Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File:                     uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier:          xjLwItDKA0xF6dPpIDddEOeqwRHJEtBnRRL9bTL5F9M=
Subject key identifier:   09:30:F8:21:21:4B:B3:3C:36:04:41:38:40:A6:45:95:A2:ED:4B:71
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer:       /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial:       01962E619BC00FC630A514FD93CCBD889AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number:          08F0
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (hash: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=)
                          2: EvrHOXABisdzxPR63-7KbbGB5LA.roa (hash: GvQn3h7lMtpAwRUlfjv3mFbaPpDUmsn0fuhGLOvFT5Q=)
                          3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: 7Hx4H5rFGxSgvRBOmwh7OhfOh8Fb1IjovxBdJG7NBwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9b:c0:0f:c6:30:a5:14:fd:93:cc:bd:88:9a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=0930f821214bb33c3604413840a64595a2ed4b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:ef:7a:86:73:db:1e:e3:3c:e3:11:fc:10:
                    f0:5f:44:66:cc:aa:d2:3d:d1:42:d1:4b:83:1e:49:
                    fb:91:cf:7f:1d:4d:31:6e:8a:11:84:d6:3e:99:74:
                    10:dc:01:9d:5d:bb:55:6f:c2:77:9f:69:74:7e:e9:
                    d3:7d:a9:17:5d:10:c2:24:ea:bd:08:b4:6a:27:30:
                    b3:0d:c1:bc:a5:47:a2:54:21:e5:db:c3:7b:14:f4:
                    c6:91:a6:8a:2f:3f:e2:13:95:44:d3:62:50:ce:54:
                    7d:92:04:a5:23:0a:8f:23:b9:0f:3f:29:c9:43:e6:
                    b3:f0:e4:15:06:c1:23:5c:ca:37:80:a5:c5:00:33:
                    a7:b1:98:29:cd:5f:0f:bc:54:e3:10:9f:6d:ca:79:
                    05:07:d3:62:58:fe:ff:cd:23:0b:32:52:62:79:88:
                    83:1f:34:03:f3:c3:d4:00:6b:12:d6:7d:80:36:35:
                    40:b2:9d:51:75:19:3e:de:13:45:f3:65:77:77:dc:
                    f4:2e:6d:81:ee:ed:bf:b7:e9:3a:65:ec:4c:9d:c5:
                    f2:3e:65:58:94:5a:2a:83:48:7c:23:be:2d:e1:2d:
                    f4:b4:45:50:9f:20:1a:5e:00:43:60:c1:1c:e0:63:
                    b1:03:00:f7:cb:e0:97:63:71:d8:e7:fc:b1:5f:a2:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:F8:21:21:4B:B3:3C:36:04:41:38:40:A6:45:95:A2:ED:4B:71
            X509v3 Authority Key Identifier:
                keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:be:a8:91:a8:62:80:7b:a5:c6:66:23:d7:6b:56:ef:8b:
         32:2e:96:43:a4:b6:f8:ca:95:44:4f:34:dc:91:c8:97:15:a8:
         8d:e3:2e:5e:cc:b0:99:ce:ed:f2:37:c7:4a:01:96:1d:da:f1:
         87:56:06:32:9d:77:76:49:60:98:10:f9:a4:62:ab:5f:dc:a4:
         e2:bf:ef:56:61:a6:5d:66:57:60:5f:4e:1b:de:cd:38:5b:61:
         81:43:e1:16:fe:81:9f:2e:d4:b2:ed:e1:64:7e:f5:7b:40:2c:
         38:21:f8:42:1e:e8:06:99:0f:89:90:aa:73:6e:c8:a0:81:c2:
         ce:23:b8:57:be:35:27:8c:74:b1:f0:7f:56:79:be:09:87:8f:
         66:90:61:ba:29:76:65:34:9d:11:59:76:35:09:ed:d8:87:88:
         23:49:12:b6:fd:5c:59:6f:90:4b:50:37:a3:1f:be:a8:8f:56:
         47:e2:92:63:83:0d:00:7c:aa:2d:cc:e9:50:d7:b9:40:68:c7:
         5c:8a:38:ca:1d:4a:1e:e2:48:f5:51:bd:7f:75:2e:df:10:2a:
         f0:34:7f:6e:ff:46:b0:c7:85:19:33:cf:dc:93:ba:17:52:3a:
         2d:fe:02:50:03:d0:39:b5:78:8d:82:de:ac:ff:39:c6:d6:3c:
         93:a2:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----