Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File:                     uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier:          Znu8ohAJ8UwONGVQQucdHgDuJbcxRu0DWp0dZFFjK4U=
Subject key identifier:   74:86:F1:DC:08:8F:89:6C:57:0F:33:8C:6A:B7:CF:AB:30:14:0C:6A
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer:       /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial:       01962ECF819B84A4C1018DCC607186736E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: Ax6Gu0A1WVAMHnMyLh3B32000sA.roa (hash: iBKFcxVigEAfe9uJMe9wdFyXZBq4/nsbINBCDNHDxXI=)
                          2: fiUjLhELITdpDid32o55NdTSDUs.roa (hash: 94ZZevlA/NkXuzZUHS2Qq6u93TDFYKoJju0eXiF70b0=)
                          3: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: 5sPu04FoXxh/wITus7iUD6vVoAyJDdYXD4TyhtTeD2w=)
                          4: v7faT88h9FQXwmd6ooV79XLEuDc.roa (hash: CNgJmJnrj1ZC4LjfHCAq1xid9gV3zArUgelpQMRzNq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:81:9b:84:a4:c1:01:8d:cc:60:71:86:73:6e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=7486f1dc088f896c570f338c6ab7cfab30140c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:fd:ea:6c:b2:b0:5f:5a:73:3e:cb:36:9a:
                    c9:b3:02:b6:b8:d1:c2:74:55:c7:af:a3:16:47:3a:
                    9f:28:e5:01:72:d5:ae:ad:d9:32:ce:63:49:2b:fb:
                    ec:56:a5:da:21:38:39:db:72:80:7c:04:ed:11:06:
                    e1:ff:ae:8a:6b:96:d6:e8:db:3f:18:51:c8:cd:d6:
                    5f:ea:bf:6e:c6:e1:1b:6f:e4:95:21:7b:39:82:76:
                    24:87:89:eb:68:0b:9f:4d:59:df:66:54:6f:45:68:
                    20:a1:cf:ee:96:8b:eb:b9:85:0a:82:83:e6:80:33:
                    e1:0c:a4:6a:75:c6:e9:01:0d:e4:df:27:ef:c9:72:
                    e6:2b:68:53:49:a4:c1:f9:e3:8a:b2:6e:73:4f:9a:
                    30:2b:7b:40:f3:53:dd:74:23:ca:69:75:f3:bc:8b:
                    a9:ca:49:8d:40:5b:dc:d3:7d:6f:7f:a9:34:b7:89:
                    8b:bf:f0:18:84:a1:f9:3e:f8:52:c8:89:6c:f7:9c:
                    3a:e4:e7:51:30:ae:18:85:d8:7d:f2:36:03:42:92:
                    2b:24:dd:e9:8b:66:79:c1:b5:ba:3d:8e:87:e9:32:
                    8e:82:e8:c0:0d:e7:c4:1b:16:de:35:8f:ef:c4:d9:
                    3e:02:6a:44:02:df:af:9d:e4:62:c5:42:b8:09:48:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:86:F1:DC:08:8F:89:6C:57:0F:33:8C:6A:B7:CF:AB:30:14:0C:6A
            X509v3 Authority Key Identifier:
                keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:94:11:0b:af:a2:c6:a1:fa:79:48:cd:42:1d:19:35:7d:6a:
         10:6e:e2:30:40:50:70:d5:be:89:4c:9d:36:76:5f:2f:01:eb:
         5a:ed:48:41:ce:68:c4:e4:1e:38:c7:11:97:4d:26:08:46:eb:
         f3:ec:20:40:fa:5c:15:7e:34:80:98:2f:cc:db:43:09:ae:43:
         8e:c6:88:27:c7:ce:c9:c9:c2:28:4e:46:24:20:29:02:25:71:
         0c:43:11:93:97:ae:bc:35:82:2e:76:14:d0:10:86:a9:08:ed:
         6d:3a:d9:c2:a4:f9:56:5a:a6:8a:67:f3:66:8c:4f:13:7a:49:
         a8:9e:b1:58:f8:e1:4f:52:0b:e2:ba:f4:87:0d:f2:e8:9b:8e:
         cd:00:40:0a:64:ad:5d:ad:c3:2f:de:42:b2:c0:0a:f3:6a:88:
         0e:ad:eb:0f:b1:8d:fa:a8:38:e3:7e:69:87:8a:ce:47:11:34:
         83:b0:ed:c2:bf:0c:24:ee:31:0d:b0:1b:28:0b:83:8f:2c:a7:
         f3:99:0e:4f:b1:ad:0c:b0:8d:02:77:3d:a9:fa:05:d8:c8:66:
         29:18:09:da:0b:1b:cc:82:d1:fc:b0:d3:ae:8f:76:92:10:05:
         81:a8:6f:9a:8f:46:86:85:b8:0e:e6:16:95:28:59:06:42:cd:
         1d:55:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----