Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File:                     UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier:          OhQfWu362732HDuLdBXJUlNhkhjvnsdJu0DAUZ3bQ8w=
Subject key identifier:   58:32:26:D9:AF:59:C3:F9:26:BA:50:2D:A1:1E:5C:37:03:BD:83:5C
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer:       /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial:       01962DF3B5040C0C00B32832E05947DDBB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number:          03BA
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=)
                          2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: aMvD4MRTS13RPyQ1xE3Vsr/0duddB4l4zDgqlNkfDq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b5:04:0c:0c:00:b3:28:32:e0:59:47:dd:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=583226d9af59c3f926ba502da11e5c3703bd835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8c:93:ce:00:f2:63:87:ba:50:ab:91:0e:87:
                    d3:60:6e:a3:13:45:2a:20:c8:34:4c:35:ac:f9:6a:
                    bb:0f:ca:71:74:96:30:51:02:af:29:10:64:e0:92:
                    7d:25:b8:dc:fa:2f:fc:33:4e:c7:7b:a6:bd:1a:cf:
                    71:2f:7e:f3:e6:00:db:d8:85:92:ae:45:e2:72:99:
                    61:a8:2c:70:ff:21:cb:3e:66:58:1d:c1:fd:aa:4d:
                    8c:c4:20:35:78:ad:ca:52:42:f0:fb:e9:73:cb:dd:
                    9f:13:9f:00:fb:54:d4:d8:50:18:38:ac:7d:ab:3b:
                    54:f2:a3:40:89:a1:91:66:c9:59:e2:ae:61:a2:af:
                    87:60:c4:71:9d:a2:3b:14:5c:83:29:aa:a4:ed:c5:
                    21:6b:ed:f5:7e:20:3d:ba:c6:e8:fa:54:d1:7f:ea:
                    47:43:dc:f5:9f:57:40:2a:c9:76:d4:b7:5e:5d:e0:
                    51:4d:e1:c8:ba:92:e1:bc:48:bb:ae:03:d7:4d:98:
                    0e:f4:a2:cd:3e:c4:69:18:1e:75:62:54:c3:1d:9f:
                    1b:d8:fb:c2:93:47:33:18:9e:4a:d5:89:a4:c8:54:
                    4e:58:34:76:8b:8b:03:db:de:8d:de:5c:a3:65:a6:
                    8b:69:89:b9:0a:9a:05:9c:ab:ab:28:38:ad:35:78:
                    de:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:26:D9:AF:59:C3:F9:26:BA:50:2D:A1:1E:5C:37:03:BD:83:5C
            X509v3 Authority Key Identifier:
                keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:63:6c:59:df:5f:e6:ad:92:4f:58:5f:3d:2e:69:14:44:
         f6:4e:8e:44:6f:0b:ef:1d:19:8f:69:58:5a:3f:64:68:5d:f7:
         60:da:15:48:a8:66:7d:3b:f1:4a:fe:e1:bf:8f:ec:a5:7d:31:
         ed:66:1c:16:43:e7:77:e7:2e:6f:fc:fb:e1:03:1d:c0:e6:fa:
         d8:ae:2b:77:9b:d4:91:e7:71:61:cd:b7:86:d2:7d:b0:44:fe:
         a2:05:8d:17:fb:59:43:19:7f:2d:69:85:e2:53:6b:e2:a9:c2:
         a6:e2:b4:59:65:4a:48:16:b1:76:54:60:08:a4:7f:72:ea:6e:
         d5:c2:30:ef:98:f4:db:c1:cf:fb:f6:d6:26:95:c1:d0:5d:20:
         06:02:3a:67:15:fd:1b:9a:8b:fb:dc:29:7b:aa:8f:56:2d:38:
         9a:b6:da:72:06:a4:a4:8f:03:df:99:7c:dc:66:59:ef:56:4f:
         5e:c5:48:e9:3d:e7:b3:11:c3:aa:43:54:d5:12:6e:2e:19:45:
         be:f1:7a:bc:ca:b9:e9:46:fe:ea:31:52:64:18:3b:4c:73:a1:
         79:86:51:cb:a5:2b:a6:ed:2f:25:4c:c3:e0:6e:95:8f:76:b7:
         07:62:bb:02:ee:46:74:3f:3c:3f:9f:5b:b7:c4:49:8e:19:dd:
         aa:c5:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----