Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
File:                     Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft (raw, json)
Hash identifier:          fPP+OhuxrRrOCBkTnu6yzILR9TQT380hqg5FHAqrlXU=
Subject key identifier:   25:B4:E2:42:62:0A:BB:F0:3F:D8:C6:A4:09:77:50:9E:03:30:D8:76
Authority key identifier: 52:6F:9C:0D:97:D6:36:7E:0C:A7:2D:16:24:C5:85:0A:61:0D:65:AE
Certificate issuer:       /CN=526f9c0d97d6367e0ca72d1624c5850a610d65ae
Certificate serial:       01962F3DAE9A7D0047D108B873EFD1E36B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Um-cDZfWNn4Mpy0WJMWFCmENZa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
Manifest number:          0EB5
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: Um-cDZfWNn4Mpy0WJMWFCmENZa4.crl (hash: 2YPCEKVEIhWv/iBHwxaUDorFzspr4zVxQvMjJYIwjiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ae:9a:7d:00:47:d1:08:b8:73:ef:d1:e3:6b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526f9c0d97d6367e0ca72d1624c5850a610d65ae
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=25b4e242620abbf03fd8c6a40977509e0330d876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:c0:37:1e:24:bf:94:0a:21:11:88:47:80:
                    fc:9b:f8:d5:fa:20:c2:6a:57:88:0b:9a:f0:ea:7a:
                    43:ab:1d:e6:e5:34:60:73:9b:94:7d:2f:2d:65:e1:
                    6d:09:49:23:75:53:6e:99:57:44:49:c6:3c:cd:5d:
                    27:89:67:00:02:78:1a:09:0c:c8:62:47:23:88:c2:
                    4d:45:95:35:8b:66:89:b9:ee:ac:09:f5:dc:ef:87:
                    66:b0:d2:e0:92:e4:5b:3b:77:48:38:b0:a6:bb:61:
                    f6:8c:b1:21:87:4d:1e:48:ee:fa:43:d8:2e:a6:46:
                    72:7b:41:4a:f6:3d:a9:98:6e:15:c4:24:c1:6c:a5:
                    08:86:88:20:0c:0c:fa:08:dd:10:4a:7d:88:2b:18:
                    0f:be:52:8a:d2:0b:6f:b6:ef:06:88:bf:a3:0c:38:
                    7e:36:5a:d6:a2:3e:cd:23:6f:d0:c0:20:20:23:50:
                    c0:66:e4:58:d2:22:d9:43:55:e0:03:a7:ec:12:7c:
                    0d:d5:79:c1:37:bd:9b:82:e4:07:f9:3e:4d:70:33:
                    14:51:97:cc:46:d0:3e:0a:95:d9:26:e5:16:86:d7:
                    aa:ed:9b:f3:3c:bd:09:ca:35:8a:b9:9f:9f:dc:56:
                    d6:ae:0a:0f:75:3d:45:06:d0:59:6f:55:93:de:7d:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B4:E2:42:62:0A:BB:F0:3F:D8:C6:A4:09:77:50:9E:03:30:D8:76
            X509v3 Authority Key Identifier:
                keyid:52:6F:9C:0D:97:D6:36:7E:0C:A7:2D:16:24:C5:85:0A:61:0D:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Um-cDZfWNn4Mpy0WJMWFCmENZa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f3:46:ce:f9:6c:0d:0a:8c:25:af:58:25:a7:60:a9:63:65:
