Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File:                     UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier:          IgCCj7lmLQNg7sl2kgx6TEyn6tlzXk1+joh598RXZsQ=
Subject key identifier:   22:25:59:49:77:A7:5C:15:49:E1:3B:34:12:F7:4C:20:E6:C9:0B:5F
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer:       /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial:       01962FAB65A1464A5F0FC74B83BB6FAE0043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number:          12C7
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
                          2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: AkLYT6jq99AAAvv0JWT64BpevZcz5FKflcNC3kLcnzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:65:a1:46:4a:5f:0f:c7:4b:83:bb:6f:ae:00:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=2225594977a75c1549e13b3412f74c20e6c90b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:e6:7c:f7:fc:41:8b:00:1d:19:1c:7e:3a:
                    52:be:e8:f5:b7:19:71:aa:ef:71:ef:27:a4:2b:af:
                    ff:20:5b:24:37:d4:d9:5d:a0:a0:91:3e:a0:86:dc:
                    77:04:64:19:80:ab:d9:ad:ec:dc:39:66:5d:a5:81:
                    b8:a3:4d:de:37:28:d6:6a:a2:da:79:b7:75:90:c6:
                    96:d0:15:1c:32:32:ba:c0:78:1c:fb:4c:ba:91:49:
                    89:7c:e3:5e:26:ab:bc:47:9d:a3:2b:0d:39:15:6d:
                    39:a8:85:7d:8e:68:01:7f:ee:8b:3a:0f:3b:fd:a5:
                    74:21:a8:ec:05:79:3b:1d:2d:bc:f0:f3:d9:6c:57:
                    e4:5b:80:92:8e:51:43:d2:19:42:1f:3a:37:a6:3a:
                    be:82:00:26:d7:99:bf:d5:86:f0:32:fe:31:85:94:
                    53:f3:77:27:3e:a4:4c:b1:eb:ec:4e:81:99:0e:79:
                    bd:aa:85:f8:3c:00:8d:e4:da:22:e7:4d:c9:29:0c:
                    f4:09:4d:fa:67:9b:91:65:db:8e:8d:a3:b8:28:1e:
                    cd:23:41:a9:89:41:46:82:d2:20:d3:40:70:0a:68:
                    ca:54:dc:56:22:5f:6a:6f:8e:aa:02:10:c1:15:94:
                    6d:01:db:54:97:c3:80:e4:ca:45:56:6d:3c:8a:6e:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:59:49:77:A7:5C:15:49:E1:3B:34:12:F7:4C:20:E6:C9:0B:5F
            X509v3 Authority Key Identifier:
                keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ee:97:19:d8:93:f3:90:db:77:6c:4b:a7:e8:6f:4a:b8:b0:
         09:c3:35:87:c7:9b:90:25:2b:ba:3a:00:db:a8:9f:8f:2e:49:
         7e:b2:4f:d2:81:e0:5c:fe:fc:f1:48:5d:2b:10:8d:90:a6:fb:
         c0:e8:f4:31:c0:a5:31:bb:0b:f6:50:db:e3:42:b2:94:67:09:
         76:6a:a5:00:d0:ca:be:23:12:da:29:c0:14:0f:87:b7:4f:10:
         83:72:1b:64:53:0c:ef:8c:87:c6:e1:a4:23:d6:32:5a:94:5b:
         42:9b:56:26:bf:a1:b3:41:79:40:41:cf:8f:35:11:e6:ee:37:
         26:00:a8:ba:6a:66:b1:f3:2e:0a:73:e1:9b:72:e3:42:f5:3a:
         a7:6f:76:3e:ff:e0:5d:49:7e:27:70:eb:14:5f:3f:18:5c:40:
         dd:6b:f4:0b:e7:67:ff:10:12:e6:69:28:15:26:de:4b:9f:b0:
         b2:6c:39:29:d7:7b:a2:5b:7b:27:a1:6f:4a:75:5d:37:4f:d6:
         82:ac:28:62:4b:b4:0e:b9:0d:f5:0f:3c:3e:52:9b:db:82:8d:
         8f:05:31:5d:ea:42:e2:6b:52:a2:be:be:e8:21:3e:80:08:7d:
         c7:e4:26:f1:29:f2:56:eb:60:2d:f9:7d:c1:9e:c3:d4:ef:ea:
         2e:72:4f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2WhRkpfD8dLg7tvrgBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDY2MWE5NDhmMmJmMzQ5MGU4OWQ4MjUyZjJjY2M4NzQ3
Y2U1YzcwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
EygyMjI1NTk0OTc3YTc1YzE1NDllMTNiMzQxMmY3NGMyMGU2YzkwYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtarmfPf8QYsAHRkcfjpSvuj1txlx
qu9x7yekK6//IFskN9TZXaCgkT6ghtx3BGQZgKvZrezcOWZdpYG4o03eNyjWaqLa
ebd1kMaW0BUcMjK6wHgc+0y6kUmJfONeJqu8R52jKw05FW05qIV9jmgBf+6LOg87
/aV0IajsBXk7HS288PPZbFfkW4CSjlFD0hlCHzo3pjq+ggAm15m/1YbwMv4xhZRT
83cnPqRMsevsToGZDnm9qoX4PACN5Noi503JKQz0CU36Z5uRZduOjaO4KB7NI0Gp
iUFGgtIg00BwCmjKVNxWIl9qb46qAhDBFZRtAdtUl8OA5MpFVm08im5zFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIlWUl3p1wVSeE7NBL3TCDmyQtfMB8GA1UdIwQY
MBaAFFLWYalI8r80kOidglLyzMh0fOXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODct
ZGQ2M2YyMTVjNDM0LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODctZGQ2M2YyMTVjNDM0
LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+6XGdiT
85Dbd2xLp+hvSriwCcM1h8ebkCUrujoA26ifjy5JfrJP0oHgXP788UhdKxCNkKb7
wOj0McClMbsL9lDb40KylGcJdmqlANDKviMS2inAFA+Ht08Qg3IbZFMM74yHxuGk
I9YyWpRbQptWJr+hs0F5QEHPjzUR5u43JgCoumpmsfMuCnPhm3LjQvU6p292Pv/g
XUl+J3DrFF8/GFxA3Wv0C+dn/xAS5mkoFSbeS5+wsmw5Kdd7olt7J6FvSnVdN0/W
gqwoYku0DrkN9Q88PlKb24KNjwUxXepC4mtSor6+6CE+gAh9x+Qm8SnyVutgLfl9
wZ7D1O/qLnJP9Q==
-----END CERTIFICATE-----