Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File:                     UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier:          v1KO/N8bNknCvxGP6DbujTA1UBRweIyFHcH6BfjzXEc=
Subject key identifier:   B9:4D:CB:27:39:89:4D:3E:D6:CA:A5:6D:C4:6C:AD:CD:EA:03:3F:D4
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer:       /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial:       01962F066F4C35D0C045ACCF08F7DB6339E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number:          14DF
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
                          2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: RLTXkCe5rWjvEIC3hzqYjhZ995LizvxF7OssXLxHcco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6f:4c:35:d0:c0:45:ac:cf:08:f7:db:63:39:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=b94dcb2739894d3ed6caa56dc46cadcdea033fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:31:f4:ce:a2:6d:e1:29:8f:fe:9b:75:69:
                    60:3e:3e:46:97:12:3e:c9:6b:4b:02:65:7b:ee:f0:
                    fc:db:ee:9d:3d:82:4e:b0:2f:70:40:4c:27:6d:24:
                    28:8d:ca:94:3c:cf:2c:fc:55:7c:71:43:d6:61:56:
                    ad:14:d0:71:0d:50:8a:41:73:b5:15:49:c8:5a:52:
                    44:c9:e9:89:f9:75:d3:b6:90:05:4d:4e:9d:68:9d:
                    69:03:0b:38:7d:3c:2e:cf:78:a6:e7:e4:92:0e:39:
                    88:22:7e:97:7a:71:06:1f:3c:a7:85:93:f0:7a:44:
                    c5:86:90:44:11:df:b5:7d:91:44:f2:08:68:63:5b:
                    89:47:83:03:55:3d:2f:7d:4f:92:37:77:4b:b5:7e:
                    ca:aa:24:d0:9e:d1:5c:60:50:af:f3:1e:09:fe:28:
                    aa:c8:15:d0:93:02:08:36:b3:ca:4e:0f:07:fe:35:
                    fc:ce:4d:fc:44:f5:55:6d:1e:65:41:00:ea:a7:9d:
                    29:10:98:f9:03:7c:93:52:fb:65:4b:9b:ca:98:3e:
                    45:20:b0:6e:ad:9d:47:73:f3:26:b1:d3:9e:56:ee:
                    57:bd:93:5c:54:81:a0:a2:f0:80:ca:39:b0:bc:c0:
                    80:39:df:0a:1d:4c:61:9c:c6:ad:21:50:af:c9:4c:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:CB:27:39:89:4D:3E:D6:CA:A5:6D:C4:6C:AD:CD:EA:03:3F:D4
            X509v3 Authority Key Identifier:
                keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:61:02:93:44:3f:0d:55:06:33:c1:f4:83:ae:e1:9e:bb:19:
         8c:ab:49:7a:9f:34:69:39:05:7c:d9:4e:93:d5:5b:38:5e:e0:
         f0:ea:f5:1e:3e:4f:27:9d:b0:d2:c4:26:3a:2e:0e:b0:0b:35:
         78:10:e3:bd:db:40:6f:85:3e:fe:c4:0b:16:d9:ab:f0:d3:b5:
         40:fe:82:8b:84:fe:f7:3a:d7:48:42:82:00:cb:ac:41:dd:19:
         bf:d9:44:ee:36:a1:1b:b4:0a:38:d8:b9:3e:ea:3c:fa:5c:24:
         9f:06:4e:7a:6c:03:44:1e:ca:51:e6:0e:78:ef:d4:63:f1:03:
         fb:5d:68:d2:f1:40:bf:5c:4d:cf:b2:76:98:9a:02:e0:d4:06:
         03:f6:59:fc:6c:31:b6:a6:af:67:14:d2:b8:0d:0a:30:35:05:
         f5:27:01:96:db:fc:6d:ef:66:9d:a0:b4:8d:c8:69:e7:1d:29:
         b6:09:0f:3c:47:cb:44:e2:b8:df:39:f6:67:0a:98:8d:d5:ed:
         38:a6:86:15:54:5d:24:ef:26:a7:34:e5:ae:25:6a:ee:b7:5f:
         e8:1d:57:d4:5c:0f:ed:f1:b2:48:bb:eb:c2:ea:ba:3b:18:38:
         c0:7b:7c:a5:21:19:1e:94:b5:5d:3d:4d:c5:ac:f9:ee:8a:59:
         a3:6f:61:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBm9MNdDARazPCPfbYznoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWM4ZjMyYTFmNDI4MWY3MTQ2Mzg5NWQ1NDNjNzE3OWNm
N2Y5NTkwHhcNMjUwNDEzMTIwMTEyWhcNMjUwNDE0MTIwMTEyWjAzMTEwLwYDVQQD
EyhiOTRkY2IyNzM5ODk0ZDNlZDZjYWE1NmRjNDZjYWRjZGVhMDMzZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFgx9M6ibeEpj/6bdWlgPj5GlxI+
yWtLAmV77vD82+6dPYJOsC9wQEwnbSQojcqUPM8s/FV8cUPWYVatFNBxDVCKQXO1
FUnIWlJEyemJ+XXTtpAFTU6daJ1pAws4fTwuz3im5+SSDjmIIn6XenEGHzynhZPw
ekTFhpBEEd+1fZFE8ghoY1uJR4MDVT0vfU+SN3dLtX7KqiTQntFcYFCv8x4J/iiq
yBXQkwIINrPKTg8H/jX8zk38RPVVbR5lQQDqp50pEJj5A3yTUvtlS5vKmD5FILBu
rZ1Hc/MmsdOeVu5XvZNcVIGgovCAyjmwvMCAOd8KHUxhnMatIVCvyUxP5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlNyyc5iU0+1sqlbcRsrc3qAz/UMB8GA1UdIwQY
MBaAFFCcjzKh9CgfcUY4ldVDxxec9/lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZjBhN2QtZGNjZC00N2NlLWIyMWQt
MTQ4MDljOTM4Yjc2LzEvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZjBhN2QtZGNjZC00N2NlLWIyMWQtMTQ4MDljOTM4Yjc2
LzEvVUp5UE1xSDBLQjl4UmppVjFVUEhGNXozLVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmECk0Q/
DVUGM8H0g67hnrsZjKtJep80aTkFfNlOk9VbOF7g8Or1Hj5PJ52w0sQmOi4OsAs1
eBDjvdtAb4U+/sQLFtmr8NO1QP6Ci4T+9zrXSEKCAMusQd0Zv9lE7jahG7QKONi5
Puo8+lwknwZOemwDRB7KUeYOeO/UY/ED+11o0vFAv1xNz7J2mJoC4NQGA/ZZ/Gwx
tqavZxTSuA0KMDUF9ScBltv8be9mnaC0jchp5x0ptgkPPEfLROK43zn2ZwqYjdXt
OKaGFVRdJO8mpzTlriVq7rdf6B1X1FwP7fGySLvrwuq6Oxg4wHt8pSEZHpS1XT1N
xaz57opZo29huA==
-----END CERTIFICATE-----