Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
File:                     UFzWGp9t6drMDTySFwbffVCvvW8.mft (raw, json)
Hash identifier:          oEXWgBREpcoyRD2RcDetylNMVMZ3zdQPNzlpjeDSLJM=
Subject key identifier:   26:1C:0A:8A:CC:D0:0D:F0:94:A8:E4:B6:9C:B4:33:02:C9:BC:D0:A9
Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
Certificate issuer:       /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Certificate serial:       01962F3D669C544A4C9B8D803552F7B5BD58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
Manifest number:          0B3E
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 02fZd277xqKcuTMYmhFfbwx9HwA.roa (hash: bemKy7xu5/Ii5zazW11+IHavu8JMVH9QIzpKn7l6Pf4=)
                          2: UFzWGp9t6drMDTySFwbffVCvvW8.crl (hash: FEJV2OpUdjZXFoMA3CcFrN0foUjJYx3Vl95rx6I3mTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:66:9c:54:4a:4c:9b:8d:80:35:52:f7:b5:bd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=261c0a8accd00df094a8e4b69cb43302c9bcd0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:78:1a:f0:bf:59:94:db:0e:e4:7a:9c:30:
                    24:35:f7:ce:d7:7f:d4:38:15:9a:38:a0:8e:98:e6:
                    3a:a4:a2:99:0f:8f:5f:73:70:de:9c:4c:4f:14:9a:
                    95:9f:aa:76:13:1b:f5:c0:9b:17:ca:54:19:d1:f1:
                    6c:a5:c9:ae:10:2b:54:06:54:89:26:1a:2d:6c:f3:
                    1a:6b:ed:ca:08:1d:4b:dc:29:e6:56:e2:64:07:bb:
                    09:03:d5:f3:77:00:ab:00:69:7d:ba:32:61:fb:74:
                    01:47:f6:69:2e:cb:fe:f4:21:86:cd:4a:a5:a2:61:
                    00:1c:36:93:0b:aa:8b:4d:42:28:98:15:69:fa:04:
                    08:79:20:f2:88:45:bd:fe:30:ea:d4:21:18:c7:84:
                    f6:f3:ed:3d:59:77:ef:7a:d5:48:b7:e7:c0:fb:91:
                    17:88:dc:6a:2b:a4:cd:de:ab:8d:1e:0f:e4:03:b4:
                    e1:e7:f8:74:19:dd:39:48:27:bd:c9:d0:4e:90:cd:
                    e0:58:59:b8:5e:22:58:d4:6b:7f:7c:c0:5d:85:0c:
                    f9:fd:74:c7:1e:e4:52:f3:1e:a1:31:93:e9:57:61:
                    76:be:16:80:5b:ee:0f:73:94:5c:63:4b:78:72:16:
                    41:aa:c9:6c:58:e0:eb:73:3d:1f:35:12:56:aa:16:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1C:0A:8A:CC:D0:0D:F0:94:A8:E4:B6:9C:B4:33:02:C9:BC:D0:A9
            X509v3 Authority Key Identifier:
                keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:1e:5d:0a:e3:19:1f:f0:b8:69:09:ef:d0:25:33:e9:d4:
         80:1a:ea:0d:e4:6f:02:6b:e2:06:cf:ab:7a:6b:24:17:5f:b2:
         25:0b:13:af:8c:1d:6f:f2:60:a5:db:68:f4:aa:9c:7a:cf:8b:
         d6:92:c3:b8:c6:62:e9:67:bd:d5:ba:f3:00:56:bc:f6:6c:e8:
         96:cc:04:a1:17:5d:65:f4:a8:1b:ec:39:97:15:50:48:98:0e:
         d8:3d:7c:0d:04:bc:a8:7e:80:14:3b:f8:86:a9:25:2a:d3:e6:
         9c:6b:5d:f0:cc:db:30:6f:1d:fd:a1:9e:c6:42:96:30:a7:90:
         a4:90:d9:2e:fa:35:32:06:09:57:93:f3:ee:ab:ce:dd:dc:8b:
         14:c2:53:91:30:0d:4d:cb:f6:fb:1a:ba:84:98:f2:64:35:38:
         1f:0d:69:cf:2b:60:34:20:a4:62:fa:39:92:40:14:08:11:8b:
         c1:36:1b:ce:8d:5b:73:80:b5:9c:f0:99:cf:a2:82:2e:92:23:
         37:6a:1f:73:de:c7:ce:08:7f:9a:20:5b:ac:45:2d:17:4c:2a:
         4d:3a:e5:a8:01:70:31:9b:36:85:d8:89:85:34:4c:9b:3b:ce:
         41:d0:25:72:e5:8b:b2:f6:23:e3:f1:7c:93:8a:87:5f:fa:83:
         fa:b3:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----