Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File:                     uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier:          yr7jkBqtWWNJXKLtoFnT0rpmNHtv8PG6ue6/znmtB2E=
Subject key identifier:   DE:67:88:EF:6C:CE:21:6E:C0:64:05:4F:D5:16:45:59:5E:C8:5F:A5
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer:       /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial:       01962E61D48990293021F285E5B11026DA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
                          2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: m1KGOuv3gb0oe9zfu6gd3yPRpShzbPSsDojJPcjNSgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:89:90:29:30:21:f2:85:e5:b1:10:26:da:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=de6788ef6cce216ec064054fd51645595ec85fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:10:61:7d:f6:a8:98:a1:ca:b2:97:de:58:
                    a0:a4:24:84:5d:e2:43:28:a2:4c:c2:98:cf:2a:4d:
                    79:4e:10:68:05:c8:29:21:ee:df:45:20:99:15:ab:
                    b8:cd:1f:d2:95:8a:95:1f:95:ca:d9:e3:97:0b:fb:
                    6a:dc:ed:a1:2a:66:fe:53:8d:5c:db:a3:df:d4:6a:
                    e4:78:8d:87:39:7c:4e:57:2c:82:cb:c3:f8:2b:39:
                    f4:81:37:26:00:54:a9:27:c0:d3:22:43:80:35:5a:
                    91:d7:97:0a:ca:15:c4:f5:ca:06:69:72:56:b8:61:
                    bb:3e:5b:52:30:2d:25:b5:c2:23:ca:9a:16:35:a8:
                    5c:0f:78:57:46:68:10:b6:db:9e:7a:d6:7c:c8:55:
                    a4:86:08:d8:74:e9:ce:82:79:56:4d:43:a2:4d:e6:
                    36:79:e7:3c:de:18:f9:3d:df:c7:34:d1:c0:ac:41:
                    44:ed:94:89:7a:43:c7:67:ba:67:cd:f2:0b:c4:48:
                    05:78:27:4f:b3:2b:8b:27:49:bf:f2:7c:b8:35:eb:
                    9a:bc:27:50:12:96:17:ab:7f:85:1f:50:a6:2c:88:
                    68:3b:88:5c:37:c3:0f:ee:72:f9:00:00:3a:84:ab:
                    a7:f4:64:e9:75:0b:01:e3:3a:70:a1:bf:68:91:76:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:67:88:EF:6C:CE:21:6E:C0:64:05:4F:D5:16:45:59:5E:C8:5F:A5
            X509v3 Authority Key Identifier:
                keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:eb:36:66:ce:fd:67:54:ea:08:5a:e0:ed:b7:d6:2f:85:
         8e:15:25:a9:5d:86:d1:5e:f3:95:6f:ad:77:61:41:fb:ec:45:
         7e:ef:fb:7c:7a:05:7d:ed:7b:0b:7b:8a:4f:0f:cd:fc:93:18:
         1a:12:f0:1c:5c:cd:80:44:51:89:33:cf:94:e0:a2:ef:3e:ca:
         92:fa:ea:04:50:ea:6c:ff:13:7e:d2:fc:7c:50:00:43:ec:bc:
         30:fa:8d:22:cd:a7:a1:b8:76:35:35:7f:1a:c1:aa:38:88:c7:
         03:44:f1:2a:23:07:24:10:44:ac:de:52:fd:0f:1c:4d:f4:5b:
         12:56:8d:40:d4:40:62:8c:48:6f:15:b6:27:34:a4:d1:e1:4e:
         68:da:c7:b2:7a:0f:60:2a:20:89:15:ef:59:17:2a:a6:1c:bb:
         3a:2f:45:3a:ed:98:b3:25:ed:7d:ec:4e:8e:fd:95:02:9b:0e:
         92:f0:14:ee:44:d2:df:60:7d:00:60:1a:3a:7a:ab:60:d5:2e:
         5b:49:74:c9:d4:ab:10:e2:0c:3c:0e:5f:f5:cb:8b:f8:b7:97:
         30:e7:54:f2:eb:b4:2d:ac:2d:dc:a9:6a:6e:06:1d:3a:e1:95:
         5d:96:a8:c5:0b:76:3d:6b:16:3d:ab:30:b1:96:3d:60:5f:6b:
         94:3c:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----