Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
File:                     rUZjafOSfaDIn7X0s-qeMk-SioQ.mft (raw, json)
Hash identifier:          Am8lAtWz5fUBRjFuqM7XbWwNeyvdjObjjiEafsI64gg=
Subject key identifier:   2A:BA:5C:7E:DD:E5:17:BB:77:E3:EC:C8:FE:58:16:C3:9A:73:A7:17
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Certificate issuer:       /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial:       01962E2AE007D8424DFDFD52DB0910971F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
Manifest number:          0500
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: e2krXZzkR-AkHScvd476IUHzrz0.roa (hash: KJC7yZeLdAZIJXLO5En/1DBnqhI+LO45sglWIneobpg=)
                          2: rUZjafOSfaDIn7X0s-qeMk-SioQ.crl (hash: 6e6TXPVWoJwd5LhnKhhKwETaBckjt1FP4cEgSSaDMhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e0:07:d8:42:4d:fd:fd:52:db:09:10:97:1f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=2aba5c7edde517bb77e3ecc8fe5816c39a73a717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:a0:55:d7:c1:04:2d:37:33:7a:0b:1f:8f:
                    c2:7b:c7:8f:10:19:70:49:6a:e4:67:95:b4:1f:12:
                    87:d7:12:53:9e:e7:38:2c:f3:35:2c:85:15:4a:af:
                    a5:4c:9c:cf:ca:d2:c4:58:5d:2f:17:18:dc:fc:e5:
                    7e:da:b2:29:d8:8d:7b:26:90:b9:15:c1:74:d0:f1:
                    a0:cb:6b:7a:3a:e6:21:6f:5e:ad:61:73:cf:97:81:
                    8d:1f:53:81:8c:58:4d:45:14:b8:9e:ad:9e:5f:41:
                    dc:ac:70:79:59:f7:16:b1:6b:d9:01:e7:10:bb:0c:
                    af:df:c0:01:06:0b:8c:b4:01:65:6b:c4:d2:96:83:
                    fc:72:56:65:e7:e8:6a:a2:90:b8:4b:4a:c1:a6:c5:
                    8b:19:70:a1:8a:af:55:67:36:f6:33:fb:8a:eb:f0:
                    df:c6:18:1a:ba:89:6c:42:15:98:8c:15:d7:9a:18:
                    26:48:71:87:ad:8c:7b:5d:43:76:a0:da:0a:6e:39:
                    d6:e0:5b:0c:ce:92:5b:07:a6:fa:92:22:38:f5:b2:
                    03:f6:3f:d5:fa:0f:19:11:ce:08:f1:7e:2c:ef:8b:
                    14:3f:ca:4b:0a:be:b6:2e:11:22:c7:b6:64:26:34:
                    57:2e:09:e9:09:4e:61:96:93:c1:6c:dd:80:42:e5:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BA:5C:7E:DD:E5:17:BB:77:E3:EC:C8:FE:58:16:C3:9A:73:A7:17
            X509v3 Authority Key Identifier:
                keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:c1:09:0c:f7:ba:6b:ac:65:8b:89:1f:d9:d5:39:18:e5:
         ea:c6:82:7d:19:f6:51:a3:47:16:86:a6:22:bf:d0:9f:6b:d2:
         1b:6f:42:f0:4a:d1:83:ab:09:89:c2:e6:cf:46:bc:8a:be:57:
         95:ac:ef:dd:73:c7:49:d5:fb:fe:b7:2f:0e:42:df:e5:8b:69:
         ee:db:a8:d2:4e:f1:52:0b:5d:9d:fd:2f:f7:37:42:60:83:3c:
         77:26:a3:fe:90:45:ca:0e:46:0b:d4:33:e4:00:35:67:88:f2:
         0f:04:da:7a:24:ed:79:0c:81:aa:cf:05:7b:72:d5:9c:5a:b8:
         2a:67:2a:ac:bc:cc:ef:bf:6d:80:6d:00:27:cc:82:d8:8c:76:
         6b:91:27:93:21:06:5a:ca:cc:26:bc:83:4a:31:18:ea:3d:60:
         f9:ec:dc:da:ce:37:37:38:d3:9d:96:9c:be:cd:bb:17:ed:b3:
         8d:91:24:c6:12:72:9f:20:e7:bb:7f:90:82:b6:09:26:85:47:
         23:12:37:9b:a8:2f:bc:95:da:e3:8e:0c:58:ca:46:89:a1:49:
         75:15:14:b1:c0:83:43:a5:ff:ae:0d:eb:38:26:b8:d5:b4:30:
         68:60:b3:d1:2e:fe:a4:da:19:18:04:0e:e1:8f:6f:93:01:4b:
         f7:8a:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----