Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File:                     ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier:          dZOExi/KZDuzt5jHgWY+04D0F6tDF1UzYSn9WB99i68=
Subject key identifier:   06:33:A9:65:05:24:ED:92:71:9C:2C:D9:AA:D4:CB:05:6C:CE:F2:B5
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       01962FABA49BC60903A33183AECEB64478F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number:          0C90
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
                          2: ZpR5RrZCeOAjRf8Bmcohe3YCcXY.roa (hash: pTEfc3PDuejgf4x4olTLHWXi7yz1fRVMFq2Y3JTaBo4=)
                          3: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: P3/6VxMscUphzvFSQ8XnI0/4MrpM+r+s3pbSLGkuxqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a4:9b:c6:09:03:a3:31:83:ae:ce:b6:44:78:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=0633a9650524ed92719c2cd9aad4cb056ccef2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3e:e6:ee:ed:da:7d:d4:8c:57:09:07:7f:2d:
                    5a:7b:18:c1:51:a3:91:3f:37:51:e8:9b:0c:c5:cb:
                    d2:44:4a:d6:22:bc:87:82:d5:8a:c9:ef:5b:99:33:
                    77:15:31:dd:e4:51:ce:0a:6f:09:f9:f9:f7:71:8a:
                    83:d9:f7:43:ef:6b:b8:ea:54:0c:b3:b7:ed:2a:9e:
                    a8:57:7f:46:bc:fb:29:c1:c8:fa:fa:d4:d4:cf:b2:
                    1d:9c:da:18:32:73:63:c6:ee:f0:8a:f1:ef:94:9d:
                    41:39:f8:94:c6:bf:31:c1:41:e7:6a:ad:5c:a0:e8:
                    f3:3f:4c:ed:59:c1:5f:7f:57:da:f0:6f:13:15:10:
                    90:a9:2b:ab:e4:07:75:d0:50:89:8c:e3:fd:c3:75:
                    54:a4:82:2a:9b:09:05:54:29:d6:cf:15:3c:a4:c1:
                    ca:69:d0:31:67:9a:f6:59:b5:4c:0c:b3:0d:58:1a:
                    36:1e:a9:41:26:06:b7:46:b2:09:7b:db:7e:bb:6f:
                    e5:75:1f:89:be:6a:3c:81:d0:a6:5c:cc:65:56:8e:
                    e9:5a:e1:23:c6:3d:45:7e:b5:86:1f:6b:2b:a8:82:
                    bb:2d:d9:38:21:40:c5:d3:f1:42:4f:87:13:6d:96:
                    30:55:b1:14:7e:5c:ca:4d:b6:a6:80:91:97:b7:16:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:33:A9:65:05:24:ED:92:71:9C:2C:D9:AA:D4:CB:05:6C:CE:F2:B5
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:8a:c7:76:7a:07:2f:56:9f:3d:38:d5:a9:8b:b5:15:2e:
         7d:94:97:a1:31:6b:e1:29:7f:80:91:c4:2b:b3:d4:df:9e:a5:
         e8:fd:09:90:b6:aa:82:85:81:43:d4:b5:bf:73:c6:65:2a:f2:
         b3:e9:97:30:af:e5:1a:6a:13:37:ec:c6:49:b6:75:84:64:93:
         f7:2b:06:5a:43:ff:69:cf:71:25:77:f5:f1:38:26:39:d4:dc:
         36:d9:5e:50:44:9f:ea:44:ea:c0:fc:30:ac:58:a2:11:82:c9:
         4e:a1:63:14:57:25:ca:04:77:2b:29:ae:44:b9:13:11:d5:9b:
         13:ea:39:fa:7d:3a:40:81:ab:36:c6:07:61:2a:e7:13:d3:29:
         a8:4a:16:9f:47:7d:41:85:14:8b:c9:3a:20:81:0e:1e:55:75:
         89:41:e4:cf:00:04:ca:81:13:f7:e5:ee:cf:22:75:2e:a9:39:
         9c:13:17:6a:c5:0e:fa:e4:fd:eb:d8:94:f4:24:7d:5d:f2:65:
         f8:a3:10:c9:c1:fc:3c:c6:4c:27:64:30:00:bb:7a:7f:7f:42:
         e0:b2:ad:3b:8c:d1:05:d8:8f:fe:e9:65:43:78:fb:d9:9b:8e:
         9b:72:90:8b:ab:86:e5:8c:bd:59:2f:11:dd:1b:62:d6:cb:1e:
         f5:11:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----