Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File:                     UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier:          /V54BsPxoAkf73H89kciWscBQwPFwt9igkCtyqGrYjo=
Subject key identifier:   8D:A3:F3:C7:28:AE:61:1D:D6:0E:A2:00:79:AF:6C:A0:58:17:D0:51
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer:       /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial:       01962FAB49B5034F58B4B505B69E74AFB965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number:          090C
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: hMgxzljyw8UpQwQN9We3+Wm+jD7JVwxJgiMQcDLAA7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:b5:03:4f:58:b4:b5:05:b6:9e:74:af:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=8da3f3c728ae611dd60ea20079af6ca05817d051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:fc:67:a4:a4:87:b4:3f:e8:36:26:6f:28:
                    84:c3:1b:6a:e9:81:eb:aa:77:e2:d0:9d:e9:f8:74:
                    b4:6a:2c:5c:b2:bd:86:4e:fd:b2:07:e1:24:9e:2b:
                    9e:ca:d8:1f:c1:5e:4c:56:46:04:55:72:b6:32:11:
                    c3:d4:8f:d2:19:8a:0d:28:ff:7a:d0:6d:2e:a7:0c:
                    29:f3:ee:24:45:fe:77:c1:56:95:6d:62:5f:50:01:
                    ff:bf:30:a9:41:6e:19:ab:66:d5:8d:da:27:17:59:
                    c9:e7:30:36:7c:97:a4:13:ca:ab:ac:0e:d0:c1:c2:
                    ba:55:1e:7e:16:9e:f4:30:8d:6b:2c:19:76:70:14:
                    2d:db:a1:8b:af:f9:d6:b2:5e:e0:78:79:f1:c0:33:
                    ad:c8:29:59:1d:16:03:34:6c:a7:b1:d5:e8:85:00:
                    a8:67:ec:58:d0:b4:e4:22:37:c9:3d:68:cc:f7:9d:
                    67:62:82:eb:14:f6:74:45:d8:e1:20:bb:5b:91:24:
                    b2:86:1d:41:db:fd:0d:e1:c5:52:59:6e:06:ae:fb:
                    69:19:62:89:3a:34:38:f0:5b:e1:ae:08:a8:a6:a3:
                    02:09:26:09:98:db:af:49:34:7b:2b:5f:c8:86:e8:
                    74:28:ae:c4:fb:0a:db:a5:9d:00:8d:cd:fc:12:39:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A3:F3:C7:28:AE:61:1D:D6:0E:A2:00:79:AF:6C:A0:58:17:D0:51
            X509v3 Authority Key Identifier:
                keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:7a:d4:53:12:94:bc:fa:ee:8a:82:d6:2d:4f:84:47:54:
         69:69:6f:d0:6f:fb:6f:ff:80:a8:f6:36:be:3e:61:a2:ea:2a:
         b0:3c:51:84:29:93:3a:c4:04:77:d7:b0:d5:bb:c2:c5:5d:34:
         67:a9:77:87:39:d8:b3:57:f5:97:20:f4:57:a6:30:5b:c8:cd:
         b1:e9:53:08:27:38:49:e3:ba:1c:87:5e:e3:13:a9:6e:39:30:
         18:6a:c0:a3:bd:64:a8:ff:b7:64:04:14:5d:d3:ff:2a:ff:a4:
         bd:f3:0f:32:bd:6d:2c:7c:25:5b:0b:d0:ed:d9:2f:37:f1:42:
         6b:c7:6a:a3:b9:bc:72:db:ff:88:0d:9d:df:27:f0:8f:89:0b:
         67:8d:2a:22:02:4d:0e:34:fc:26:5a:b9:6d:6c:70:16:5c:60:
         fa:bf:c8:da:b3:b7:2a:45:85:c6:75:f6:1b:7c:b5:86:f9:04:
         88:ee:57:bc:db:e5:e8:16:5f:06:81:6d:ac:96:72:e0:bc:71:
         32:91:15:a4:4b:31:66:30:61:6f:b3:be:4e:45:a2:70:76:46:
         d5:58:34:1d:ac:14:4a:0b:67:ae:15:73:a3:a2:a5:c6:f8:d2:
         6c:22:e1:4a:8a:66:ad:28:f2:19:82:4a:11:a7:83:cd:ca:03:
         88:d6:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----