Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
File:                     ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json)
Hash identifier:          iuyhSbSXQ9b1tLreD8KO2lx3VK+T8MtwOH21a8F9/9o=
Subject key identifier:   C0:2C:68:7E:40:BE:32:F8:34:B7:5C:2D:10:FA:69:05:53:EE:CB:76
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Certificate issuer:       /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial:       01962FAB371345419617F7CF9380366D6A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
Manifest number:          11D7
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: ePbnFFaHTU8NM96UO7nbxeTM2wc.roa (hash: 318WXt1NBms0XTYNW95m9n8XucdzE6Uz0u+dVzohI0s=)
                          2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: 6VhRYjNWAIwmwyTfbFPUyOarx4t+WXmpRyZFl7x4HSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:37:13:45:41:96:17:f7:cf:93:80:36:6d:6a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=c02c687e40be32f834b75c2d10fa690553eecb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:64:ba:07:96:a3:3c:7a:99:09:f9:d4:b7:
                    0b:af:c7:4b:4d:42:73:7d:2b:f1:d5:ad:c2:1d:6b:
                    57:1d:82:8a:21:0d:73:10:d2:4c:6d:d9:49:35:ba:
                    d8:37:87:2d:69:35:20:fe:b3:d6:6a:17:93:46:f5:
                    9b:5c:42:4a:9a:5f:a6:11:dd:22:96:20:9f:2a:97:
                    0c:bb:e9:8a:1e:2a:ea:cd:d7:41:c2:81:3d:e5:ec:
                    15:c0:d4:be:b4:9b:91:90:92:10:cf:b7:5e:2a:44:
                    93:78:bd:c2:a3:5a:5c:32:a9:6a:37:84:4c:a5:29:
                    b3:64:67:3d:aa:71:21:8e:9a:e7:9e:6c:7c:fd:2e:
                    1e:03:98:5a:e5:c0:bc:61:91:07:f1:a8:5b:68:10:
                    18:3b:34:25:a6:cb:33:82:b7:73:1d:0d:c5:40:32:
                    8e:ad:76:99:86:cf:31:89:03:3f:1f:1e:33:a5:45:
                    98:58:b1:b6:36:f2:3b:b9:b0:90:04:c0:d3:93:72:
                    ef:b7:7c:1e:13:01:23:d8:a6:77:c5:98:5a:02:91:
                    4a:a5:5d:cb:36:a2:2e:64:b4:33:73:04:f9:d1:c9:
                    e0:d1:9e:ed:13:b8:05:01:9e:57:46:82:1f:62:13:
                    69:43:e3:76:64:08:64:eb:f9:85:b9:2c:a0:cb:61:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2C:68:7E:40:BE:32:F8:34:B7:5C:2D:10:FA:69:05:53:EE:CB:76
            X509v3 Authority Key Identifier:
                keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:41:71:60:a2:c2:8d:82:8f:60:6d:71:54:cc:6a:58:c9:b5:
         3a:b3:87:40:3e:6b:b6:9c:af:9b:7a:04:91:f5:56:eb:07:22:
         7a:a0:34:fc:d6:56:f4:e0:fb:51:dd:64:6a:83:6c:96:73:95:
         39:2b:07:42:c0:05:67:a4:e4:0f:31:73:f1:f1:a6:e0:81:39:
         ec:88:34:c3:e5:04:ef:b9:b0:d0:21:75:b3:9d:4a:b3:42:92:
         36:5f:a9:ef:42:b1:6b:1d:1d:fc:c4:ac:98:c8:3b:bd:36:f4:
         2a:90:b2:18:39:1f:97:e5:d1:73:e1:6a:12:d2:c8:7c:ab:69:
         0c:a9:6f:6a:7d:ee:6a:c1:8f:30:34:cc:6a:2b:96:e5:df:59:
         44:55:15:5e:58:7e:09:96:54:15:eb:6e:00:a7:a7:5a:be:4a:
         8b:3f:2e:66:69:7a:e6:8a:b4:da:e2:77:fd:b9:7b:b5:67:32:
         bc:6f:eb:e7:1f:42:ba:ee:2b:cb:7a:39:0e:45:17:cc:ad:ea:
         46:d9:62:fe:3d:c4:4a:89:21:43:81:b4:ad:eb:be:e8:f1:e7:
         f0:d3:06:15:78:43:7d:ef:f0:4e:68:a3:5c:6e:5a:88:8d:77:
         4a:b4:57:8b:9e:b6:9d:ad:1f:d7:d3:2d:32:61:ff:4f:6b:4f:
         35:32:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----