Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
File:                     UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json)
Hash identifier:          j6tXfnW3h2PaAyaE3uLP56ZzD+dXtL3Fr0/njESCWbY=
Subject key identifier:   05:69:F6:1F:B6:93:A6:65:D6:A9:92:A0:6F:32:86:30:C0:5A:EE:AA
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Certificate issuer:       /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial:       01962F3D4469AEAF235AC960D5D5C5DB34F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
Manifest number:          1450
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 67knVum1wBay7k_VNa2UY1ZRh60.roa (hash: mJTVZRqj1O7LfCpRR9HxwFssov8nRBQ/WlFjuFod+is=)
                          2: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=)
                          3: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=)
                          4: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=)
                          5: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: Re5t/J6czZy7J5Z+24lRGLXCrXCrmJaIrBEujvoBMXM=)
                          6: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=)
                          7: hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa (hash: iOQmVmIc5hJAt4h0ebp8fY1nzsr9aufJIFiZdvi/Vd0=)
                          8: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:69:ae:af:23:5a:c9:60:d5:d5:c5:db:34:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=0569f61fb693a665d6a992a06f328630c05aeeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:88:25:32:53:57:d4:42:ed:d5:b7:94:92:
                    d4:74:a6:a4:d7:60:39:c7:ee:ec:d6:fc:32:81:53:
                    e5:79:05:42:e6:13:e6:3c:9e:06:0a:d5:33:19:e3:
                    8c:60:54:40:d2:82:4a:79:cd:70:6c:48:93:7b:a0:
                    dd:69:8f:66:24:e8:11:e7:23:b5:27:fb:de:77:b3:
                    ad:67:2e:9c:a5:1c:d7:2e:2c:28:14:aa:b8:9c:fc:
                    b6:e0:bb:58:f5:35:c2:74:dc:7f:d6:5d:19:a2:53:
                    58:13:06:31:02:ad:d2:e5:1c:8b:d6:d4:98:51:53:
                    78:8e:b8:6d:c9:58:f5:16:cd:e7:39:1e:ac:4f:2c:
                    19:f4:fe:5e:35:cd:02:a3:97:a7:4b:8c:a6:a4:11:
                    bd:9e:1a:d6:6f:8c:b9:84:5f:41:02:2c:bb:27:9a:
                    64:08:be:ab:25:70:5a:59:20:9d:df:3b:fd:f7:89:
                    e8:82:07:23:1a:0c:dd:4f:c3:d2:55:a7:ca:7d:c0:
                    1c:0e:89:7c:55:46:ed:bf:ad:9c:e0:d6:6e:b6:78:
                    82:15:84:45:c8:fc:3e:32:54:c8:f7:a1:1e:d5:64:
                    08:b7:ab:a7:6d:7f:28:59:12:de:45:06:c8:09:22:
                    01:fa:1c:cc:a6:99:ad:2c:ad:7e:f2:01:06:f3:1d:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:F6:1F:B6:93:A6:65:D6:A9:92:A0:6F:32:86:30:C0:5A:EE:AA
            X509v3 Authority Key Identifier:
                keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:12:e5:0b:ff:61:cd:b0:db:89:bb:9d:97:6b:2d:b1:e7:
         12:21:2f:c9:d9:27:40:63:5f:bc:cc:18:ca:33:cd:ad:d4:8e:
         18:2c:ca:58:ad:9f:7e:a3:47:f0:f8:f1:d5:d0:b2:1d:0c:00:
         be:f2:da:a6:bc:e7:6a:30:3f:5e:f2:a1:54:8d:21:91:a5:8d:
         da:b3:03:40:64:f1:e8:d8:64:84:d1:f2:0f:1c:47:58:5c:4c:
         b6:be:20:96:6f:85:c6:7c:d4:64:ab:85:7b:aa:b1:86:2c:9f:
         83:c4:97:92:5d:ef:eb:cd:cc:f6:26:0a:6b:a9:70:d0:8f:75:
         5b:21:88:7e:c2:4a:d7:d9:e7:8e:e8:12:ad:af:aa:e8:22:eb:
         28:b0:fd:a2:ef:f2:c1:4b:09:61:1e:41:a1:67:8f:20:de:3d:
         b0:58:56:d3:67:43:67:8a:73:57:9e:98:d9:c4:3e:f2:83:78:
         cc:08:44:7e:65:6a:e3:fc:a1:0d:bb:29:f5:63:c5:10:11:f2:
         8d:11:90:31:39:be:93:69:77:a3:3c:cf:56:f2:fc:8f:11:d7:
         a8:97:a0:8f:16:ec:96:90:47:e8:c6:47:b3:06:06:e2:05:79:
         ff:32:ff:4c:eb:46:10:32:b8:fd:81:dc:03:b9:1f:b1:4b:4d:
         cd:a5:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----