Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File:                     5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier:          U2WLEOH9tcMXeObG2d1ZkWMwo5YO4sRmcBG0FLuvfig=
Subject key identifier:   E2:82:9C:F6:24:13:C3:9A:30:D3:53:F0:B9:E6:CC:68:8B:DC:0C:0F
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer:       /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial:       01962E98DE17B1246782AC6CC61151D1F06B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: +wrC1k+7k6v80XL/b/4ElE433T8TV3ef9t1F5LrtCiM=)
                          2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:de:17:b1:24:67:82:ac:6c:c6:11:51:d1:f0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=e2829cf62413c39a30d353f0b9e6cc688bdc0c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:80:91:eb:bd:e4:d4:3c:87:ec:ca:97:b7:
                    81:ed:8e:32:66:7b:2c:c3:81:61:47:00:6f:d7:99:
                    4f:1f:d8:fb:40:49:40:83:35:a8:e4:8c:f6:df:3a:
                    6c:00:be:8b:12:d8:e8:3f:89:8f:70:0b:da:5b:64:
                    03:74:9a:0c:5a:b1:47:f9:63:2f:da:f1:ca:91:01:
                    14:34:f9:6e:bf:bc:05:d2:fb:41:db:19:28:12:43:
                    cc:7a:0b:cc:33:86:a7:32:36:36:e1:ad:60:0e:19:
                    a7:34:fa:ef:c7:48:54:80:22:db:1a:26:ea:84:85:
                    ea:ad:f6:b7:c3:57:18:ba:bb:5c:2a:48:2b:df:c0:
                    7c:1e:54:31:e5:33:fd:5f:6f:57:54:5c:5b:ce:39:
                    af:12:7e:1a:0f:b9:6d:16:9c:cf:37:59:4f:1d:02:
                    20:09:49:8f:0b:da:86:f0:0c:c6:2d:11:6f:ea:81:
                    81:fb:5c:da:46:bb:bd:35:7c:e2:9c:87:62:bf:b8:
                    41:1f:fb:8d:0a:78:2e:48:59:6a:04:0d:3d:1c:d8:
                    ce:ca:79:df:8c:69:cf:a9:69:b9:8e:64:ab:4c:07:
                    42:37:7a:82:a5:10:2c:5b:a6:ca:bb:44:c0:35:df:
                    4a:ff:6b:58:11:cb:79:77:68:45:a8:2a:8a:a2:95:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:9C:F6:24:13:C3:9A:30:D3:53:F0:B9:E6:CC:68:8B:DC:0C:0F
            X509v3 Authority Key Identifier:
                keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2b:60:b7:4d:94:4c:7b:6e:1b:20:3b:ec:fd:bc:93:50:7a:
         e8:a7:17:ad:f9:59:1e:de:ab:77:27:76:cc:5f:79:2a:06:82:
         ff:be:e9:0b:9d:90:66:cb:84:6d:c0:4f:88:39:9b:f9:13:6b:
         07:a7:9a:57:0d:5d:60:96:39:60:6d:88:71:d1:45:0d:23:e4:
         27:53:c6:5e:ca:11:16:fa:e1:72:ae:2f:01:be:18:cc:bb:28:
         82:2f:8f:7b:1e:87:a8:8d:3c:b3:96:bf:5c:01:1a:6a:75:9c:
         af:37:4d:5e:97:f7:40:f3:e9:e7:c3:73:c7:ae:79:01:14:d9:
         34:46:90:52:f3:bd:0b:bf:09:2c:fa:42:36:fb:9c:93:78:68:
         61:82:61:8e:f5:77:17:a3:bd:99:62:9e:43:1f:ef:2d:a2:bf:
         72:e5:68:1a:e7:c4:69:f1:45:9e:c3:d1:d7:0e:65:03:6e:14:
         1e:25:08:7d:c9:52:7e:5c:71:fe:9b:35:19:39:ad:0c:47:93:
         df:82:6c:40:29:d0:15:a0:1e:8e:b8:39:9f:e5:5b:eb:26:3e:
         44:97:ed:b9:99:0d:ae:12:01:3f:a2:00:02:f0:91:a6:d0:9f:
         58:58:3e:c4:ef:eb:15:0e:af:dc:56:cc:cd:04:bf:c6:89:88:
         bf:44:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----