Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File:                     UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier:          CWohIa0yuCn0TB1YOaUsXCm2B5jyftWQOt9EbFsG2oU=
Subject key identifier:   D0:28:36:E8:18:17:A6:C1:04:7E:A0:87:CF:24:2E:F8:D4:36:1B:A3
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer:       /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial:       01962F07424492EED87132A95258B236FA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number:          011F
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: 5eNgn1fDMdxxVok1059J5bD1cS9DGsfO2mSQNA5VPds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:42:44:92:ee:d8:71:32:a9:52:58:b2:36:fa:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=d02836e81817a6c1047ea087cf242ef8d4361ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:20:95:4d:a2:ab:8b:38:62:69:cf:56:1d:
                    34:a7:2a:5c:4c:b6:88:eb:d0:d6:9b:cd:40:5b:16:
                    d5:b7:b0:11:88:a6:49:81:9f:47:2e:d6:81:c3:8d:
                    1c:3f:3a:80:9e:24:39:4d:4f:2f:fd:df:b5:65:71:
                    fd:31:ae:23:0a:72:21:ad:79:c6:84:cb:d3:39:1a:
                    a4:06:36:d7:66:a3:db:53:d1:b4:b6:ae:b3:1d:5e:
                    51:30:1c:0e:b6:da:30:3a:04:76:a4:70:c6:31:ed:
                    d2:b6:a2:9e:b0:d4:1e:d8:18:22:ef:82:d5:f5:19:
                    b3:fb:40:98:db:85:e5:fe:f2:51:68:b6:cd:5c:2f:
                    f7:20:74:6f:4a:ca:b2:a4:f3:38:8a:2d:03:8b:6f:
                    8f:2b:1c:14:f2:ba:aa:5f:4c:fd:f6:c3:2e:af:10:
                    8f:24:74:97:e6:70:bb:e5:ef:1c:a2:6a:94:0e:ad:
                    46:98:37:9b:cc:c7:98:2e:f1:e0:8e:7c:7e:52:0d:
                    80:11:1b:7a:fb:ca:31:82:d8:6f:8c:aa:c2:68:f2:
                    9e:26:76:06:49:6e:4a:d6:14:b2:37:15:73:cb:23:
                    ca:c2:ef:17:be:ee:1a:77:a4:f3:2b:87:3d:a5:6b:
                    c5:48:d4:8b:2c:6e:84:e5:c0:c2:8e:db:68:b5:9b:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:28:36:E8:18:17:A6:C1:04:7E:A0:87:CF:24:2E:F8:D4:36:1B:A3
            X509v3 Authority Key Identifier:
                keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ef:30:98:8e:a0:2a:e0:c8:ec:53:19:b4:7e:ee:0f:a0:b7:
         1f:52:1a:7c:5e:02:3d:8c:37:a7:f6:08:04:c5:eb:ca:71:c4:
         35:cd:78:40:e0:fa:72:a7:0f:6c:3a:cf:f3:fc:53:1f:21:40:
         9b:92:b7:93:8f:bb:7d:27:a6:fa:05:1f:34:8f:c4:5f:bb:51:
         9b:47:93:3b:e5:f6:b2:70:f5:39:d3:79:c7:77:76:43:70:21:
         f8:c7:9a:b5:61:27:be:bf:7a:03:cb:8d:b9:2c:d7:47:9c:34:
         ca:8d:4a:8f:74:48:70:f8:cb:9d:df:fa:22:b1:1e:c0:54:2c:
         8a:13:8f:00:28:98:92:1c:b4:2f:2e:29:b6:aa:cd:56:2f:b6:
         80:f8:27:00:4e:30:5f:16:79:96:c1:07:35:44:96:15:35:e7:
         70:40:42:93:d3:b1:fb:5f:f6:4f:44:a0:ea:10:15:b9:c5:25:
         84:be:4f:aa:db:61:8d:21:c2:a9:94:aa:e1:aa:5e:80:bd:65:
         bb:0e:78:44:19:8a:75:5d:c6:23:14:12:57:f6:f3:5d:7a:75:
         cc:e6:0e:a0:3c:32:03:28:13:7e:46:b4:04:95:8c:7c:7c:7a:
         47:59:3c:41:5f:10:a1:5c:c2:50:75:14:c3:ed:4f:a6:34:b2:
         fa:7e:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----