Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
File:                     Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft (raw, json)
Hash identifier:          d8r6X1NrTomRC8lABEIMqGwur0z57hon6aoYefdCqxY=
Subject key identifier:   60:D7:98:2D:80:7A:C7:FD:EE:68:1F:9C:F7:5F:23:67:18:B5:ED:7B
Authority key identifier: 53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C
Certificate issuer:       /CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
Certificate serial:       01962F3DAD997F55D0DFBAB1C5CF50325A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
Manifest number:          068D
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl (hash: rSoc9YhvvYssq0/IF1sYMLevprNuIma7LhjP8meQcMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ad:99:7f:55:d0:df:ba:b1:c5:cf:50:32:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=60d7982d807ac7fdee681f9cf75f236718b5ed7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:5d:99:02:1e:e6:8f:70:0e:4a:93:7d:a0:
                    9b:10:4f:db:48:56:0a:9c:f9:60:1f:39:42:83:a5:
                    7d:95:36:05:e8:80:02:c2:2a:c7:9b:bb:f0:37:46:
                    53:52:64:ca:b7:97:0d:51:69:c4:ee:0d:67:c9:0a:
                    02:04:c7:9a:88:90:d8:5c:94:5c:54:27:ec:f4:9d:
                    53:1e:81:be:70:b2:23:9f:ed:d8:3e:7b:22:38:e9:
                    a4:24:23:1f:13:39:22:55:5c:5c:56:4e:2b:bf:8f:
                    de:aa:ac:6b:b7:1a:01:65:de:4d:7a:91:9a:6c:c0:
                    7e:76:6a:85:38:55:3a:0d:13:57:24:c4:ae:a0:78:
                    74:19:b9:1f:83:69:25:37:df:27:41:7f:2f:00:2c:
                    63:8f:ab:a7:e0:83:06:23:04:c1:71:e7:65:f6:7a:
                    db:c2:4b:76:9b:fc:67:3e:32:10:7d:7e:5c:90:2b:
                    eb:02:6b:d4:e5:42:f4:ea:b1:e1:4c:44:0d:25:23:
                    70:27:58:c8:c0:76:c0:95:13:40:34:18:83:ef:ad:
                    32:3c:69:66:11:1d:30:08:03:18:e7:8d:f8:9c:d0:
                    aa:f7:0f:21:57:78:c6:a6:ca:66:0a:57:a9:ed:40:
                    94:95:b5:06:8e:3e:a6:ab:bb:5d:d7:1a:bd:77:9b:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:98:2D:80:7A:C7:FD:EE:68:1F:9C:F7:5F:23:67:18:B5:ED:7B
            X509v3 Authority Key Identifier:
                keyid:53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:44:e9:52:ec:5a:d8:a6:af:8e:57:aa:92:8c:de:1f:1a:86:
         67:6d:5b:66:cc:f2:9f:9c:81:70:95:8f:f9:c3:06:98:fd:8b:
         47:0b:be:7c:20:44:ca:d1:44:d8:a7:b3:54:61:ce:01:04:ef:
         68:e0:6b:6d:f7:bd:32:69:40:5b:f0:c4:2a:5c:c7:1e:d4:5a:
         ae:46:6a:08:35:03:2b:1a:7a:35:48:2a:16:a7:85:06:4f:10:
         1b:4c:a4:cc:b3:e4:2a:e8:80:9b:15:4f:08:ef:43:b5:95:d1:
         68:6d:1f:2e:d6:d4:1e:13:ef:06:ba:8a:c0:ce:67:c4:6e:22:
         a0:d5:a6:66:d3:3a:5e:c4:2a:e4:10:45:7f:23:72:a0:2b:ab:
         54:09:93:33:ed:05:03:8e:b5:5a:28:02:ba:ad:eb:da:0d:00:
         0a:ff:0a:47:c9:80:92:c6:be:e5:35:cd:1e:95:d7:f6:0b:50:
         9d:ab:7b:a6:bf:0c:50:a7:97:0f:5c:c7:bb:63:6a:3e:9b:29:
         71:60:25:d7:fa:9c:a9:71:92:ac:fa:89:f6:b4:23:79:56:e6:
         32:cf:1c:90:c3:2f:e2:2a:a5:7b:62:d5:14:01:77:42:e3:d4:
         6c:ae:4f:fc:93:37:e3:f2:1e:f0:d0:c9:d2:c1:5a:bf:af:2e:
         99:1e:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----