Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File:                     UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier:          dvLBX/9NyJvtnQFysH1lubl+EtH9gL1k12lZCeNPVIg=
Subject key identifier:   E9:22:9D:B4:6A:E0:1C:CB:77:AB:F2:2D:C3:7C:4F:FF:7D:5A:6A:23
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer:       /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial:       01962F06A0F8262655F501220E7E2AC18B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: S1ui4XpVCTm1Vm2OpLHGmY_ZuN0.roa (hash: 3qwiok+pffK8+ko0f890CJV54WEIRSPAcVGZFhekYsc=)
                          2: TQyjECyEBDxHd5gx-OyJlZ_34yY.roa (hash: M5RNaPyCpCIK/N3qNnK5z9iSP22MQyKR8Rdy90hwwOM=)
                          3: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: j5ChDQk9fOBm7v3GBfja0v9/v3PzKbcsMhsChLAwnrE=)
                          4: b1LALp9SBNFAhdgVfZrDsmuoQEY.roa (hash: ACP3NLutTv8BHg4ln+aJA7SrAoY5TSD3O9XL2uHX6Pg=)
                          5: k9a98NqHjelrZVUWhKMb68LgxUE.roa (hash: 6VyAIEvjXORry2KtmNbj+FoMHc5b899/tsCBJkg8fEY=)
                          6: ovtcp22HNBJ9uUnNrEbA1Kgt9fo.roa (hash: LSCYzsKYL8WpLFlLkr/4DVnc2AZfaRsxdNXTyUzOti4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:f8:26:26:55:f5:01:22:0e:7e:2a:c1:8b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=e9229db46ae01ccb77abf22dc37c4fff7d5a6a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:c5:ff:ab:d2:87:91:47:cd:fc:5b:21:a1:
                    10:2b:02:5b:ee:cd:c9:f9:94:44:d5:e9:90:06:61:
                    32:55:32:50:aa:88:cf:c2:f7:25:a8:cd:34:5f:b2:
                    3f:cf:a7:03:fc:8a:1d:5a:e6:60:ee:c4:32:19:18:
                    dc:d0:be:d5:7b:2e:0e:67:6e:8a:d9:c0:2d:84:3e:
                    94:e1:ef:90:9d:32:e3:1a:7f:91:83:fe:98:91:1f:
                    73:46:c6:b0:f4:c9:ad:51:81:12:95:36:05:39:5e:
                    6d:62:2d:13:57:3c:c2:ed:25:cb:4c:0a:4f:73:85:
                    58:59:04:b3:1b:ee:5a:71:12:41:7c:f1:95:a2:8b:
                    45:26:09:fa:bf:d8:32:17:05:aa:33:5a:19:a8:18:
                    9c:dc:bb:f3:2b:27:80:69:d1:1d:4e:6c:1c:b9:47:
                    ca:95:e0:f1:18:79:9c:64:80:3d:3e:a5:23:c5:7c:
                    fb:17:81:4b:d7:fa:51:bd:65:d1:16:4f:cd:0d:67:
                    11:bc:09:a9:db:7a:f2:f5:73:81:11:40:cc:41:36:
                    85:ed:bc:4a:0c:fa:a7:65:46:a4:64:93:0a:68:cd:
                    71:da:43:55:57:2f:3a:4b:76:d5:e8:65:5a:44:03:
                    b0:b3:75:bf:c4:c2:d0:b2:66:a3:6f:ed:ac:da:cb:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:22:9D:B4:6A:E0:1C:CB:77:AB:F2:2D:C3:7C:4F:FF:7D:5A:6A:23
            X509v3 Authority Key Identifier:
                keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:68:47:38:33:6a:33:45:58:f0:34:a4:4a:28:f7:70:47:83:
         c0:af:92:9b:2f:e8:de:a6:7f:0b:b4:f1:fa:bb:7f:c3:9a:5b:
         7f:33:85:20:5a:32:6b:a2:0e:0f:3f:04:7c:7f:70:1f:9c:c9:
         ec:25:96:63:92:02:24:0b:38:36:3b:ad:36:7b:f0:9f:31:ec:
         a6:61:53:59:46:32:00:1c:4f:c1:04:04:34:d7:e0:0c:7e:ed:
         98:12:3d:22:d8:82:57:47:0b:27:22:8b:c4:f3:d7:4b:7f:10:
         88:31:4c:31:7a:ba:88:3d:a4:a7:80:0d:20:50:b2:9f:a9:c5:
         de:c4:cd:0d:7a:20:db:ea:0e:70:d2:09:c5:fb:f3:e6:4f:f8:
         bd:70:13:94:bd:34:d9:a5:89:c8:9a:b7:43:23:b8:36:aa:6c:
         dd:59:a8:2e:2c:a4:b5:25:ed:9a:f8:c7:a8:3a:26:75:85:4d:
         ad:3e:b9:93:0a:c4:76:fc:8e:a0:3e:0a:00:4e:ed:6c:e6:52:
         f3:6a:5f:3f:5b:55:53:88:2b:6c:a4:45:a5:ec:15:56:d2:08:
         4d:e7:1d:67:bd:a6:34:56:13:86:d6:74:a1:95:45:67:14:9d:
         e8:c3:a6:73:e2:7d:5a:0c:65:bf:b4:ec:20:aa:ed:82:3b:16:
         4c:7a:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----