Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File:                     uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier:          V3QUqv75f68xLrsXkhz57HbWpdpUVDhC2eCg2Jto+84=
Subject key identifier:   E2:A7:1A:4A:A9:D9:AE:13:34:20:16:8C:D1:BB:32:04:AC:0E:7E:79
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer:       /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial:       01962F74B4C00E4AFDE341B24EF558A6F3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
                          2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
                          3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: a/jlz7cNmGPcridMFu0M7c9XDMe8RAfWYtnd8Q5EchM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b4:c0:0e:4a:fd:e3:41:b2:4e:f5:58:a6:f3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=e2a71a4aa9d9ae133420168cd1bb3204ac0e7e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:97:73:eb:32:12:20:d2:fc:c6:cc:e4:53:
                    21:eb:ec:89:55:47:1b:ce:31:4b:f4:e8:65:72:82:
                    f5:b3:59:68:88:3d:94:e8:ac:1e:57:f5:94:44:5b:
                    59:40:f6:48:5b:9d:10:f0:ca:10:5b:d4:7a:37:34:
                    c2:0b:05:93:57:28:cb:f5:f4:59:f1:39:40:5b:47:
                    f7:fd:8a:24:3f:f4:e8:66:62:63:b2:5e:ac:b2:d2:
                    5a:dc:ba:84:a5:c0:0d:e1:f2:9e:6c:cc:4e:ef:93:
                    c1:62:35:88:70:ea:88:4d:50:00:86:97:62:1a:c5:
                    fa:fd:87:15:43:06:39:8d:40:51:a4:22:2d:44:c0:
                    b6:a0:c8:0c:3e:8c:b8:eb:be:5c:13:92:a4:2c:28:
                    d2:7c:c6:ec:de:f0:d8:da:e7:b9:55:79:0f:5b:a3:
                    d7:c4:68:ae:be:b1:83:b5:48:c6:97:8a:b8:65:39:
                    31:d4:db:f2:70:0d:a8:5f:e7:27:f8:31:55:71:04:
                    0b:8e:5f:bb:26:ad:4f:4c:3a:3a:7b:ad:d9:8e:06:
                    88:9e:08:77:f9:da:37:48:4c:97:34:77:47:21:d4:
                    41:53:e1:c0:3b:22:6f:fd:d3:7c:f5:f7:5a:fd:eb:
                    f5:af:a2:b3:d8:ae:40:75:5e:14:58:9d:f1:cd:cd:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A7:1A:4A:A9:D9:AE:13:34:20:16:8C:D1:BB:32:04:AC:0E:7E:79
            X509v3 Authority Key Identifier:
                keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ca:2a:82:84:d1:c6:a4:7a:7b:b4:53:dd:04:75:8b:d5:1c:
         a8:c2:41:0a:02:6b:5f:2a:3a:e7:53:20:50:95:f6:7f:a3:ac:
         3d:66:3b:2d:2f:4d:c9:94:c3:c5:12:43:4b:74:d7:63:c2:bc:
         85:3e:11:7c:61:35:2b:7f:80:db:dc:ce:ab:24:1a:81:c0:03:
         20:02:78:38:08:3d:d2:b9:c7:0d:7f:fd:7e:9e:be:10:16:11:
         81:5c:cc:c9:8d:88:f8:45:66:d1:7f:ee:b1:2d:45:6e:df:61:
         02:a3:2e:60:14:62:9b:f6:5e:ad:e2:59:90:78:99:23:24:bc:
         d0:51:64:96:6d:46:4f:f5:a9:45:d8:c1:09:78:99:93:2d:97:
         79:ea:ac:b4:7e:fa:e0:35:b2:b3:94:6c:43:d4:4a:2d:7e:97:
         2c:4a:ae:37:dc:48:d6:b6:30:9f:1f:39:0d:44:8a:94:d6:f1:
         38:78:47:da:fb:f7:5c:b1:09:69:05:8e:b8:72:1d:6f:ff:af:
         42:36:18:f4:7d:75:6f:8d:8b:0e:f5:1d:4e:e1:77:29:9c:f5:
         4e:c9:2d:c8:f0:bd:c1:9c:93:93:1a:ff:58:63:35:01:76:fb:
         24:0c:f6:68:44:32:2b:e4:34:bb:1f:db:a8:a2:77:82:aa:76:
         0b:61:b9:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLTADkr940GyTvVYpvPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjMyZDE5ZGQ4MWQ0NWMyNTkyM2FlYjRkOWE5Njg1ODc5
YWVmYTYwHhcNMjUwNDEzMTQwMTM5WhcNMjUwNDE0MTQwMTM5WjAzMTEwLwYDVQQD
EyhlMmE3MWE0YWE5ZDlhZTEzMzQyMDE2OGNkMWJiMzIwNGFjMGU3ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArquXc+syEiDS/MbM5FMh6+yJVUcb
zjFL9OhlcoL1s1loiD2U6KweV/WURFtZQPZIW50Q8MoQW9R6NzTCCwWTVyjL9fRZ
8TlAW0f3/YokP/ToZmJjsl6sstJa3LqEpcAN4fKebMxO75PBYjWIcOqITVAAhpdi
GsX6/YcVQwY5jUBRpCItRMC2oMgMPoy4675cE5KkLCjSfMbs3vDY2ue5VXkPW6PX
xGiuvrGDtUjGl4q4ZTkx1NvycA2oX+cn+DFVcQQLjl+7Jq1PTDo6e63ZjgaIngh3
+do3SEyXNHdHIdRBU+HAOyJv/dN89fda/ev1r6Kz2K5AdV4UWJ3xzc1L4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKnGkqp2a4TNCAWjNG7MgSsDn55MB8GA1UdIwQY
MBaAFLgjLRndgdRcJZI6602aloWHmu+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYt
MWRmMDllNzAxNDM0LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYtMWRmMDllNzAxNDM0
LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscoqgoTR
xqR6e7RT3QR1i9UcqMJBCgJrXyo651MgUJX2f6OsPWY7LS9NyZTDxRJDS3TXY8K8
hT4RfGE1K3+A29zOqyQagcADIAJ4OAg90rnHDX/9fp6+EBYRgVzMyY2I+EVm0X/u
sS1Fbt9hAqMuYBRim/ZereJZkHiZIyS80FFklm1GT/WpRdjBCXiZky2XeeqstH76
4DWys5RsQ9RKLX6XLEquN9xI1rYwnx85DUSKlNbxOHhH2vv3XLEJaQWOuHIdb/+v
QjYY9H11b42LDvUdTuF3KZz1TsktyPC9wZyTkxr/WGM1AXb7JAz2aEQyK+Q0ux/b
qKJ3gqp2C2G5Ew==
-----END CERTIFICATE-----