Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File:                     g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier:          nnIF5fAh0WA0bd5nc1h13Obht0u4H2bSt6oPkwkqnZU=
Subject key identifier:   15:3B:F4:C0:DE:26:86:A7:68:C6:6C:00:89:7C:0F:C7:8A:62:06:37
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer:       /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial:       01962F7450412B4CAAA40CF15881F741AB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number:          0804
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
                          2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: 4cdgTJeZQFPE/SJg5m5iGA+1jvtMcjctg27VYuN/96Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:41:2b:4c:aa:a4:0c:f1:58:81:f7:41:ab:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=153bf4c0de2686a768c66c00897c0fc78a620637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:64:c8:01:d6:7d:52:fe:e2:10:12:a3:da:
                    c8:e4:c0:08:13:81:b6:9c:90:8c:2e:fa:9d:24:61:
                    c0:d3:ae:c8:58:02:7c:e3:0c:00:ac:2b:1e:d2:fc:
                    7b:82:d4:04:40:83:b7:9e:83:57:0f:4a:fd:ac:20:
                    a2:f0:c1:a3:5f:58:7d:c4:a5:e4:d5:5c:25:49:02:
                    cf:36:1b:9f:99:c1:a1:9c:6a:48:c0:72:62:d1:14:
                    62:27:88:37:7a:ea:6c:df:8e:55:6d:94:82:83:42:
                    bb:f5:1b:18:02:db:83:88:9f:ff:78:9c:e3:85:ec:
                    aa:d8:e4:b0:9c:6b:53:b0:c3:bd:5a:12:d1:b9:fd:
                    26:e5:df:30:12:87:c8:08:58:5f:00:ef:bc:cc:bf:
                    4e:af:f1:9c:b6:21:29:af:5f:45:c5:7e:0f:f5:ba:
                    89:ee:d1:fb:34:9e:48:0b:92:c3:69:95:93:aa:90:
                    d5:fb:74:5a:9c:2c:c5:95:91:4b:8f:45:c1:c4:b8:
                    95:f3:ff:03:31:99:d1:f4:d7:59:2a:e6:65:80:8b:
                    dd:87:f9:8e:22:8c:c9:50:89:34:35:c4:53:68:ca:
                    26:eb:f7:55:30:7d:e5:01:5d:89:06:9a:28:9b:da:
                    9b:a1:d6:7b:b1:56:52:58:4b:ef:dd:86:16:ee:8d:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3B:F4:C0:DE:26:86:A7:68:C6:6C:00:89:7C:0F:C7:8A:62:06:37
            X509v3 Authority Key Identifier:
                keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:a1:e1:5d:4a:fa:2b:50:93:94:0e:0e:ad:aa:d1:44:25:
         2f:1c:2f:f4:a1:f7:a3:74:71:52:b5:80:19:9d:1e:55:31:e6:
         8a:74:2e:5a:b5:12:f2:65:f0:57:5c:c9:d1:cd:8d:23:49:8e:
         7f:3a:ca:cb:f4:9a:13:7d:5c:3e:97:d3:da:9a:6d:12:7a:8a:
         8c:d3:7e:70:ea:76:27:cb:92:3f:92:71:36:1b:49:f8:ee:48:
         53:72:28:75:d5:66:59:37:ce:16:27:44:b2:f0:42:b4:f8:3d:
         8d:32:88:d5:ff:80:1d:6d:36:5e:fe:5e:26:03:1d:b5:e0:61:
         0b:3a:56:42:57:73:1c:53:41:b5:88:83:48:3c:0a:71:a8:1d:
         5d:42:c7:cb:ec:7d:d4:fa:84:a9:75:2e:a2:b5:9c:d7:6d:64:
         2b:23:24:7d:63:23:8d:4f:83:6f:ed:a0:69:35:ab:57:08:74:
         04:bb:ed:76:79:65:08:b8:34:df:7e:d7:65:47:58:0e:fd:88:
         e5:8f:f9:ae:18:f6:69:6d:94:5a:f3:89:11:c1:1c:99:44:db:
         df:ac:f3:f9:06:58:09:3d:44:42:8b:41:35:26:b1:0e:2c:2e:
         e8:12:9c:c5:c7:4c:84:01:ce:6a:84:4d:c6:21:89:97:a4:4c:
         b3:0d:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----