Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File:                     uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier:          S2xlMz8Pcj0DU1KvE9bEjTyrLE/2V3C5NYoktiV9jNg=
Subject key identifier:   CA:9F:A2:4C:C4:17:4E:24:63:41:3A:67:FD:22:6E:03:9B:43:94:A6
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer:       /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial:       01962ECF71DF7F059F938E58CB4D32DA23C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number:          1231
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
                          2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: DHQ2Ht4AZZiH/OhyRxAkDl2CH+SnOnnp7aaQLkiUAnQ=)
                          3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:71:df:7f:05:9f:93:8e:58:cb:4d:32:da:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=ca9fa24cc4174e2463413a67fd226e039b4394a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:7d:d5:94:41:4b:33:5d:54:71:c0:19:19:
                    7f:ba:a3:01:28:3a:ed:31:c0:cf:c4:33:7a:0b:52:
                    5a:67:c8:b3:51:cd:2b:5d:89:9b:a5:58:42:3f:ff:
                    0f:fe:5d:e5:e8:7d:04:fd:cf:50:86:f3:c2:26:7e:
                    0e:c7:84:95:9d:66:03:9f:e3:66:22:6f:23:df:1a:
                    f6:c6:c3:6b:50:d0:94:7e:ab:1b:0f:e9:ee:6e:41:
                    79:a3:b4:b6:b3:70:fa:b5:26:d2:76:a3:d1:65:9b:
                    66:56:d5:ce:4d:3e:d7:4f:61:4d:5e:bb:1d:7c:fa:
                    28:ba:ed:b6:f5:b6:50:42:06:4e:2a:0f:1e:53:e5:
                    63:03:e1:5d:43:57:24:fe:fe:a8:94:b1:e1:80:59:
                    13:bd:ed:8e:0f:0e:5e:f1:43:37:3e:a4:a1:97:4a:
                    5f:75:d9:1f:b1:bd:7e:2d:5f:9c:88:e7:ab:4f:24:
                    a0:c6:69:fa:c9:9e:99:02:dc:28:24:fe:05:a8:86:
                    6c:0e:3a:cd:77:0f:16:ed:07:5e:99:d6:21:11:a7:
                    5b:d7:d9:d7:84:57:d9:e7:d1:cf:9f:2e:68:12:ef:
                    a1:40:24:32:dd:4f:d2:08:02:f3:49:7f:3f:d8:e5:
                    17:c2:48:1d:55:a8:87:62:47:40:1a:1e:3c:fe:de:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:A2:4C:C4:17:4E:24:63:41:3A:67:FD:22:6E:03:9B:43:94:A6
            X509v3 Authority Key Identifier:
                keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8e:da:80:11:31:f8:31:c1:a8:c9:36:df:b4:0c:56:d4:35:
         94:4a:96:5a:ab:64:95:f7:5c:e3:3c:a7:0e:3b:d5:a3:1d:39:
         1d:85:3d:54:61:8e:d1:38:e9:fc:c4:02:33:fa:ad:11:5f:0a:
         2d:de:d6:ff:ce:8f:51:d6:59:f2:2d:2c:6b:ca:07:e6:63:26:
         90:09:e8:78:9f:2b:f3:ed:d3:d6:26:60:0e:d7:10:d1:36:0f:
         ef:b8:18:c1:30:0e:af:63:3c:5d:27:98:26:ef:31:3a:33:2c:
         64:12:de:c3:87:77:23:23:30:b8:28:2f:88:72:83:79:35:f0:
         5d:83:13:c5:f3:a8:1a:ae:86:f3:6f:7f:83:a7:49:8f:bd:76:
         b3:a1:b7:cf:02:03:8b:d8:c9:1e:ad:17:a9:fc:ed:b2:90:96:
         47:36:f3:60:29:8c:b7:22:e0:59:8d:15:b7:02:d7:1f:33:37:
         90:6b:1c:2e:88:63:31:7e:73:76:a0:e8:b0:12:ef:ae:fe:84:
         84:8d:8a:90:78:98:82:91:3a:c4:1d:13:aa:b0:9c:83:81:c6:
         84:7d:82:b2:42:11:b7:9a:f3:fe:87:4c:50:d1:3b:30:aa:76:
         51:8c:eb:5a:8a:a4:bf:d8:79:cf:95:23:5c:56:ce:c4:27:8b:
         58:68:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----