Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File:                     uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier:          9tdIq8LtvyeOOSdd3qFdzyUwRxaXzsORCCSXn3l8His=
Subject key identifier:   A1:6F:85:51:39:99:A7:C3:0C:C8:6B:0B:57:F3:B9:A9:D2:EB:97:CF
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       01962F7465018A34A37A4097EE5EA65F98B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: 8jfLOWrmGDDvWQJNnJgyiMC8iUk.roa (hash: 9ZylXMdQ8kCZ39z9f3QrUAyi00wBGTAAGALxBdEj8Cs=)
                          2: C22xAXnO8jmzvRiHbOnNs4eV8_w.roa (hash: GuR8xYcc6+bA8BzAosnTTJQ3SA2n0vvOojU/T1fcAE8=)
                          3: f-oCqD3vYqESKoaVRc95tBZETeE.roa (hash: 5tCErpPhGGQcBClzD6wra3oafrOK+sL1B4Sr7pQ1HIM=)
                          4: mRxjUMb4A19WEoG031-D-jh94lo.roa (hash: 9BtlaBZl/GFPVYBxNJXRqsP0IZiStCfXW61EzbYDKj8=)
                          5: tv62RBBqohKxYzcycLc_xEOWUNk.roa (hash: 0SFt/njPH5N+KmKGkT8rCoj+nHuAVB0xwDfk4Lcq+Tg=)
                          6: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: 3iiWhSA2w2+gXyAKgR+QTKuALYRNkrXpIE8iZKhuBeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:65:01:8a:34:a3:7a:40:97:ee:5e:a6:5f:98:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=a16f85513999a7c30cc86b0b57f3b9a9d2eb97cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:95:fd:15:86:91:05:27:eb:af:a8:b2:6b:
                    6f:34:c1:4f:1c:d5:d5:df:bc:0a:39:bc:c8:e2:33:
                    53:37:14:8f:75:ae:d6:07:b5:d4:59:2b:76:0f:64:
                    a9:13:40:c2:3e:81:e1:03:69:b5:84:1c:ee:d1:4b:
                    a2:1d:d7:f8:7f:75:a4:23:a7:d4:53:62:43:26:1c:
                    c5:97:50:94:1e:6f:65:f0:a7:fb:ec:47:fd:57:be:
                    d0:3c:50:43:67:8c:b5:8f:8f:07:54:78:32:08:2c:
                    67:a6:8c:97:9f:e4:15:b7:54:9b:e0:9a:65:ce:ea:
                    e6:48:4b:96:67:a4:42:58:88:97:a3:cc:70:b0:f6:
                    06:35:a8:6d:3e:3b:6b:61:a6:c5:a3:94:e3:f5:6c:
                    1f:17:cd:ee:3c:8b:2c:a9:5b:0e:ba:47:5c:2f:74:
                    92:87:5a:50:6e:9a:73:bb:6d:98:17:9d:ce:e3:ee:
                    8a:db:3d:3b:53:b4:85:de:82:a3:f0:ed:39:a8:24:
                    ed:ef:28:8c:76:14:71:dc:8d:f9:c4:91:97:c0:b6:
                    0c:fd:5d:bd:c5:c2:d3:6a:f1:ec:f6:48:b4:3c:2b:
                    7b:ab:87:97:7d:8c:f4:9f:3c:c9:14:85:95:a5:ab:
                    e3:d0:38:c4:f1:02:d8:d0:c1:d6:24:09:61:10:65:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6F:85:51:39:99:A7:C3:0C:C8:6B:0B:57:F3:B9:A9:D2:EB:97:CF
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:15:50:5c:45:d6:fa:cb:ad:0e:97:a5:a1:0d:40:97:8f:45:
         90:e1:33:71:32:14:28:a7:68:73:92:16:ee:0c:f4:de:42:2a:
         c3:40:cf:5b:b1:84:de:fd:f1:9c:c0:95:5c:e9:29:bb:88:52:
         43:36:ad:0e:4f:94:6d:11:28:93:0d:67:15:ae:8b:6b:d1:0b:
         33:b4:17:f4:8f:aa:63:3e:ca:78:e3:ec:d0:de:be:72:3d:67:
         22:1c:c7:51:d4:e5:ee:44:d3:09:02:0c:c1:51:ab:a7:af:fe:
         03:9b:a7:65:be:4b:49:fc:9f:e9:e1:dd:3d:6b:e5:7d:2f:b4:
         48:ea:98:28:7f:e9:77:a4:12:a1:df:45:3a:d1:e3:af:67:f5:
         56:28:9e:55:f9:9a:5d:8d:f4:bc:de:d4:c6:19:5d:61:33:24:
         83:03:7c:2c:1e:f9:8e:34:44:c3:bd:ed:3f:ca:d6:dc:5e:e5:
         09:df:3d:68:05:d7:30:2b:b9:9a:5e:44:1d:c4:1f:99:61:65:
         39:eb:bb:31:f4:14:63:de:07:cf:f2:ac:9d:24:d3:fc:4b:de:
         97:06:31:99:4b:2f:e0:26:9e:8f:88:12:fd:7e:fa:35:62:77:
         09:6a:59:07:19:73:d1:4a:29:83:ee:ec:82:df:31:c5:af:d3:
         ff:90:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----