Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File:                     upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier:          UOk5TiXZba0QXn7RZgL7lEB46/2OA77Qr3xCdgEfDwM=
Subject key identifier:   83:9B:CB:B5:AE:49:C0:A0:DE:A7:A2:A4:F2:16:EE:FC:2C:EE:53:81
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer:       /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial:       01962E98EB83FD935213E888FD3B187D6E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number:          0A5A
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: NPimAU5BLqUQHT/5s5OdfCic8zsO1ueUzRI3Luqsyso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:83:fd:93:52:13:e8:88:fd:3b:18:7d:6e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=839bcbb5ae49c0a0dea7a2a4f216eefc2cee5381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:7a:0f:f2:c1:28:24:3e:43:d6:31:e3:89:
                    40:0c:eb:7e:41:34:0b:6e:2a:3b:ac:5d:8d:e4:5b:
                    ea:a3:d8:8b:5c:11:a3:ae:dc:3d:70:ba:ca:30:a8:
                    07:c5:c9:78:02:77:57:26:a2:1d:2c:74:8d:e6:a5:
                    67:ff:c4:4c:4d:e6:97:0b:48:0f:1b:82:47:5b:a0:
                    64:c3:6f:a7:3a:57:07:62:67:12:09:2a:1b:d9:c4:
                    17:e1:0e:dc:3f:8b:28:f3:11:eb:1e:db:42:36:cf:
                    94:6c:a0:f8:bc:58:24:86:2d:31:d4:88:44:e2:55:
                    6b:fe:e1:f0:4e:dd:79:34:52:35:01:d8:98:51:e8:
                    e4:7c:84:a8:e0:54:48:85:d9:5b:ee:3c:2e:8a:fd:
                    39:21:5a:0b:9f:16:d9:5b:80:49:a4:c6:ef:84:ac:
                    05:a4:17:d0:d3:4f:1f:cc:a4:41:b5:37:51:7e:72:
                    5b:57:a4:37:63:ac:83:62:12:69:cf:e5:5d:c3:f3:
                    ae:e4:9a:71:36:d4:38:f2:bc:f3:d3:e8:26:e4:c5:
                    20:2c:f0:93:e4:74:11:3e:4d:32:5c:40:24:05:4a:
                    7c:ed:52:9f:ef:34:a4:53:20:cb:24:74:b6:1d:1e:
                    6e:fe:27:44:d8:93:dd:96:b2:f6:62:de:ea:02:e7:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9B:CB:B5:AE:49:C0:A0:DE:A7:A2:A4:F2:16:EE:FC:2C:EE:53:81
            X509v3 Authority Key Identifier:
                keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:b0:47:e5:d9:be:f0:39:ef:83:e4:69:74:16:b9:aa:a1:
         0c:d4:25:73:81:03:bf:64:76:06:99:f5:fb:0f:a0:4b:7f:14:
         45:61:d3:26:24:15:49:bc:14:18:31:e0:33:af:a1:bb:a9:e1:
         60:63:2b:c8:57:d6:b8:c5:de:1f:af:6b:07:d8:b8:d8:74:a0:
         a4:90:9b:61:fa:db:47:2e:b7:15:fe:31:ea:1f:fb:b4:ef:e0:
         0c:12:18:8e:48:35:41:8b:1d:d4:04:74:15:24:45:c2:b2:f7:
         6e:10:e2:6d:90:bb:ed:39:13:fe:d2:e5:2e:8c:69:fe:e2:bd:
         d0:44:41:d3:8f:09:06:67:2a:9f:8e:ef:a5:47:94:1e:36:8b:
         26:10:38:09:2a:7a:93:e5:a5:50:46:22:c7:26:4c:9e:10:05:
         ed:a3:75:d3:dc:bc:17:73:c4:2d:00:6a:28:f2:ff:a6:d1:79:
         e3:02:94:44:1e:37:94:fb:63:bb:a7:c0:34:d4:86:88:4f:e4:
         9a:24:e2:b4:6f:ce:79:18:28:15:3e:35:fa:3c:f5:54:40:3f:
         1c:bf:75:2d:8e:fb:bc:af:64:bd:83:3d:de:7c:59:b7:29:ce:
         f2:d3:09:78:86:18:2a:85:e5:42:02:95:ed:01:81:c8:b9:74:
         f7:eb:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----