Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          LwRIUi4eaPQbOppy33U3ybzBIW2ZN3a/4xv95MSZTEk=
Subject key identifier:   57:6F:32:74:49:11:4E:3D:55:CD:8A:A9:49:43:F0:71:B3:18:62:34
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01962F3DB35B00B9A09D864F3C20E98753B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          BD
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: A6dZ28bFySvaMBhoT9jt7DSRZlg.roa (hash: IQKtxSZapj5DsFmIvsYPoKUBH869918mHaZPMS57YRY=)
                          2: MQhpzAlilK7Yq6F1sSVRWpbInrU.roa (hash: oPF7sitJ4zPDpIEln2I0Bk/n2GZeoTKDV06cS72G7ng=)
                          3: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: SuqxRBC0gq2lXWHlZpHE1ckH8hXSK1YFV62pJQAODiY=)
                          4: uYST-R1VCa1nkCbgNf5eul_FVz0.roa (hash: S1oKCmzZMf9D6tXzAhbC+DOsODz5Q8Mt3t1FForkEWM=)
                          5: vjHRtpa8vAFScWSYp1ZeGUk89kA.roa (hash: dMn1XDEIhPP60lEIdmR9LVkqJefLKzTxfXn0U7ywUgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:5b:00:b9:a0:9d:86:4f:3c:20:e9:87:53:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=576f327449114e3d55cd8aa94943f071b3186234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:41:d5:6a:de:08:ad:98:93:41:e9:bd:24:
                    28:93:cd:70:f5:25:bb:45:d6:70:02:c3:21:9b:4b:
                    b5:25:1c:28:61:ff:d6:f7:d1:8e:f2:b3:01:1e:87:
                    12:ca:c3:3d:91:78:a4:27:35:2d:d3:96:25:87:28:
                    38:db:40:3b:a1:0d:22:46:7d:5e:58:76:b0:14:ef:
                    22:8d:e2:65:db:88:15:6b:c4:26:5a:14:17:84:b7:
                    95:a2:69:07:74:a1:e6:8e:b0:1d:66:b4:54:eb:8d:
                    1e:e4:e3:28:3c:dc:99:b2:01:f5:a2:94:db:a8:af:
                    f5:d7:d9:ec:7a:a3:94:24:4d:1f:35:58:06:e4:26:
                    d9:98:c1:06:dd:0e:34:99:90:51:28:ef:3a:9b:97:
                    57:d3:8e:9f:e7:ce:1b:3f:18:da:a8:1b:13:75:5c:
                    dc:e5:81:9b:f0:35:38:83:79:98:32:47:f8:db:b1:
                    ae:32:f8:9a:0e:92:69:c2:2b:35:d2:46:b4:68:ae:
                    43:6e:a0:3f:63:30:96:d0:29:20:b8:e7:9f:96:0e:
                    ee:20:9c:52:f1:9e:cc:bf:e2:19:18:5b:83:93:09:
                    42:5b:e7:53:a9:03:47:bc:cf:61:eb:e9:d7:ad:c8:
                    0a:1a:47:7e:5a:bd:7b:c9:14:7d:d4:be:0a:c1:7b:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:32:74:49:11:4E:3D:55:CD:8A:A9:49:43:F0:71:B3:18:62:34
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:21:0e:7b:50:55:50:00:99:c2:05:56:72:63:7b:5b:eb:65:
         4c:8b:6b:ec:59:01:e0:a1:f4:05:8a:2e:ba:39:5a:4f:98:ae:
         50:d6:f0:95:f2:00:3e:11:81:3c:25:b9:7e:fa:f2:9b:81:9a:
         25:4a:06:0d:8c:cd:43:c6:b1:03:5b:45:0b:72:c1:b6:dc:ca:
         6d:6e:27:29:c4:e3:73:9d:03:e6:53:f4:e6:18:49:a0:71:5c:
         77:1b:55:ff:de:3f:28:2b:e4:35:1e:cf:a4:e0:4a:47:2e:82:
         0e:ab:2d:49:a0:0d:16:73:4b:c8:69:b9:bc:ec:bd:0b:db:3b:
         2d:9a:aa:05:bd:0b:ac:fe:5c:fa:58:78:47:c3:29:79:fd:ad:
         1e:f6:a7:75:86:53:92:11:8b:9d:4b:b3:e6:da:96:52:c9:8f:
         05:d6:80:c5:d1:a7:2a:c9:41:f2:07:7d:63:97:e5:b9:19:00:
         a7:3b:d0:e0:d3:3c:78:38:2f:07:fc:c6:77:20:d7:ab:92:fe:
         32:91:96:60:8f:9c:90:0f:d5:f9:a3:84:60:1e:93:97:9f:d3:
         f3:f2:0e:64:1b:d9:92:5e:33:2c:b2:9c:ce:51:5b:1e:3e:94:
         d6:68:de:56:6b:a6:63:95:b6:b2:60:9e:5a:89:22:a0:ac:95:
         09:2d:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----