Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File:                     UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier:          ote0jmH3Kj1Na8zjkjqryIHfkEbKYt7Zagohu4x0xbY=
Subject key identifier:   F6:83:8F:4B:FB:B4:55:87:22:5B:86:D7:5E:25:79:B1:6D:C0:38:5F
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer:       /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial:       01962DF3CF2A12916196B4CA61BF72130763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=)
                          2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: tq12GpfgSMmd/fGjoVie5O5AA6xUXQmceCmw//b8nY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cf:2a:12:91:61:96:b4:ca:61:bf:72:13:07:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=f6838f4bfbb45587225b86d75e2579b16dc0385f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:17:01:a0:60:7d:c9:0d:56:59:01:d1:cd:
                    b3:2a:85:44:a3:a0:2c:4d:51:a9:da:bb:da:5f:bb:
                    df:a9:4c:de:e1:e5:96:4e:2f:50:54:df:8b:83:2d:
                    97:69:dc:a7:1e:86:cc:27:6d:97:e4:51:cf:3c:35:
                    51:aa:b6:71:c1:0e:cf:74:4b:32:39:65:41:fd:97:
                    5c:77:e8:af:37:d9:9d:ed:95:54:c9:c0:77:ed:82:
                    92:3e:18:6d:5c:ae:fc:86:be:af:1e:0d:12:66:bd:
                    a1:e4:35:3c:a2:4b:66:f6:8b:a0:59:85:3c:6b:c2:
                    7d:e4:e9:df:06:ce:ad:40:0a:51:cb:22:09:e2:63:
                    c1:e3:88:99:be:da:84:71:65:b1:12:87:23:04:5c:
                    d0:03:cb:0e:a2:eb:68:b8:91:ed:7d:38:f9:b8:40:
                    13:b7:97:6c:78:a8:b0:52:bb:0f:1d:f9:9c:88:ea:
                    b5:66:fd:d0:ec:a7:e1:60:da:5b:20:ee:b4:c7:ee:
                    07:67:7b:c8:8c:77:8f:be:22:b3:05:e9:3f:3a:3d:
                    ed:18:a5:9d:4b:f4:71:78:22:22:27:f3:ee:fd:dd:
                    34:25:7b:ce:17:4c:a1:30:97:04:f1:a6:b4:70:f0:
                    d2:6f:c6:fb:d8:f6:33:88:46:2e:ce:38:7a:95:c9:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:8F:4B:FB:B4:55:87:22:5B:86:D7:5E:25:79:B1:6D:C0:38:5F
            X509v3 Authority Key Identifier:
                keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:65:7a:50:c0:b8:29:d7:b5:0e:26:16:d3:f0:06:a2:3d:
         21:af:8a:df:14:f5:d8:bb:23:16:9e:ee:9d:9d:39:d6:9a:32:
         e0:a8:65:8b:aa:8d:5b:24:08:a9:47:68:fc:d1:e7:1e:cc:21:
         6e:13:8c:f6:9a:43:1f:45:04:00:e7:0d:8f:6a:8c:77:48:e7:
         84:b5:6d:7c:d5:8f:96:d3:cd:de:f8:0d:a9:27:cb:cc:af:51:
         b2:26:b5:d2:10:27:1a:08:0d:4b:b1:a3:76:7b:26:5b:78:ed:
         47:12:10:4e:14:01:55:91:fc:e4:b5:42:90:12:b3:df:ee:a7:
         52:de:58:f3:dc:45:4e:ff:e1:c7:4f:ac:3a:16:3d:33:7f:f8:
         c3:c9:be:f1:87:df:10:58:8a:f4:8d:df:48:38:4c:42:23:bc:
         ba:fb:e7:b8:ef:27:e8:1d:8e:15:f8:e6:cc:a5:b3:a6:c5:81:
         46:02:54:1e:22:bb:87:2e:84:c3:50:4e:95:4c:5e:d7:57:91:
         af:42:fd:eb:98:19:39:3d:18:ec:ed:6f:16:52:74:76:9a:8f:
         7b:c3:29:24:61:98:43:08:b9:30:aa:50:bd:3b:8e:dc:ca:d1:
         2a:45:50:51:d7:88:e1:1c:95:fa:53:e3:48:b6:b8:3b:1a:24:
         76:a4:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----