Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File:                     uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier:          eY8o9kGiDNLfMbpJPvV3VifRKJPLH61CMm5jbROEu6c=
Subject key identifier:   79:53:CC:79:7C:49:C5:FD:2B:BA:04:C5:D5:4B:78:EB:03:CD:45:63
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       01962F073ED62F292A13C44108F5ACE2782F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
                          2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: 7Ygxlxkj5BeIlgL+78BsmDwCnH8S3jjPU3jbvzcZbKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3e:d6:2f:29:2a:13:c4:41:08:f5:ac:e2:78:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=7953cc797c49c5fd2bba04c5d54b78eb03cd4563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:d6:be:3f:80:1d:c3:60:c6:78:ea:95:fe:
                    b4:48:07:91:81:e7:3e:26:3e:9e:6c:0d:b5:84:10:
                    52:c8:a6:e5:76:b9:7c:23:98:f5:97:16:99:69:b5:
                    74:c0:e0:c7:1c:d8:40:44:c6:0b:80:a9:dc:4f:20:
                    7e:10:0f:c7:6f:a8:77:09:4d:50:0c:53:06:4f:7b:
                    a9:36:2d:6b:81:de:51:4c:f0:c9:fc:29:d0:ea:6f:
                    cb:e9:c2:5b:15:17:56:a0:22:27:17:85:35:c5:00:
                    3d:71:59:ff:e1:07:9d:24:38:b7:d4:33:85:81:c8:
                    f9:ce:f3:ad:2d:b4:e3:ed:57:7d:0c:c5:f9:1b:f1:
                    ba:3c:95:b6:d2:3f:82:f0:75:ad:27:7b:93:10:1d:
                    cb:83:71:ac:19:53:d9:9a:25:0f:e7:da:34:56:76:
                    07:ea:d5:66:8a:da:61:24:8d:65:db:8c:06:9d:db:
                    d1:21:02:3e:cc:e5:2f:54:02:1a:39:4f:5e:09:46:
                    8e:39:15:a9:a1:11:43:dc:af:cb:a1:7d:82:7d:fd:
                    50:f0:b7:bd:7b:71:2f:e0:00:af:17:cb:d6:a2:14:
                    3b:83:33:89:bf:92:93:f3:f3:0c:f2:7a:41:33:f8:
                    7f:6b:00:8b:12:43:c2:69:af:48:77:f0:47:85:9b:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:53:CC:79:7C:49:C5:FD:2B:BA:04:C5:D5:4B:78:EB:03:CD:45:63
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:a9:29:00:e6:55:76:b1:b3:63:ed:c5:ea:fa:bf:30:75:
         fc:57:d1:97:67:e4:6c:98:4e:48:90:ff:40:6e:d6:5c:80:bb:
         df:a4:c2:db:94:12:f0:8d:aa:98:95:c4:03:08:c5:54:ba:40:
         13:ac:a9:ae:80:39:ba:bc:fe:e5:c0:42:fe:db:ee:14:d9:6c:
         dc:b9:f1:fc:62:ff:cc:5f:e6:4f:52:84:35:7d:25:97:bd:27:
         45:de:4b:20:01:af:54:91:b8:15:05:7d:cf:cd:6d:25:2f:6e:
         1a:0d:1f:c0:d9:87:7c:d9:6a:80:26:6e:3f:92:f9:5b:ea:69:
         1e:f3:bf:38:0f:b9:29:3c:0d:bd:74:e1:d6:df:1c:09:96:91:
         8d:42:6b:b8:71:99:e3:19:9e:6f:b5:62:11:bc:c1:c3:24:94:
         14:e1:94:86:32:52:3e:1b:b8:49:95:7a:58:06:26:70:68:10:
         3c:fd:e0:9a:5b:07:4f:c2:8a:0b:ec:51:73:32:d7:18:5f:dc:
         1f:68:c5:a0:88:d0:9c:6d:99:b7:73:f3:1a:b5:5c:f0:20:17:
         93:90:01:76:76:38:7b:d3:24:7b:2d:19:03:51:b7:2a:ae:35:
         c7:0c:e6:46:fc:40:2a:49:c2:f0:6b:9c:29:d2:cc:6b:03:f4:
         53:a1:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----