Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File:                     UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier:          BJlnzZc8iAFA1z4dI86lJ/vmmz3H/ljH1S/gVWPy8dQ=
Subject key identifier:   FD:5E:23:AB:75:72:EC:DD:F4:F7:FE:13:C4:3C:A3:7A:A6:4D:7C:E5
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer:       /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial:       01962E2B19AE57A9C36FF6D17195D7989042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number:          0D3F
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: MViOS5Kzx9ZW0702p6lepfmwJag+Nh63p3NhBkvIJ9M=)
                          2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:19:ae:57:a9:c3:6f:f6:d1:71:95:d7:98:90:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=fd5e23ab7572ecddf4f7fe13c43ca37aa64d7ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:77:14:89:cd:b5:a9:b6:ad:15:99:9c:6a:
                    23:dc:bd:49:65:2c:43:b8:73:13:3a:02:1b:a6:68:
                    bb:5c:1b:dd:eb:f9:d0:62:80:23:f9:60:c6:f6:b5:
                    4e:21:57:a6:d5:8a:b2:36:18:3f:05:65:be:07:9f:
                    65:2e:c8:83:28:e7:51:ff:1e:09:08:92:c6:50:9d:
                    f7:7c:5a:88:8f:24:7c:80:a7:d3:58:51:2a:bc:49:
                    69:d5:0f:57:9d:10:d4:20:c6:c2:49:31:24:56:97:
                    c5:5e:3c:61:03:93:d0:ae:8e:95:09:bc:c5:88:48:
                    e1:77:a2:23:0d:cb:cd:ac:3b:7f:22:44:64:db:67:
                    3c:0b:40:67:26:4c:7e:30:3e:e6:da:0d:cd:6f:d3:
                    40:95:05:f7:8f:b4:e8:94:c9:19:c0:e8:0d:e8:5c:
                    c7:40:8a:dd:5d:ce:61:2a:83:01:83:81:99:09:64:
                    6f:a6:61:28:9e:c3:75:00:a6:40:c3:55:eb:0f:b7:
                    33:d1:ea:35:67:df:50:c3:61:da:1c:44:79:12:95:
                    40:96:8a:ac:7c:0d:67:32:1d:54:4f:55:5c:20:57:
                    e3:84:ee:cc:01:a9:f8:d5:5d:f4:c6:38:10:03:2f:
                    92:39:44:bf:d6:65:c3:bd:9d:d6:ef:0b:a0:d5:ee:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:23:AB:75:72:EC:DD:F4:F7:FE:13:C4:3C:A3:7A:A6:4D:7C:E5
            X509v3 Authority Key Identifier:
                keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:58:67:a1:c4:2a:09:ee:d3:ad:af:70:77:b4:b1:01:64:
         4d:b2:0f:95:0a:49:df:27:95:fa:2c:41:cc:c8:dc:8e:10:2b:
         ec:5f:71:9c:6b:0d:43:52:02:26:9c:65:e4:4b:1c:ca:5a:06:
         24:2a:94:69:48:e9:a4:1e:81:d1:25:64:42:e6:33:bc:60:87:
         28:79:e4:fc:c1:91:e1:93:8e:1c:60:8e:ba:33:0a:79:a8:46:
         6b:a6:33:07:44:7a:be:57:1a:26:8f:58:72:e7:74:e2:58:c6:
         61:10:45:b0:7c:8e:33:fc:69:17:cf:1d:53:e9:36:1f:d8:41:
         50:90:9c:31:7b:ed:16:02:fd:cc:2b:f7:0b:ac:2d:be:cb:7c:
         04:bf:1c:62:b7:bc:5c:b5:22:a0:a3:83:a6:ba:41:9c:05:ff:
         0e:c5:3d:b1:6d:fe:65:67:7d:e0:41:ed:2a:f9:c3:bc:fa:3e:
         8c:e0:1e:ab:5b:40:af:20:dd:9a:90:b5:f3:d9:a4:d8:d7:81:
         c4:dd:93:42:e7:9b:f0:22:c0:c5:59:6b:57:17:ae:22:f8:99:
         8e:87:75:72:3a:34:5f:2a:8d:ad:56:32:76:5e:70:56:cc:bc:
         0e:d2:4b:91:08:ab:07:b2:78:9f:8a:60:d9:75:35:78:bd:b0:
         39:ca:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----