Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File:                     uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier:          j8ESJjvu4AwP5opYfJBFHT6RfGGD4kIUqRQay7iTS+M=
Subject key identifier:   93:05:6C:DF:69:93:09:B7:80:73:FD:F7:23:34:1F:68:1F:95:32:DB
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer:       /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial:       01962F3D8D97F7957D0DC3DC585E5EF151F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number:          1504
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=)
                          2: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=)
                          3: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=)
                          4: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=)
                          5: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=)
                          6: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=)
                          7: ZWty-mG4ns1IWiuKTeqfUnMX6z0.roa (hash: Fdt1PMb3TrWbP6jCMcLY62qFNJsdx5gYRel9cuxCKcY=)
                          8: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=)
                          9: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=)
                          10: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: kXXBb7299CXq5AKAa6ARcPzWKhPDh3o/GVOVl2Uqj6E=)
                          11: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8d:97:f7:95:7d:0d:c3:dc:58:5e:5e:f1:51:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=93056cdf699309b78073fdf723341f681f9532db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:5d:f3:14:63:a3:08:62:cf:af:59:69:37:
                    f6:58:d0:a2:bb:93:2c:17:6c:8b:e0:66:c8:4c:76:
                    b9:d4:b6:a2:2c:6c:1b:66:22:2a:cf:9e:4f:6d:e6:
                    c9:fb:c3:12:8a:1f:c3:50:54:f9:c1:d1:ef:2a:e3:
                    8c:21:35:59:58:81:4f:2e:c7:18:ff:83:b0:69:05:
                    4a:5e:b0:99:d9:b8:00:e4:8e:7e:bf:f0:f0:5c:fa:
                    de:e2:a8:7e:f5:1e:bb:ef:f1:10:c9:dc:91:70:bb:
                    56:64:72:23:0b:f3:d2:e7:13:ba:78:d9:aa:0e:74:
                    65:0d:42:c5:5c:8f:02:05:38:df:8f:0a:84:28:2d:
                    05:db:4c:aa:a7:fd:d4:a0:e2:fb:15:18:82:b6:51:
                    7d:3f:73:a6:ac:3d:2c:52:83:c5:08:ff:36:87:62:
                    bb:af:da:3a:97:b7:25:39:37:8b:3d:ab:e6:7a:b2:
                    52:6d:ae:00:12:14:fe:c9:2f:60:8f:da:95:e0:dd:
                    51:12:70:be:d0:ca:33:16:8e:3a:53:7b:96:2f:9d:
                    02:d6:16:08:17:e7:e4:5d:a1:1f:b1:99:66:c7:e2:
                    26:4f:f4:7c:41:39:cd:06:d4:ab:20:99:67:62:81:
                    70:77:fb:df:97:a5:7a:0f:32:a3:53:40:fc:5c:4f:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:05:6C:DF:69:93:09:B7:80:73:FD:F7:23:34:1F:68:1F:95:32:DB
            X509v3 Authority Key Identifier:
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:11:24:c8:a4:bb:01:04:2b:89:a0:6a:8c:0b:76:33:29:
         c2:a5:75:ad:ab:76:7b:64:ac:00:b1:6a:30:86:bf:88:63:e8:
         14:1e:94:52:21:09:6a:65:93:30:bb:d8:ec:b0:1c:25:58:5d:
         5c:99:56:f0:d7:c4:d1:d8:58:ad:c5:3f:87:6f:3f:f2:13:53:
         6d:69:7c:98:b5:2d:e6:2a:cb:46:b0:46:43:5a:80:a4:b1:10:
         5f:fa:98:e0:4a:84:59:42:db:24:c9:a8:72:b8:ef:e6:21:35:
         49:0c:e4:4a:1b:4f:f9:ba:29:b1:1a:35:33:9a:ad:9a:26:fe:
         91:ac:38:fe:b4:29:d4:bb:69:59:57:a1:25:d6:56:5f:c3:85:
         c0:85:8d:2b:46:dd:a2:e6:06:47:03:b7:84:b9:e1:5b:f4:0b:
         d9:0e:bb:0c:c6:9d:2c:3c:80:fe:7f:ac:6c:9c:a6:72:57:dd:
         93:9d:3b:50:d4:9f:8c:69:a4:0c:5b:39:f6:87:f2:cf:cb:0e:
         fb:b2:b7:a1:ca:3e:61:fa:ca:30:ad:6b:cf:be:1d:ed:ee:a3:
         87:1b:04:c6:73:90:41:c7:72:f9:27:59:5e:29:1e:2e:0f:bb:
         f9:9f:06:59:8b:c3:5d:b2:fc:fc:a4:62:1b:df:55:5a:88:c0:
         d6:16:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----