Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
File:                     UpwnMJi1J2jKDkSjosFu_tSmXKA.mft (raw, json)
Hash identifier:          pVKDgYZpeiN8tGF/v2arIFpuwAJ9r+qBw+QyBkC9eZo=
Subject key identifier:   5C:66:15:DA:F6:EF:2D:FA:F7:98:E8:2B:19:FA:4B:6B:B4:61:6A:9C
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Certificate issuer:       /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial:       01962E2B1409A59457BE577A08521C440909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
Manifest number:          1505
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: MJhgLu59YXAjx2CDwZQ7L8x1uhk.roa (hash: oBmd+orh6Kz8QYSvJuroMg2z2WEqmWjCN/qb8cgW+K0=)
                          2: UpwnMJi1J2jKDkSjosFu_tSmXKA.crl (hash: BRvkcq8/UuwKBWiRH0XyjxR0eyk7diJTUm+23whB79w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:09:a5:94:57:be:57:7a:08:52:1c:44:09:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=5c6615daf6ef2dfaf798e82b19fa4b6bb4616a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f9:14:0e:9e:df:ff:38:17:8f:e5:94:7b:d6:
                    7d:5e:8f:08:13:74:6a:b5:d1:b1:23:ee:4c:f5:74:
                    a4:75:14:4f:a4:28:4c:45:4b:3e:66:cf:85:4d:4b:
                    3b:aa:19:3c:82:62:b6:12:3f:40:fd:49:1f:c3:93:
                    a2:81:f0:d7:5d:f0:f8:45:90:57:fc:df:b9:b2:ee:
                    5e:43:7c:85:0e:16:93:ca:e7:0d:69:14:6f:6f:00:
                    c0:a0:bb:88:f7:78:c1:22:af:de:2a:09:3f:da:c4:
                    b2:99:9f:bd:69:89:8b:5d:1e:af:d4:22:9b:0c:55:
                    93:d4:e1:88:4e:87:47:f8:99:15:a7:e5:a0:7d:27:
                    7c:20:93:23:94:6e:e0:8a:5b:61:35:0e:3c:ce:41:
                    c6:83:03:7d:4f:57:9b:16:01:83:9d:c3:4b:cc:56:
                    81:c0:11:2c:a0:0e:0e:41:6f:20:9d:ec:b7:41:35:
                    8a:6c:c6:5f:91:78:a4:fc:0c:f9:71:4b:d8:77:3a:
                    3e:71:f0:3e:6e:9b:d1:f0:9f:05:bf:e2:1d:29:90:
                    cb:01:65:95:df:88:02:cd:be:b7:d0:f5:80:26:a1:
                    1b:39:64:f7:5d:5d:7f:7e:01:9e:fb:f8:b0:8e:89:
                    4b:30:a6:9e:fd:57:48:b3:68:4b:8d:7e:eb:33:bb:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:66:15:DA:F6:EF:2D:FA:F7:98:E8:2B:19:FA:4B:6B:B4:61:6A:9C
            X509v3 Authority Key Identifier:
                keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:82:a9:00:0b:55:9d:a3:8f:db:60:9b:45:0e:17:ea:98:
         b2:cc:a4:4c:94:7e:0e:25:c7:ef:c3:3b:a5:0b:e8:0e:ee:70:
         d6:00:4d:a3:ad:10:1c:81:73:e3:62:ec:4c:10:e2:9a:0f:bd:
         9b:f8:e0:a2:57:ff:53:24:50:79:a6:0f:97:b7:d2:b4:fa:da:
         da:bc:17:e5:2a:d1:67:9a:a2:22:92:ba:4c:9d:cc:1a:00:2f:
         82:dd:06:3b:57:00:d4:ff:3c:36:da:06:20:6f:6b:72:df:2f:
         25:2e:e2:0c:2d:6d:2b:60:64:6d:77:cc:e4:b4:bd:7f:0b:e4:
         0d:e7:aa:19:81:26:4b:42:4c:98:b9:2b:85:e3:dd:63:f4:46:
         f4:50:3c:f0:27:5f:e7:a5:84:74:e4:69:31:6f:ef:13:aa:dd:
         fe:58:aa:f5:0a:08:a1:4b:2e:2b:8c:58:f2:f9:ed:ca:10:5e:
         7b:d7:8a:f2:8d:de:80:37:d7:c8:b5:62:af:e9:81:13:ce:5f:
         ef:77:2b:ad:ee:87:35:38:86:98:01:ef:a7:b0:e0:a3:36:41:
         ce:10:db:c3:e2:87:59:5c:01:96:c6:5b:c4:26:a8:31:9f:f3:
         f9:e2:5d:30:75:a2:fd:34:ef:cd:7d:0c:ab:4e:fc:dc:bc:63:
         0d:8f:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----