf:49:b8:f2:06:d5:91:d7:3b:7a:03:10:
                    0f:60:9a:15:a5:f9:10:16:fe:c6:d3:36:ca:4d:d1:
                    8d:13:a6:1d:10:e8:45:64:4d:72:2f:3d:88:95:e0:
                    3a:da:a1:33:df:43:c0:0e:07:14:63:22:cf:09:10:
                    5f:41:fc:dc:02:fe:58:d5:02:8e:6e:29:76:a2:1f:
                    ca:da:a3:92:31:a3:56:5a:80:f4:97:bc:15:48:a9:
                    0e:4b:fa:dc:0c:4b:2a:5c:6c:ef:1a:03:df:14:a1:
                    cf:98:d2:8a:cc:ed:32:00:44:86:e4:e9:78:98:13:
                    9a:42:bf:a6:da:62:f1:dd:7c:aa:4a:36:69:85:f5:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A2:CE:A8:89:2D:FA:36:27:CC:44:5E:6C:C3:11:DF:25:AB:14:E7
            X509v3 Authority Key Identifier:
                keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ea:cd:1e:74:0b:9a:d6:88:1a:9b:61:60:25:43:30:de:b3:
         05:16:fb:79:df:9a:e4:68:c5:55:10:f6:9c:3c:b8:3d:42:da:
         95:c6:b3:79:e5:38:14:93:e5:d6:02:18:20:33:51:de:62:dd:
         4a:c4:39:95:a8:cc:50:5e:65:67:4b:ef:2c:d8:00:92:42:78:
         43:53:ad:56:16:25:9a:ae:84:46:bc:70:eb:78:ba:ee:15:f3:
         d1:3e:8c:57:e0:2c:d5:2d:05:77:03:dc:06:6f:08:a8:b2:3c:
         53:16:99:75:2f:97:ae:34:c4:22:0e:4a:3a:96:48:f7:ae:26:
         4b:ef:b7:45:a4:2c:c1:60:36:89:ac:e9:af:8a:86:10:49:1a:
         e6:f5:dc:96:6b:5e:cb:ec:ac:03:ed:a5:4a:22:72:ea:c4:e5:
         43:c2:39:b4:0e:a9:d2:43:31:78:26:44:e7:55:66:bc:f2:c3:
         8b:79:6e:62:3b:ea:c2:06:cf:74:c8:c9:f5:94:a6:c8:a8:b3:
         f7:c8:aa:56:bf:63:10:91:d8:6b:7e:38:43:ef:29:8e:cc:01:
         1c:f0:d7:c5:73:2a:cc:92:5d:e8:ee:c7:c0:8a:b0:78:03:d2:
         27:cc:d7:8c:3e:23:56:9f:a7:7a:54:87:58:79:1f:e0:f4:8a:
         e2:0c:cc:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CvzBIhIMsxNR/8isyb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw
MTY1YWEwHhcNMjUwNDEzMDcwMTM4WhcNMjUwNDE0MDcwMTM4WjAzMTEwLwYDVQQD
Eyg3NGEyY2VhODg5MmRmYTM2MjdjYzQ0NWU2Y2MzMTFkZjI1YWIxNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0q7FLLXVF+KJ2X0PAOMz5ei2nie
2KMN5Y+0OTxjVEE+zbruCpbBW7+rugmmIXLMn9RTYjftqB2203eLPjhl2dYS5LmW
lz5BeIcuawMu9sIfeSYh8P8lIewUvAJjzij7fVqxkYTuZCAhLKTa7Yc/fr8SPuG+
w7o5Bae/SbjyBtWR1zt6AxAPYJoVpfkQFv7G0zbKTdGNE6YdEOhFZE1yLz2IleA6
2qEz30PADgcUYyLPCRBfQfzcAv5Y1QKObil2oh/K2qOSMaNWWoD0l7wVSKkOS/rc
DEsqXGzvGgPfFKHPmNKKzO0yAESG5Ol4mBOaQr+m2mLx3XyqSjZphfWm1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSizqiJLfo2J8xEXmzDEd8lqxTnMB8GA1UdIwQY
MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt
MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5
LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYerNHnQL
mtaIGpthYCVDMN6zBRb7ed+a5GjFVRD2nDy4PULalcazeeU4FJPl1gIYIDNR3mLd
SsQ5lajMUF5lZ0vvLNgAkkJ4Q1OtVhYlmq6ERrxw63i67hXz0T6MV+As1S0FdwPc
Bm8IqLI8UxaZdS+XrjTEIg5KOpZI964mS++3RaQswWA2iazpr4qGEEka5vXclmte
y+ysA+2lSiJy6sTlQ8I5tA6p0kMxeCZE51VmvPLDi3luYjvqwgbPdMjJ9ZSmyKiz
98iqVr9jEJHYa344Q+8pjswBHPDXxXMqzJJd6O7HwIqweAPSJ8zXjD4jVp+nelSH
WHkf4PSK4gzMsw==
-----END CERTIFICATE-----