Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          T9riHrmSQCP8uS8qgZgwbm8OyhVLNZvgEXX/Hc4dfYs=
Subject key identifier:   25:D8:FC:66:68:3D:CB:64:C6:D7:82:AE:23:C0:4A:72:41:2D:A3:BA
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       01962DF3C5A4EE357A3BCF89DFBC7B2F59B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          0B65
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: p7W3CS8p3Aax6OHN6wkGXTnPP2Cdx3dKzTFCZxFvvOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c5:a4:ee:35:7a:3b:cf:89:df:bc:7b:2f:59:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=25d8fc66683dcb64c6d782ae23c04a72412da3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:0c:d9:3a:a0:e6:a2:0a:cc:24:4d:a0:82:
                    30:ee:c5:f1:38:01:de:60:6b:da:c3:7a:3b:a4:0a:
                    bb:fd:c1:38:46:e9:58:69:f4:cc:96:b1:5f:ed:48:
                    b7:24:e0:e8:47:b1:f1:8e:8c:92:60:58:cb:bf:94:
                    0e:1f:d8:ae:b2:3d:72:bb:0f:13:2b:83:aa:4b:34:
                    31:84:75:15:a6:aa:e4:1c:63:c6:04:3e:79:34:1e:
                    90:97:6e:09:f1:02:6b:db:a0:ef:95:aa:d4:ef:3c:
                    0e:0c:d1:b1:a5:22:0e:8d:41:25:e1:f6:15:fb:35:
                    ce:80:2a:37:bc:6a:eb:63:a0:0c:04:1f:2f:a7:b7:
                    e7:2a:d2:9b:7c:8d:88:f2:6c:9a:47:be:f5:27:8d:
                    2e:8d:1b:f0:e8:86:ed:56:92:df:8d:e6:13:7a:f5:
                    ff:dc:17:e7:4c:7b:83:51:b7:80:2c:42:5a:c7:4b:
                    a7:3c:8e:84:87:a3:9d:54:44:f6:38:63:2d:a4:7f:
                    01:a3:e5:aa:93:37:86:58:df:6c:a0:06:2a:b7:bf:
                    99:5f:bf:43:00:b6:b9:e3:b0:c8:6b:5b:2c:e0:71:
                    9a:af:12:1c:a7:14:e0:4c:76:98:b4:da:71:b1:a7:
                    c4:7b:18:45:b2:4c:17:d0:d4:6e:17:11:b8:41:3f:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:FC:66:68:3D:CB:64:C6:D7:82:AE:23:C0:4A:72:41:2D:A3:BA
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:01:2a:f6:51:ac:14:9e:8d:e5:e1:48:cd:9e:03:19:fe:d4:
         14:b3:97:0c:ff:fd:9d:bd:bc:51:d1:22:dc:44:9c:49:7e:a0:
         4d:13:b2:ab:6c:48:f1:82:55:39:c3:d6:b9:67:be:32:85:d6:
         21:60:dd:65:5d:42:5e:e5:e5:a2:5b:c0:96:04:fd:15:16:40:
         5a:d9:b3:c5:d1:6d:81:d3:a5:52:03:76:ba:b4:25:aa:b1:ef:
         3d:b9:44:e1:9f:dd:36:0c:76:72:d1:61:9d:f2:21:cb:8c:15:
         ea:97:f9:4d:25:19:68:5a:27:f4:0f:85:3a:77:36:50:d8:c4:
         fd:54:26:4c:7b:53:74:21:fd:c3:52:69:52:03:9d:ee:93:e8:
         f6:6b:fe:e0:2f:ec:b5:0f:51:41:d2:ba:07:b1:36:c5:f3:72:
         a7:8b:00:dd:b5:a8:35:dd:91:a0:91:63:eb:3d:17:71:22:27:
         f4:ae:9b:3c:3c:d3:db:6d:63:ff:19:74:1e:65:b9:79:a8:70:
         6c:1e:be:0a:4d:e5:d8:b7:42:7e:39:c1:f3:3e:6f:f4:57:18:
         11:d7:e3:04:2a:b9:76:74:4c:6f:11:37:f7:2b:37:43:4b:77:
         9a:42:c5:ce:a4:9b:7a:ce:38:38:16:11:1f:6c:ce:56:72:ef:
         81:05:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----