Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File:                     uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier:          RgukNoMVBUbLD0iRGkemGFSnVx1ai39jD1RZ4popKhA=
Subject key identifier:   BF:2C:51:1C:2E:9B:6E:18:C1:45:1C:16:17:EA:08:BA:23:DC:AD:14
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer:       /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial:       01962E2AF2452ADEB82BE765DDE8080F0D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number:          0482
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
                          2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: LjID7lpCRJszphwwGldL5Oesuhnh6zsQZDmp3wCyd+k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:45:2a:de:b8:2b:e7:65:dd:e8:08:0f:0d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=bf2c511c2e9b6e18c1451c1617ea08ba23dcad14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:b2:dd:16:91:ab:0e:ed:a9:0d:52:36:79:
                    76:08:fc:6d:85:dd:31:34:46:20:eb:29:a0:27:c7:
                    6f:8d:b4:5b:34:f7:af:d2:ef:45:f4:b4:32:c4:40:
                    c6:99:e3:65:01:85:e9:89:0e:9e:93:57:01:1d:05:
                    be:83:24:97:aa:a9:47:4f:97:2a:65:af:c1:2a:6b:
                    09:d3:1b:21:9f:dc:3a:f2:d0:52:9e:a8:54:03:bd:
                    8d:25:8b:33:fe:8e:e9:35:96:fb:52:2d:b6:d4:c3:
                    26:8f:35:23:1c:ec:86:58:ec:2b:d0:b3:a5:a0:8e:
                    d5:d0:b6:f8:d4:3d:e1:92:bf:f9:bd:3d:26:a3:cd:
                    1e:c0:e6:45:39:df:05:ec:2a:f4:65:0e:ee:ab:4a:
                    b5:49:2b:18:8e:03:d9:20:10:df:45:99:ab:01:8f:
                    d9:88:7e:ec:a9:b1:8a:9d:a5:f9:d6:05:46:02:6d:
                    07:ff:96:12:df:31:c8:1e:d6:f0:d1:22:f3:79:59:
                    3e:41:54:42:19:35:da:8a:e4:6f:1b:37:33:dc:d7:
                    e3:3d:ef:7a:a2:41:84:44:db:15:85:12:5c:a2:7d:
                    35:94:4e:9e:41:2e:1a:9e:55:39:2c:c2:fb:40:67:
                    0e:81:cc:09:1a:a0:bd:ca:0b:67:a0:a3:2c:ea:64:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2C:51:1C:2E:9B:6E:18:C1:45:1C:16:17:EA:08:BA:23:DC:AD:14
            X509v3 Authority Key Identifier:
                keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:49:df:54:8d:11:bf:c1:4a:e1:e6:62:11:d5:7c:3f:a0:30:
         97:c2:fe:92:9d:d4:7c:08:21:ea:a6:b5:bd:e9:9d:fa:27:e7:
         5d:76:81:6f:a8:5b:17:0d:94:fb:ba:93:fd:4d:11:fe:7f:95:
         fb:5e:5b:e8:2f:48:72:60:19:a8:39:c1:00:ce:78:d6:7a:69:
         b7:1a:68:80:34:6d:e2:86:70:ce:f5:be:ef:21:d8:3f:30:f3:
         54:6a:5f:98:dd:98:4b:2a:f2:2d:5e:a6:0c:d8:6b:08:d6:5b:
         af:33:f6:e5:ae:69:0b:7b:be:65:ac:b8:97:1e:db:0d:bc:a5:
         44:5b:04:2f:37:ad:fc:26:78:26:6d:e0:d1:0d:d8:32:b8:a0:
         34:97:8c:80:2f:bc:b7:bc:95:01:bb:ee:ac:01:cf:fe:e7:4b:
         df:3b:b5:71:b7:54:76:58:3e:1d:57:0a:30:e3:21:3d:52:24:
         aa:de:2b:1c:60:8e:ad:d4:57:ec:cd:8f:ed:d5:0b:e7:0e:ed:
         0c:5c:69:3b:fc:d7:1d:4d:38:1d:05:ea:d2:23:c7:45:f5:9e:
         a1:4c:ac:d4:b2:7f:59:a8:7b:7d:ab:6a:59:81:7b:ed:f8:b0:
         fb:7b:b0:50:42:03:1a:e9:e4:fb:98:e1:1d:63:e9:5c:e3:47:
         5d:0b:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----