         87:e1:0a:3f:81:b2:e9:14:19:a7:64:b6:08:e2:4d:1e:90:8b:
         ae:ea:04:5f:2e:28:03:1d:44:92:42:e6:a5:e5:ff:93:22:e0:
         3d:ac:cf:95:fc:e9:83:c7:4e:2f:49:04:a9:74:5d:03:f9:41:
         f9:ff:03:b7:df:5d:02:4d:91:b4:d2:70:8c:7a:a8:66:a6:7c:
         40:b0:1e:0a:21:e1:66:00:22:6c:b4:8e:75:22:f2:4f:29:f1:
         31:aa:d1:2f:41:c7:14:bd:79:39:19:49:52:0f:92:cb:19:d2:
         4e:5b:9a:6e:9b:6b:01:d4:96:ad:0e:9e:1b:03:d3:92:34:45:
         5a:21:57:7d:52:49:bc:55:50:0e:ff:c4:a0:08:98:5e:0b:b7:
         a2:60:2d:dd:85:3d:f2:24:5f:5f:e8:c0:62:13:56:3a:c9:5b:
         ef:0c:8f:e4:df:ca:64:e5:d3:ab:8f:fa:22:cc:0b:3b:a8:8b:
         cc:ce:eb:52:b1:6f:90:3a:e1:6d:89:fe:61:90:3e:64:48:f4:
         2f:39:fe:13:72:60:75:70:87:26:c4:fe:68:cb:86:d6:4e:0f:
         a1:8d:22:2e:b8:c7:56:11:6d:97:d1:b5:6d:02:6f:54:6e:23:
         97:a8:3f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPa6afQBH0Qi4c+/R42tiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNmY5YzBkOTdkNjM2N2UwY2E3MmQxNjI0YzU4NTBhNjEw
ZDY1YWUwHhcNMjUwNDEzMTMwMTMzWhcNMjUwNDE0MTMwMTMzWjAzMTEwLwYDVQQD
EygyNWI0ZTI0MjYyMGFiYmYwM2ZkOGM2YTQwOTc3NTA5ZTAzMzBkODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMnANx4kv5QKIRGIR4D8m/jV+iDC
aleIC5rw6npDqx3m5TRgc5uUfS8tZeFtCUkjdVNumVdEScY8zV0niWcAAngaCQzI
YkcjiMJNRZU1i2aJue6sCfXc74dmsNLgkuRbO3dIOLCmu2H2jLEhh00eSO76Q9gu
pkZye0FK9j2pmG4VxCTBbKUIhoggDAz6CN0QSn2IKxgPvlKK0gtvtu8GiL+jDDh+
NlrWoj7NI2/QwCAgI1DAZuRY0iLZQ1XgA6fsEnwN1XnBN72bguQH+T5NcDMUUZfM
RtA+CpXZJuUWhteq7ZvzPL0JyjWKuZ+f3FbWrgoPdT1FBtBZb1WT3n2jlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW04kJiCrvwP9jGpAl3UJ4DMNh2MB8GA1UdIwQY
MBaAFFJvnA2X1jZ+DKctFiTFhQphDWWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW0tY0RaZldObjRNcHkwV0pNV0ZDbUVOWmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDhhMDgtMzUxMy00MjZlLThlZWUt
OThlZmM4MGExNTkzLzEvVW0tY0RaZldObjRNcHkwV0pNV0ZDbUVOWmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NDhhMDgtMzUxMy00MjZlLThlZWUtOThlZmM4MGExNTkz
LzEvVW0tY0RaZldObjRNcHkwV0pNV0ZDbUVOWmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvNGzvls
DQqMJa9YJadgqWNlh+EKP4Gy6RQZp2S2COJNHpCLruoEXy4oAx1EkkLmpeX/kyLg
PazPlfzpg8dOL0kEqXRdA/lB+f8Dt99dAk2RtNJwjHqoZqZ8QLAeCiHhZgAibLSO
dSLyTynxMarRL0HHFL15ORlJUg+SyxnSTluabptrAdSWrQ6eGwPTkjRFWiFXfVJJ
vFVQDv/EoAiYXgu3omAt3YU98iRfX+jAYhNWOslb7wyP5N/KZOXTq4/6IswLO6iL
zM7rUrFvkDrhbYn+YZA+ZEj0Lzn+E3JgdXCHJsT+aMuG1k4PoY0iLrjHVhFtl9G1
bQJvVG4jl6g/aQ==
-----END CERTIFICATE-----