Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File:                     ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier:          DuSnMOzLIhNJhOLn5QFoftvzpyZ3BozOHqRbDHRX1gI=
Subject key identifier:   F4:66:37:31:58:0E:0B:16:3E:89:A9:49:04:41:EF:B9:36:50:7C:A7
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer:       /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial:       01962DF428EFFBD2C4EF9360C382B969A87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number:          07A5
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
                          2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: Nx7N7xHjn6mty547ov50TGNiu6sLFWpeh7Pzzht4RMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:28:ef:fb:d2:c4:ef:93:60:c3:82:b9:69:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=f4663731580e0b163e89a9490441efb936507ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:b3:d5:56:0a:1f:a7:f0:d1:fd:5a:76:08:
                    f5:1f:09:35:a0:ff:d0:fd:23:ea:09:9c:6b:3f:6b:
                    6d:68:ef:11:a8:7e:0e:da:75:0d:e8:ba:04:d2:8a:
                    53:b6:db:81:0a:32:6e:26:02:9f:bb:e5:87:97:ec:
                    6c:06:1c:9e:bc:af:5d:80:c1:6b:08:49:78:26:44:
                    e9:6f:7c:58:72:92:11:14:75:41:0c:36:14:cf:1d:
                    00:d4:7d:7f:38:9c:6d:6b:59:a4:ec:46:e7:d9:d1:
                    db:8e:f1:72:9a:2a:8c:85:eb:79:2d:1c:1e:7a:39:
                    5c:27:62:54:4e:01:b5:2a:9a:9b:33:76:1b:4a:ac:
                    df:e3:29:40:aa:83:ea:bd:c3:f1:79:ae:12:a3:d8:
                    1c:e5:8e:91:fa:75:08:6c:cd:c3:d3:25:78:af:da:
                    5e:aa:63:17:45:42:54:3f:93:21:bc:e2:17:26:15:
                    9a:6b:c5:b5:ee:8c:3e:1c:2c:11:af:2b:80:e8:d8:
                    1d:12:77:d5:ae:50:9b:39:2b:ea:e2:cd:5e:db:f9:
                    0e:87:ed:c5:60:71:ad:a9:57:03:89:f1:57:74:97:
                    57:8b:b4:0a:ad:1d:27:f4:cb:f2:12:81:01:bb:9d:
                    fa:ae:e5:05:d1:e9:d1:96:5c:ab:e2:b2:9c:36:ef:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:66:37:31:58:0E:0B:16:3E:89:A9:49:04:41:EF:B9:36:50:7C:A7
            X509v3 Authority Key Identifier:
                keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:14:19:5f:8f:76:58:63:aa:48:63:c8:73:06:4c:01:02:b8:
         f1:cf:17:83:0f:a5:1d:a6:2c:42:ac:61:55:ac:7a:fb:a4:1a:
         82:a3:5e:13:9c:bf:e5:dc:76:53:c1:78:dc:ff:86:13:fd:8c:
         2c:bb:3d:f4:65:95:bc:ae:df:5c:65:32:8a:a5:d3:5e:7f:87:
         3c:1b:bd:58:09:55:70:0e:77:6d:13:a7:5d:39:c3:78:f5:09:
         22:d0:c6:31:7f:14:55:27:59:90:00:51:d1:8c:16:44:ec:2d:
         3b:eb:63:69:86:33:1e:29:66:f3:5b:29:7c:b8:0a:52:d4:d3:
         be:6f:4b:ec:08:c5:af:52:8e:bd:a1:30:4b:61:94:ae:2b:60:
         40:85:60:91:a1:7f:61:98:56:de:9a:e7:5a:bb:f6:3b:12:9b:
         ea:df:c9:9a:26:81:23:35:c7:2e:78:3d:25:3d:31:b3:fc:f7:
         5c:7d:0a:8f:56:c4:9e:55:fe:bf:f2:12:1b:98:aa:bf:85:13:
         50:9b:12:b9:57:f2:81:88:06:51:6f:de:ee:6a:bf:45:8f:b1:
         b1:a3:9c:30:07:7e:b2:c1:e5:f0:7b:24:a4:ba:dd:a0:b7:77:
         f3:3a:4b:16:0c:f9:95:56:12:9f:f4:99:1c:dd:b0:dd:8c:ee:
         be:71:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----