Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File:                     UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier:          7yFzHcwuoR0I34Rcga0LTzfqQzgFKQrgd00bMMpKvGE=
Subject key identifier:   A2:A1:8C:94:9D:9A:F2:9C:CD:E9:6A:00:79:04:7A:00:3D:A8:32:12
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer:       /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial:       01962F3DBED2F713DA9EE8B5371C3FBD06EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
                          2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: fP+4GVGxDYaC2OAOBN5dvYx2uxZ5m0lFulzps/cfyJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:be:d2:f7:13:da:9e:e8:b5:37:1c:3f:bd:06:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=a2a18c949d9af29ccde96a0079047a003da83212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:3f:11:af:d8:de:35:3f:c6:92:dc:fb:09:
                    42:d0:ba:89:11:70:e8:b3:15:c8:a2:c2:7c:bb:1e:
                    f2:46:72:44:bc:d9:4d:8c:2f:c5:cd:1d:0f:3f:71:
                    71:ec:22:ac:fa:4e:d3:45:01:fb:0d:08:a2:6a:e8:
                    a3:cb:52:5f:e3:2b:15:0a:1a:56:83:f6:7e:04:d7:
                    d1:87:30:cf:b6:94:bb:5d:8f:ca:ac:03:85:d2:b9:
                    34:b6:db:ea:4a:1d:6e:93:04:a9:9a:74:45:0f:9e:
                    e5:9c:b2:22:04:83:a2:f8:26:a7:98:3a:1a:fc:22:
                    4d:8a:0e:b2:3a:83:55:8a:9a:d8:ed:fc:81:2b:ff:
                    db:fe:aa:7e:44:4a:f2:e8:e0:7f:dc:df:c0:b6:22:
                    36:a3:29:57:34:2a:c3:27:77:62:7a:d8:af:38:2f:
                    46:96:77:06:63:12:2c:2c:53:6d:54:2d:ee:03:a5:
                    61:88:80:fc:43:06:ef:9b:d8:22:05:70:e4:8f:5a:
                    b9:8a:67:20:40:5b:b8:1c:9c:4c:91:19:fb:de:cc:
                    59:7e:29:19:9b:94:bc:34:07:83:96:58:c1:f4:e1:
                    8d:e2:39:c4:ef:70:15:0b:74:a5:69:56:2b:c4:83:
                    f6:de:19:e5:0d:af:11:a8:59:af:cb:69:03:26:26:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A1:8C:94:9D:9A:F2:9C:CD:E9:6A:00:79:04:7A:00:3D:A8:32:12
            X509v3 Authority Key Identifier:
                keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e9:b2:ae:19:c4:73:58:6a:bf:e2:10:6c:05:d4:a4:f5:bb:
         bf:a8:90:49:45:8b:be:bc:86:96:c3:80:a1:9c:7f:b8:57:18:
         f5:c1:40:b5:d1:be:c9:7a:42:d1:1b:08:81:e2:c3:12:7d:4b:
         2f:ad:0f:21:74:86:34:44:f8:5f:c4:dc:d0:9c:95:4f:7a:db:
         34:b2:b0:0c:2c:71:92:4b:97:67:1b:29:54:40:cf:8e:87:e8:
         9c:fe:2b:c7:e6:29:94:98:f5:b6:ed:34:4b:f7:79:8d:4e:2b:
         37:31:09:7d:47:b1:7d:c3:35:03:2c:d4:c6:98:b1:da:f1:9e:
         55:02:60:50:0a:4a:c9:43:7e:33:88:f6:f5:88:4b:3e:67:f4:
         1e:d2:0b:01:73:55:48:e6:82:f1:c9:2b:b9:b4:fa:2b:d2:94:
         70:d4:47:65:06:1c:a6:3a:77:46:a8:90:10:b7:5a:71:49:9f:
         11:ac:4c:27:7a:65:7e:95:32:e3:85:53:4f:a6:a9:41:8b:8a:
         64:aa:5a:7e:46:04:d3:ac:c5:d4:e4:5e:2e:3a:30:25:95:32:
         be:cd:26:5c:8e:fb:cc:b6:72:81:d6:a4:28:a9:30:5c:2f:11:
         1b:a6:b3:73:a9:fc:29:4f:c1:58:1a:16:31:40:98:37:25:96:
         34:35:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----