Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File:                     uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier:          uG3BM9zlAMrBz90ar8QWYy4mb5v0SY5MuN+EoRouG18=
Subject key identifier:   F1:AF:46:42:6F:BD:43:9A:EB:5E:08:A4:8F:54:95:25:24:70:8D:D6
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer:       /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial:       01962E6170C25FE95FEBAA2B02D4524A01FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number:          0C20
Signing time:             Sun 13 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 09:00:59 +0000
Files and hashes:         1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
                          2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: 6VHazEtittweCu+cTCnn5eHtwZS4I4SpRuEtSJBe7GM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:70:c2:5f:e9:5f:eb:aa:2b:02:d4:52:4a:01:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
        Validity
            Not Before: Apr 13 09:00:59 2025 GMT
            Not After : Apr 14 09:00:59 2025 GMT
        Subject: CN=f1af46426fbd439aeb5e08a48f54952524708dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:a1:17:90:45:52:81:a2:76:de:07:10:a7:
                    2b:39:d8:0e:ac:08:a9:85:ef:dc:b7:f0:be:04:ca:
                    96:e6:7a:b3:6b:d4:22:8b:ce:f4:64:ce:65:cd:f0:
                    bc:45:fd:f6:8c:cb:0e:62:e9:62:7c:ac:82:7c:0a:
                    54:08:3e:6c:8f:b0:84:66:da:f7:f1:47:3f:b2:8d:
                    07:b7:a4:55:13:7c:47:40:e1:8c:4a:1c:ed:46:ae:
                    97:25:f9:5b:44:82:de:7a:29:03:d4:6b:b2:e0:b7:
                    2c:db:ac:40:b1:77:29:d3:35:af:59:48:4d:77:26:
                    88:24:4c:ec:c0:c2:be:3c:8e:00:ff:aa:5b:b7:3b:
                    bc:db:56:3c:2d:81:f5:71:6c:a8:a6:79:5d:11:ce:
                    83:69:28:58:b2:a0:44:20:dd:96:db:81:4d:2a:51:
                    a0:43:7c:c3:6a:fb:16:5b:3a:50:bf:c8:43:53:96:
                    23:d5:e9:64:ae:ed:94:10:20:86:b4:3b:1d:7d:10:
                    20:13:96:5c:e6:ba:86:c4:e0:aa:01:55:46:a2:9f:
                    f5:11:e7:31:c6:5a:33:6d:53:96:5d:dc:05:13:16:
                    d2:0f:45:f0:3c:dd:6d:06:5e:48:2f:d1:9d:30:f6:
                    6a:89:dd:73:b3:ef:87:93:c5:65:c3:97:92:23:6a:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AF:46:42:6F:BD:43:9A:EB:5E:08:A4:8F:54:95:25:24:70:8D:D6
            X509v3 Authority Key Identifier:
                keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:29:94:37:89:a4:5b:97:d1:56:74:6e:34:43:c7:76:d5:
         ea:a9:28:3d:f9:9a:5f:08:a7:1d:01:c1:47:e5:6b:68:1f:85:
         c6:3c:79:79:ab:cb:dd:15:87:a3:ed:d5:05:8a:9a:f4:bb:c2:
         44:2c:80:a6:bb:9a:05:fb:ae:9c:b5:fc:12:5c:39:52:6c:1f:
         d1:e9:fc:8e:2d:7b:82:6c:50:bc:ec:b3:99:3c:45:70:c0:e5:
         3e:e1:d8:64:93:8d:df:98:dd:86:41:8f:40:89:9c:86:dc:cf:
         69:a5:1f:96:34:48:2a:e2:94:28:73:be:18:55:01:16:ff:33:
         70:75:75:d3:87:69:63:ac:34:d9:6d:2e:42:e2:4d:f3:b5:50:
         4c:60:86:1e:a3:af:2b:58:fe:33:bc:2f:f1:fb:fb:cf:74:9b:
         c8:25:36:c7:24:ef:fe:17:59:04:80:91:a2:68:1d:df:0c:d7:
         0f:7e:fe:9a:35:8e:cb:3b:1f:a7:7e:8e:da:d8:cc:b8:ce:be:
         8c:e8:42:00:e3:b2:1b:eb:b4:09:0f:1d:d8:ff:3f:75:80:53:
         c2:76:61:c0:c2:3c:e3:8f:1a:6e:e9:0f:d1:53:1c:28:06:29:
         9d:90:5e:27:51:04:57:a2:24:a4:a6:6e:3a:27:a6:03:33:99:
         c2:23:70:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXDCX+lf66orAtRSSgH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YTkwODhiYjQyMDFjZTQ2ZDhlYjgzZGM5ZjM4Yzc4Yjhm
M2JlMWIwHhcNMjUwNDEzMDkwMDU5WhcNMjUwNDE0MDkwMDU5WjAzMTEwLwYDVQQD
EyhmMWFmNDY0MjZmYmQ0MzlhZWI1ZTA4YTQ4ZjU0OTUyNTI0NzA4ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku+hF5BFUoGidt4HEKcrOdgOrAip
he/ct/C+BMqW5nqza9Qii870ZM5lzfC8Rf32jMsOYulifKyCfApUCD5sj7CEZtr3
8Uc/so0Ht6RVE3xHQOGMShztRq6XJflbRILeeikD1Guy4Lcs26xAsXcp0zWvWUhN
dyaIJEzswMK+PI4A/6pbtzu821Y8LYH1cWyopnldEc6DaShYsqBEIN2W24FNKlGg
Q3zDavsWWzpQv8hDU5Yj1elkru2UECCGtDsdfRAgE5Zc5rqGxOCqAVVGop/1Eecx
xlozbVOWXdwFExbSD0XwPN1tBl5IL9GdMPZqid1zs++Hk8Vlw5eSI2r30QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGvRkJvvUOa614IpI9UlSUkcI3WMB8GA1UdIwQY
MBaAFLmpCIu0IBzkbY64PcnzjHi4874bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMt
OGRkNDUzYWI0MjNkLzEvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMtOGRkNDUzYWI0MjNk
LzEvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdX4plDeJ
pFuX0VZ0bjRDx3bV6qkoPfmaXwinHQHBR+VraB+Fxjx5eavL3RWHo+3VBYqa9LvC
RCyApruaBfuunLX8Elw5Umwf0en8ji17gmxQvOyzmTxFcMDlPuHYZJON35jdhkGP
QImchtzPaaUfljRIKuKUKHO+GFUBFv8zcHV104dpY6w02W0uQuJN87VQTGCGHqOv
K1j+M7wv8fv7z3SbyCU2xyTv/hdZBICRomgd3wzXD37+mjWOyzsfp36O2tjMuM6+
jOhCAOOyG+u0CQ8d2P8/dYBTwnZhwMI8448abukP0VMcKAYpnZBeJ1EEV6IkpKZu
OiemAzOZwiNwHA==
-----END CERTIFICATE-----