Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File:                     U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier:          NOJ9he1gBirIqO6DKGtrVV6gY2OeFqnvUCrhwupvicE=
Subject key identifier:   93:97:10:FB:3D:F8:36:91:4C:6C:BA:6B:35:53:C7:83:96:0F:89:C8
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer:       /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial:       01962F06C3F8A5821F083329F4EA79AA7895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number:          01D0
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: r04WEZ3A30i/kDgadfId8oFp7gogsW7F32cM9waZso0=)
                          2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c3:f8:a5:82:1f:08:33:29:f4:ea:79:aa:78:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=939710fb3df836914c6cba6b3553c783960f89c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2c:9e:35:a2:da:12:de:54:36:e9:6a:8b:91:
                    07:c3:6a:ca:e6:8f:1a:77:e6:a5:08:d3:8e:47:77:
                    69:d3:f3:23:1f:d0:ac:98:bc:57:e3:f1:8d:90:43:
                    8d:a2:a0:f6:2b:df:db:a6:e9:a6:20:ce:e9:50:d4:
                    67:79:19:dc:40:33:4c:cd:a3:98:51:fa:ec:81:62:
                    f5:67:78:48:2a:29:1d:13:5b:7b:b4:2f:a6:7a:22:
                    4c:40:57:4b:42:e8:c6:46:d5:77:54:39:82:70:da:
                    83:c9:93:83:70:24:89:49:6b:a7:14:71:ef:48:b7:
                    76:26:42:81:64:ca:59:ad:40:3f:e8:68:43:4e:bd:
                    a7:50:4d:85:7e:83:06:e1:fb:dd:65:cc:ab:c6:12:
                    1f:f1:a3:c5:27:68:c1:68:d4:a0:2d:84:41:58:7a:
                    ed:04:bb:0e:24:41:e9:36:46:4d:8d:ef:05:90:2d:
                    90:b3:ab:2f:84:9b:d6:15:38:ec:2d:1d:cd:7d:4a:
                    e9:9d:e3:79:8b:44:4b:2e:79:18:84:61:b7:07:52:
                    3c:6e:59:09:74:fd:04:90:3e:de:2c:6f:64:02:61:
                    8b:35:06:61:25:98:f7:77:73:8c:fc:06:a0:b2:81:
                    f7:a8:be:b3:6c:ef:dc:45:a1:41:12:3e:5f:d5:1b:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:10:FB:3D:F8:36:91:4C:6C:BA:6B:35:53:C7:83:96:0F:89:C8
            X509v3 Authority Key Identifier:
                keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:de:5c:c9:4e:07:ce:d6:71:e4:56:f6:e9:3f:45:21:07:
         ac:cc:c8:38:d7:60:ca:7d:29:f8:34:3e:4e:9e:54:09:a4:ac:
         74:a7:93:7e:63:17:d0:32:fe:9a:e9:f3:85:6d:ce:db:8f:3c:
         d4:a4:ea:10:42:f8:1b:cb:34:25:78:22:f1:ef:91:f6:fe:79:
         f5:bc:33:c3:a2:38:e2:b7:1e:e3:3e:c3:09:77:78:84:fd:49:
         c8:69:8f:32:a7:ab:17:37:42:13:32:0c:e9:1f:3e:66:1f:80:
         4e:69:c2:de:83:69:ea:1d:68:14:05:a3:64:6e:c0:06:da:5e:
         c3:4c:36:06:66:e4:a9:ad:e3:2d:cf:71:95:9b:df:e4:62:b0:
         7f:e6:84:89:90:4c:de:38:f1:ca:af:b7:92:7d:e0:df:5b:6d:
         bb:1a:92:bd:54:a1:57:e3:5b:59:41:17:75:98:25:67:4d:a1:
         a9:f6:68:72:f7:2c:96:46:42:db:46:08:c0:ce:82:c8:41:e9:
         df:db:c8:ec:7c:9a:52:dc:a2:80:62:a8:01:2a:a2:6f:0d:04:
         53:2e:6f:c4:e4:a4:09:43:ed:e9:10:85:53:98:25:80:1d:cf:
         3b:c7:ca:ad:b9:83:04:16:ab:a1:0c:bb:40:ba:d5:28:f0:55:
         b1:38:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----