Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File:                     UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier:          3639l74pdjkZe/R95hj4XdC9IleVSZDXJcSa+p6CXpw=
Subject key identifier:   06:E1:5E:80:DD:E9:D6:E4:AC:85:49:F1:17:8F:B0:DD:D7:C7:32:4D
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer:       /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial:       01962F7463A7E251AFDE0309ECB7941249BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number:          11CE
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: WKkagJdI1h1nvQbiNudW1eDEBbN3LIJMgWk0uxYiK8c=)
                          2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:63:a7:e2:51:af:de:03:09:ec:b7:94:12:49:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=06e15e80dde9d6e4ac8549f1178fb0ddd7c7324d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:19:86:4e:36:03:37:20:96:ea:0e:a1:1c:
                    49:3c:8c:12:06:bf:f3:c4:2d:9e:df:f3:92:ed:d3:
                    f2:9e:f7:9d:ab:c3:6a:d5:f7:5b:7a:03:a2:33:1a:
                    ab:4e:1d:de:00:30:8e:02:90:ac:ad:dc:92:11:a6:
                    f6:f2:94:5e:2a:9d:73:5d:f3:4e:a6:dd:c8:c1:c9:
                    bb:d8:96:11:e9:d4:fb:73:3b:df:36:2b:ce:6a:eb:
                    a1:21:d8:b3:c7:9e:87:8c:04:a7:c4:8f:76:96:ad:
                    f0:61:00:c4:f6:59:bf:ad:25:08:b1:e2:99:fd:27:
                    22:dc:21:a3:25:dc:7f:ee:e7:83:f3:e1:fc:8b:f1:
                    1c:b1:e3:b1:f9:cc:36:34:60:ab:61:64:d8:6a:ee:
                    6a:76:07:a1:f4:61:fa:11:08:88:0a:7c:d9:65:ed:
                    35:f1:94:55:da:de:ae:b5:47:b0:32:20:a6:bc:4d:
                    9c:73:01:e4:5c:45:d7:0f:7d:8e:84:26:e8:e6:e0:
                    75:7a:22:42:5d:0d:81:8a:46:25:38:f8:19:7c:3d:
                    62:cb:a3:74:a6:08:8b:c1:ac:c2:f7:51:2e:0c:78:
                    ce:1e:0e:27:ce:40:13:3b:73:da:51:40:61:52:14:
                    01:27:6e:b6:5c:2f:aa:c5:b9:d3:ec:1b:2d:80:11:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E1:5E:80:DD:E9:D6:E4:AC:85:49:F1:17:8F:B0:DD:D7:C7:32:4D
            X509v3 Authority Key Identifier:
                keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:91:f6:3f:ab:61:ba:0d:84:76:47:14:ca:fa:56:5e:fc:
         4d:b8:7d:fe:a7:be:0c:ff:6c:42:d5:94:55:c5:1d:7c:15:f1:
         62:79:ca:ac:bf:1a:11:5d:06:94:cf:6f:ed:06:5a:d0:14:10:
         69:0c:dc:f1:f7:5c:ab:9a:35:0d:b8:35:3d:b8:14:02:a1:81:
         af:d0:a8:3d:c8:ed:49:c7:9e:dd:95:d7:64:aa:27:89:e7:d8:
         8b:9f:c7:74:af:b2:1d:02:39:18:0b:44:47:1a:f5:1a:7c:a7:
         da:75:d4:4d:eb:5e:cd:5d:b1:49:cb:61:1a:fc:fa:30:80:a1:
         96:17:27:b7:53:eb:d8:6c:d9:76:f0:09:96:68:46:10:07:65:
         bf:67:4e:63:6f:b8:35:f7:92:e7:fd:dd:b3:d1:fc:25:2d:f9:
         4e:72:83:a2:f6:39:2e:f4:9a:4b:24:7d:9f:7b:4d:80:fe:97:
         44:9c:fd:9b:94:8c:12:69:b9:31:59:3a:4b:a2:45:2d:89:9b:
         32:d3:73:38:18:1b:89:c5:34:a6:38:7f:03:ee:2b:66:05:ee:
         4b:32:ab:48:04:a8:2e:19:66:9c:2a:0b:3b:b3:a5:e9:aa:cb:
         93:fb:e8:6d:da:5b:3d:25:93:87:f0:a1:4f:e3:39:ad:10:1d:
         1d:03:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----