Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
File:                     UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json)
Hash identifier:          gZGE6T7YNhhhSoR8naf1bE3MoYm4WrjjvpvaZ3nbhPc=
Subject key identifier:   15:29:F2:BE:AA:9A:97:BD:A7:67:38:56:63:41:CE:FC:BE:6B:4D:75
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Certificate issuer:       /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial:       01962DF3EE7F31F8780F8D182EE7F761CC6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
Manifest number:          13A3
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=)
                          2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=)
                          3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=)
                          4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=)
                          5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=)
                          6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=)
                          7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: Az/0sLhziLqumW/c6pHKfCxpxf9gYFlBBVscY9yY5OY=)
                          8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=)
                          9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=)
                          10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=)
                          11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=)
                          12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ee:7f:31:f8:78:0f:8d:18:2e:e7:f7:61:cc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=1529f2beaa9a97bda76738566341cefcbe6b4d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:15:c0:26:5b:ca:ef:aa:ad:99:6d:23:56:
                    61:41:54:07:b5:97:bf:8f:60:a2:c8:52:af:c7:99:
                    4f:4c:87:91:67:34:41:9f:f0:77:e1:85:ef:82:3e:
                    29:35:ef:c1:5f:53:8a:ff:bd:94:5b:4b:50:ee:a2:
                    cb:99:2f:70:19:5b:3f:05:92:b4:b9:9b:49:8b:c6:
                    9b:af:c6:71:8e:e3:66:fd:14:b8:e8:7f:47:ca:9e:
                    1c:17:e3:70:b4:2a:d3:f3:3e:a2:53:f7:05:32:a6:
                    98:cf:3b:7d:01:18:dd:9e:52:02:43:1e:e9:81:8b:
                    48:de:43:e2:2d:57:e9:81:0d:b1:f0:a8:08:75:e7:
                    c4:62:dc:1a:de:2b:3e:70:0a:b1:5f:7f:ff:b5:96:
                    f7:21:50:3e:32:c9:a3:66:ec:3f:36:ed:d7:92:2c:
                    b0:78:82:56:a1:4d:59:f8:a5:2f:64:0b:b8:76:5b:
                    7f:53:a9:14:65:91:0e:c0:b5:3c:56:01:b4:99:be:
                    ef:cf:81:cc:f3:65:b4:a3:ec:18:5d:f7:7b:f1:9b:
                    95:a7:f7:b7:06:0e:89:2a:58:f2:5b:01:6b:21:bc:
                    ee:1f:c5:e7:0d:e8:cd:da:4e:74:f1:ce:0e:1f:df:
                    7c:8a:c2:1a:4a:c3:be:af:45:2d:bf:77:ec:d5:4f:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:29:F2:BE:AA:9A:97:BD:A7:67:38:56:63:41:CE:FC:BE:6B:4D:75
            X509v3 Authority Key Identifier:
                keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:93:69:4e:c2:70:0f:87:78:69:4e:be:26:b4:64:ba:8f:
         e0:55:b1:f7:63:7a:12:39:ab:34:f6:b1:16:55:d8:b1:d6:aa:
         2f:6f:1f:33:7f:40:d1:4c:53:7d:28:14:13:99:c8:3d:f9:35:
         57:bf:4a:44:10:a3:d5:f6:20:4e:e6:26:05:06:df:02:49:88:
         54:8e:e8:82:9a:8c:61:e1:62:d1:11:7e:fa:65:e6:da:a8:d4:
         cc:e5:be:ef:50:b8:d5:e1:f9:79:29:43:d7:be:b2:ea:86:a0:
         6f:0f:8e:91:fa:ff:76:0d:48:5a:e1:f2:6b:54:dc:b6:eb:f8:
         84:86:5d:87:3d:5c:20:33:16:48:54:a1:92:98:23:92:c4:ae:
         5b:52:02:26:9d:46:ad:fb:28:ba:48:5d:c5:a0:93:91:cd:96:
         1e:fd:87:bc:e1:a4:33:ae:a8:4f:19:94:37:18:67:29:8e:cb:
         6e:04:39:21:d5:ac:29:b0:db:81:e9:3d:e2:da:f8:79:31:45:
         b3:4d:05:29:50:99:c0:77:41:93:01:36:bd:cf:d0:2d:78:a5:
         65:8d:80:32:d1:d9:ec:89:8d:74:b5:5a:26:bf:8a:9f:ef:9b:
         c8:4e:91:6d:bb:f6:e6:44:99:e5:d2:7c:42:fa:9b:70:2c:6f:
         66:da:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----