Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          OVa3eyqZO4u58+HYcADbP9jUlzjkJueyDr+FI+ZORRs=
Subject key identifier:   A8:7B:8B:78:3F:79:5F:01:02:E7:93:25:B8:8E:9D:55:31:85:2E:0D
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       01962E986DE3D83EA5A7C69D44BFBD9D1F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          0E14
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
                          2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: 2RPD5KH5nERE2PMd2ztsJZe864PuQ1IyPE1WxmlfhW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6d:e3:d8:3e:a5:a7:c6:9d:44:bf:bd:9d:1f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=a87b8b783f795f0102e79325b88e9d5531852e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:75:4d:df:45:fe:f8:22:f3:10:23:64:90:
                    10:be:1b:c5:2d:9d:e6:1e:cf:3b:8f:8b:d0:6e:7e:
                    88:0a:81:65:fe:35:4d:9a:27:e3:73:b0:fd:c6:f1:
                    9e:e8:c9:96:41:54:88:ea:4f:c4:25:97:85:41:be:
                    d0:a5:a8:d0:7c:64:dd:9e:5c:95:45:25:b0:1c:b0:
                    8c:f1:c6:86:73:a7:be:3f:ba:9e:f7:f1:ab:2c:d1:
                    65:b7:6e:36:a4:b4:4d:23:83:80:d0:ae:f2:16:b2:
                    be:fb:5e:6e:a5:d3:7c:4c:73:ad:6e:08:c0:7e:8c:
                    dd:6e:c3:cc:6a:13:01:7d:24:cd:27:fa:7c:c3:50:
                    bd:5b:c5:ae:86:5f:ff:1e:ac:b1:96:0f:c8:01:36:
                    90:21:1e:be:29:27:c1:d7:bc:e1:1a:32:63:dd:0e:
                    40:60:ce:c7:c8:4a:ec:4a:22:f6:da:70:87:8a:27:
                    5a:76:c0:00:d4:41:ca:9e:cc:6d:d5:06:2b:ff:4a:
                    16:6a:89:62:37:82:c2:89:e9:9c:9c:48:f0:a9:12:
                    4e:ee:c6:c1:03:74:77:0d:9c:00:fc:b9:e7:69:90:
                    3e:af:f2:3f:47:73:9a:74:fb:e9:5c:32:de:d3:b1:
                    f9:05:d4:2b:dc:82:2e:67:8c:54:a7:a3:66:5b:b1:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:8B:78:3F:79:5F:01:02:E7:93:25:B8:8E:9D:55:31:85:2E:0D
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:77:4f:d1:7a:a7:a7:6c:be:6d:79:c7:77:f1:44:a2:ce:10:
         a3:35:5a:66:f8:25:63:29:99:6f:89:45:50:45:9c:9e:60:95:
         e0:67:41:4b:e2:63:6c:23:b5:93:2c:a1:bc:96:7b:cf:99:97:
         f1:c5:63:b1:37:34:47:78:3f:c3:a5:f2:4d:8c:81:be:d8:1c:
         49:7e:d3:fc:21:8d:e1:96:d7:bb:ca:94:c8:df:7c:9a:33:07:
         b4:03:89:3b:cd:39:8e:1a:de:1e:0a:e1:1c:25:5d:d4:86:fc:
         51:bd:45:4f:44:0b:e1:1c:ad:2e:7e:b0:95:38:e9:24:6b:b1:
         9c:87:4b:df:dc:df:08:b2:e8:d8:67:18:d5:f7:6b:f5:67:1a:
         ad:e4:18:ae:1c:e5:73:e7:9a:dd:28:5c:9e:9e:0e:0d:c7:26:
         63:30:ab:d2:5b:68:93:b7:4f:99:a0:2e:8d:38:19:ee:48:cc:
         5f:6d:c2:eb:43:26:03:d8:ad:4d:81:a7:1d:fe:b7:ad:1d:ef:
         1d:f5:ff:00:92:9d:51:e9:18:76:ad:3b:99:a3:d6:d1:55:6e:
         92:41:4b:a3:98:51:3b:f5:88:11:61:3c:42:44:8f:bd:40:bd:
         b3:37:b2:cf:23:11:64:7c:fa:d4:8e:51:44:1e:0b:75:6f:4d:
         36:9e:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----