Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File:                     UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier:          MNWYF+vk6hx+9A7HUuJ5dU2+J97WoIYPOwhFG8ilx0E=
Subject key identifier:   2D:5E:40:36:DB:D7:0E:C9:95:A0:6A:2C:62:85:C9:84:D5:F9:16:91
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer:       /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial:       01962F070FBAB84E0AE0D00942C5A88E0392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number:          0678
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
                          2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: 2NBxK5KoGNzEfTBbHow5y9dcyRrqn0JPRA+S/kUgkTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0f:ba:b8:4e:0a:e0:d0:09:42:c5:a8:8e:03:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=2d5e4036dbd70ec995a06a2c6285c984d5f91691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:28:4e:89:76:05:ad:8e:fb:12:71:3b:48:
                    ba:ba:06:0c:50:b9:7c:98:3c:e8:78:e8:38:2e:d4:
                    03:5f:73:5e:f3:f9:44:75:73:63:7b:6b:be:10:ae:
                    cb:ac:a0:7d:9b:ec:d5:57:c7:0f:61:7d:a6:fb:e1:
                    a9:04:7e:69:10:12:01:be:7a:45:fd:c8:af:1b:09:
                    42:d8:e7:9a:b7:e6:13:43:60:71:95:bf:66:b4:26:
                    c4:41:6d:fc:0c:14:77:b8:9f:2d:81:d6:84:f3:af:
                    dd:00:c2:a7:fd:50:c2:65:29:a8:ca:43:a8:4f:44:
                    94:ec:f9:34:35:5c:38:4b:1c:4d:50:29:2a:9c:db:
                    57:f5:59:6b:72:65:ba:bf:bf:ae:b2:c9:ef:73:d3:
                    ae:2b:6f:cc:07:69:a5:a0:3e:ca:8b:42:c1:33:67:
                    a6:84:58:f7:ee:f7:0c:84:41:03:3b:86:2c:ed:43:
                    f0:19:c3:ef:fe:04:41:1c:7d:70:d9:ff:4e:1a:97:
                    99:18:a4:05:15:c4:e7:5b:e3:92:aa:c5:c6:b8:c2:
                    a9:de:6f:f6:7c:83:77:d1:e6:14:34:7b:5d:ee:b1:
                    19:ff:cb:30:a0:a9:fd:d6:26:56:41:bd:bb:be:a5:
                    27:15:44:45:cc:da:d5:72:38:0d:0d:cc:93:78:bc:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:40:36:DB:D7:0E:C9:95:A0:6A:2C:62:85:C9:84:D5:F9:16:91
            X509v3 Authority Key Identifier:
                keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:a1:f3:a6:d8:6f:ef:0e:10:8f:b5:07:25:19:e7:b8:d6:
         83:b0:cc:fd:2f:3a:cc:c0:5d:03:42:6c:c2:2b:ef:99:2f:0e:
         d1:ea:0d:4d:bd:a4:7a:de:80:cc:40:8e:57:93:43:aa:d5:59:
         f1:cd:7e:63:e0:7b:63:9d:a7:2b:3f:18:ca:74:ae:e7:36:98:
         58:1c:2a:79:c8:53:2e:3b:2e:2a:9b:0f:3a:6e:1b:2f:42:23:
         ba:13:f9:f0:1c:de:e0:23:4c:d3:3f:a8:5a:e9:a3:5e:b0:0d:
         23:30:b9:13:75:0a:9c:51:19:80:4d:81:02:c2:b6:ab:6b:75:
         d1:c4:f4:7b:bf:7f:eb:23:f5:0f:37:8b:7a:5b:be:60:b9:55:
         ca:7f:af:3f:e9:51:12:99:87:b4:e0:a9:14:72:22:44:64:63:
         54:75:64:21:dc:cf:8f:4f:3a:db:e9:fb:ae:49:fe:33:71:f6:
         fc:d3:13:b5:1d:57:17:97:85:ef:89:f1:d1:7b:b0:3f:eb:16:
         79:c8:49:6d:13:ed:5b:27:11:6a:62:7a:ac:f9:77:5d:d3:05:
         6a:45:c0:7d:f3:10:52:c5:71:94:e9:30:c6:b2:1b:12:1b:8d:
         f9:b3:52:e9:4a:d2:ee:74:1b:9d:b0:22:7a:92:32:21:23:ff:
         62:51:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----