Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          9G3ZUTGBD9/7kdK/ENf5UtHFG90akqv37JZq7oBUfko=
Subject key identifier:   BF:44:9F:6A:BA:2C:FF:E5:44:C0:B6:ED:A2:6E:35:B2:34:A3:ED:CD
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       01962ECF8FC3569FD4E44A90B168FD5695B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          0480
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: KoejX2pwYLGIDnJMn_cfXo-zpFw.roa (hash: EZwZ1UXG+Sx/lBymXk/XYrR4THrw5DyuELp1sBrJX3o=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: PUadBbR3auYwgcnTbVDq/DwUsWaMkc/jKppA9cT8y00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:c3:56:9f:d4:e4:4a:90:b1:68:fd:56:95:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=bf449f6aba2cffe544c0b6eda26e35b234a3edcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:43:d9:bb:45:6f:bf:11:1a:09:0b:c2:42:
                    9c:d9:22:be:73:7a:31:33:0a:7d:ee:93:8d:80:25:
                    a8:16:39:ba:ed:d0:72:01:a4:30:53:de:6b:50:35:
                    b0:cc:b2:39:72:5a:29:11:22:47:c2:a6:04:00:a1:
                    6f:6a:a8:8b:08:73:8d:fa:1f:03:0e:1d:44:0d:0d:
                    9f:01:89:57:c3:df:ce:1b:87:6b:1d:64:04:ab:0c:
                    92:bd:32:df:2c:cf:88:23:c4:3c:be:ad:d2:ed:49:
                    c9:9f:96:50:18:47:08:c8:2b:4a:56:0c:23:60:19:
                    9b:7f:b1:5b:94:e9:3f:a1:bc:97:38:9f:c6:da:be:
                    3a:89:f0:46:7b:e9:aa:75:6a:eb:16:7d:23:8b:57:
                    a8:a6:31:4b:5b:2b:fa:6f:14:cb:9e:8f:04:3b:14:
                    2e:5b:68:15:13:b7:92:0d:2a:ee:7e:11:07:58:c1:
                    bb:9d:55:6d:ed:53:ee:60:9e:57:56:9d:61:f4:f2:
                    c6:ad:3e:68:ae:1a:ec:a6:6f:d3:67:e9:35:54:fa:
                    67:e6:95:6c:0d:39:0a:59:32:d7:24:b9:b7:a7:af:
                    73:84:18:c1:71:56:3d:6c:54:1e:a9:84:77:8f:ea:
                    cb:74:70:5f:5d:cd:d8:20:bb:66:c9:91:b5:2a:68:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:9F:6A:BA:2C:FF:E5:44:C0:B6:ED:A2:6E:35:B2:34:A3:ED:CD
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:25:cb:fd:34:f0:1f:29:d2:68:06:3a:89:64:51:8d:c5:50:
         a0:b2:6d:f5:d2:c5:a3:0c:ef:fd:7e:4c:5d:38:d5:87:6f:4b:
         dc:89:00:39:e2:f8:f7:06:0f:50:66:74:7d:62:4e:81:f3:5d:
         69:52:66:e1:34:be:83:3e:b4:2b:4e:7f:dc:5e:52:00:47:8c:
         d7:7d:1b:9e:3a:7d:ac:22:bd:c4:d2:7e:5c:f4:83:40:d3:9d:
         9b:e7:73:f5:64:68:8a:68:11:d2:8e:89:8d:38:44:fb:d3:01:
         59:60:ec:75:61:4d:14:79:b9:e4:c8:ee:b1:30:5d:72:68:cd:
         6f:34:5a:b5:df:2f:37:fb:35:2d:5a:59:19:2f:cc:a1:fd:bc:
         83:8f:d4:cd:24:4f:0f:d5:b3:03:95:3d:03:7d:8e:79:6a:2a:
         e6:26:d5:58:cd:2f:c1:04:70:d1:8f:2f:b8:94:88:9f:4c:46:
         8e:c2:a1:fd:08:fb:6e:f2:b1:13:4c:56:82:8d:fa:1b:01:0e:
         4b:fb:be:db:f0:2f:d6:46:dc:40:30:fc:4d:53:09:6c:06:f3:
         3e:6c:3a:76:99:46:03:e8:69:f6:b6:e6:6f:7d:97:7e:b9:83:
         f1:03:af:71:43:5c:a1:e8:76:2a:46:57:59:fc:2c:99:c4:ee:
         40:4c:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----