Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          YPeKK+m1S5KAfaKkFFLTIh9phxp3z2hdno1OaHcReaA=
Subject key identifier:   A2:CA:40:CB:88:22:44:36:41:B1:0A:9B:22:D4:01:90:16:11:CC:E7
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       01962E2ADDC97970C7CD64407EB8409C12BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
                          2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
                          3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: dieipBMP3J818cUlyIZl6zV6tOLjpZ5nJMT9voELuNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dd:c9:79:70:c7:cd:64:40:7e:b8:40:9c:12:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=a2ca40cb8822443641b10a9b22d401901611cce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bb:a0:c4:71:ee:54:c3:89:b9:a8:65:53:f9:
                    18:0a:96:70:0d:ac:03:15:37:25:7e:44:eb:2b:17:
                    ae:e6:1d:42:d2:9e:88:46:12:0c:ee:ba:eb:93:c5:
                    08:6c:0b:74:03:2c:c2:49:2b:96:24:57:22:03:65:
                    c7:08:e9:a0:b1:70:c9:75:84:6a:b9:a0:fe:d5:8c:
                    52:21:e0:9d:a7:0a:70:d1:35:94:3e:3f:6f:27:6b:
                    9b:7a:7b:29:00:db:7d:19:35:ee:64:8f:90:75:14:
                    f4:82:e6:9e:f0:19:87:7e:b9:31:bf:88:57:9b:42:
                    16:c6:d2:b7:79:9a:89:87:63:5e:ed:8f:7e:65:2f:
                    7a:57:ff:1a:88:ca:79:20:51:45:90:e1:b6:45:6e:
                    07:21:43:0d:9a:b1:70:7d:17:a7:4f:32:a1:90:c5:
                    85:db:c7:43:15:9f:f8:67:9d:72:43:21:2d:45:e2:
                    8a:ac:54:df:47:1f:41:3e:88:52:06:90:6b:64:b3:
                    2e:68:ca:53:d6:af:ec:0c:64:d7:e2:0e:11:8c:6b:
                    c2:96:d5:df:2a:f9:d0:4b:6b:f2:9c:ca:15:a4:e2:
                    ce:5d:f4:cf:a6:b3:8d:ff:72:7f:f1:ec:49:70:e7:
                    93:a2:67:96:c7:07:28:19:97:82:38:f7:43:37:1b:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CA:40:CB:88:22:44:36:41:B1:0A:9B:22:D4:01:90:16:11:CC:E7
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:15:09:76:b6:08:23:18:df:4b:77:8b:1e:a9:1d:f6:b7:
         30:c5:21:bc:4a:0e:f0:7a:3a:39:19:36:03:01:9d:1d:95:ce:
         de:df:bc:4b:55:36:19:74:6a:d1:50:13:f3:17:13:d1:83:71:
         4b:f8:7a:2c:7e:03:b5:2c:f5:06:b3:5b:e9:fc:af:7e:04:fb:
         b2:09:a3:6c:f8:3a:ae:a2:f5:a0:35:ba:bc:44:74:13:16:71:
         26:60:cb:73:85:5a:64:46:79:4d:18:5a:06:a2:8e:76:d4:5e:
         fa:e6:b9:f1:f5:7f:96:41:74:7b:9a:a8:f8:91:4a:cc:13:5c:
         9d:d8:45:ba:0b:61:25:44:d6:e8:c0:dd:4e:d8:73:fa:3e:2c:
         df:58:e6:8e:7f:41:a3:0e:a2:a7:ac:de:f7:4a:60:b2:94:53:
         a4:87:f8:06:f9:74:10:29:3d:6c:26:0b:87:98:9a:b2:8c:2f:
         48:b6:6e:a5:0f:6c:6a:cc:50:12:3e:e5:5d:1d:2e:87:dd:48:
         96:ca:93:df:fe:48:95:ec:30:a1:6c:a8:22:a4:33:59:6a:a7:
         73:35:25:f3:33:64:cc:0e:6f:c3:b4:ae:86:60:7d:19:f7:de:
         7c:04:00:e3:0a:e1:63:fe:ca:f0:ed:5b:31:27:cf:27:ed:00:
         6b:5f:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----