Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File:                     UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier:          sg3n8OCIxCXUqHtJm3QuS1SqhUbYthSUEqvF+wjA40A=
Subject key identifier:   A2:64:07:75:60:37:7F:69:2B:E9:6A:EF:99:18:0F:A3:95:04:EC:90
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer:       /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial:       01962F3DB7B29384D99B35367239A0F728FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number:          1235
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
                          2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: xwPkCz5foT2KSx3qWDzusn7iGqESVKyQwaiSySW3GsQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b7:b2:93:84:d9:9b:35:36:72:39:a0:f7:28:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=a264077560377f692be96aef99180fa39504ec90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:72:33:40:4c:5a:ec:84:07:08:52:e2:11:
                    63:d4:e0:11:5a:4c:55:5d:00:b0:91:1f:e6:aa:2e:
                    94:aa:0a:e9:04:32:36:e3:c3:61:db:4f:70:ee:2a:
                    3e:87:74:87:ea:a9:6a:02:43:85:8b:51:01:66:ae:
                    e6:9c:1d:4c:a4:61:04:d7:d2:f1:52:6c:82:d0:49:
                    e3:40:cf:2e:cb:de:a1:8b:39:74:ee:0d:64:ec:c7:
                    b7:49:f5:75:9b:54:a6:b1:30:10:16:0c:0b:88:bf:
                    da:ae:10:b7:e8:9d:84:47:bf:89:ca:16:fe:8c:bb:
                    c3:35:4b:5d:3e:02:13:1f:9e:64:82:cb:4b:1b:cf:
                    2f:29:80:66:11:54:03:8b:2f:50:70:1d:5d:7a:9a:
                    fa:cf:32:f5:4b:b7:43:67:8e:12:83:21:56:93:86:
                    7a:0e:66:0b:13:a0:36:96:50:43:01:f8:d7:b7:32:
                    42:61:9a:46:52:22:ea:93:01:ca:e6:39:71:69:d6:
                    5d:51:e2:f2:8c:42:cd:37:67:ba:0e:f5:d0:8c:b0:
                    9a:6f:60:f6:96:49:df:1a:8d:ac:a5:47:6d:37:23:
                    35:2f:e1:d6:78:1f:44:b1:a8:65:38:cb:42:8c:ec:
                    4d:6c:95:c3:08:cb:5c:61:c5:be:29:84:4d:99:b4:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:64:07:75:60:37:7F:69:2B:E9:6A:EF:99:18:0F:A3:95:04:EC:90
            X509v3 Authority Key Identifier:
                keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:3b:b6:25:b2:77:de:82:c7:b3:f4:8d:18:ca:2d:49:50:59:
         09:84:d0:6e:23:f6:b4:6c:3d:36:d9:f2:ba:48:02:84:da:12:
         8f:e9:9c:68:38:cd:68:7d:67:48:5a:f1:01:66:d3:d3:7f:92:
         15:9c:91:2a:c6:47:8b:e2:61:e3:6b:09:eb:a4:42:d2:8c:11:
         0e:65:44:52:d2:4d:77:b4:09:65:6e:75:09:61:cb:d3:36:5e:
         51:43:cf:92:03:40:61:be:a8:b7:a6:9d:eb:18:11:07:24:ca:
         b3:18:c6:73:eb:46:a0:bb:1f:8d:a4:9d:32:40:7a:1c:70:d5:
         fe:ac:96:82:9c:7e:8d:a2:77:65:0f:3e:fd:7a:9c:ce:fc:b1:
         d1:77:d1:ae:a4:50:62:54:05:90:a9:1e:10:43:e1:57:83:3c:
         a1:b8:d0:a3:2a:3f:e5:a2:d3:dc:a5:ee:27:f1:e7:26:0c:3e:
         9f:b8:d5:0d:0e:71:e8:5b:75:48:1a:61:96:d8:6a:47:c6:04:
         5d:a6:10:ef:99:35:aa:f9:7b:bb:72:1a:3b:8b:8b:0b:d4:dd:
         1d:1f:9c:34:87:8f:fd:bc:74:1f:3b:fc:fe:a7:9e:c3:eb:8a:
         cc:4c:87:1f:87:1c:ea:8c:06:52:32:c0:7d:cd:7e:cd:f0:f2:
         f4:5a:af:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbeyk4TZmzU2cjmg9yj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWE2YTliZWI1MmVmZjI5NjQ0NjU5Yjk0MzJhMGE1OTIz
NzMxNGMwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EyhhMjY0MDc3NTYwMzc3ZjY5MmJlOTZhZWY5OTE4MGZhMzk1MDRlYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunlyM0BMWuyEBwhS4hFj1OARWkxV
XQCwkR/mqi6UqgrpBDI248Nh209w7io+h3SH6qlqAkOFi1EBZq7mnB1MpGEE19Lx
UmyC0EnjQM8uy96hizl07g1k7Me3SfV1m1SmsTAQFgwLiL/arhC36J2ER7+Jyhb+
jLvDNUtdPgITH55kgstLG88vKYBmEVQDiy9QcB1depr6zzL1S7dDZ44SgyFWk4Z6
DmYLE6A2llBDAfjXtzJCYZpGUiLqkwHK5jlxadZdUeLyjELNN2e6DvXQjLCab2D2
lknfGo2spUdtNyM1L+HWeB9EsahlOMtCjOxNbJXDCMtcYcW+KYRNmbSs7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJkB3VgN39pK+lq75kYD6OVBOyQMB8GA1UdIwQY
MBaAFFGaapvrUu/ylkRlm5QyoKWSNzFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQt
OTA1ZDlkY2Y1MGFlLzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQtOTA1ZDlkY2Y1MGFl
LzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzu2JbJ3
3oLHs/SNGMotSVBZCYTQbiP2tGw9NtnyukgChNoSj+mcaDjNaH1nSFrxAWbT03+S
FZyRKsZHi+Jh42sJ66RC0owRDmVEUtJNd7QJZW51CWHL0zZeUUPPkgNAYb6ot6ad
6xgRByTKsxjGc+tGoLsfjaSdMkB6HHDV/qyWgpx+jaJ3ZQ8+/Xqczvyx0XfRrqRQ
YlQFkKkeEEPhV4M8objQoyo/5aLT3KXuJ/HnJgw+n7jVDQ5x6Ft1SBphlthqR8YE
XaYQ75k1qvl7u3IaO4uLC9TdHR+cNIeP/bx0Hzv8/qeew+uKzEyHH4cc6owGUjLA
fc1+zfDy9Fqv/Q==
-----END CERTIFICATE-----