Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
File:                     UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json)
Hash identifier:          bbnt25zoSfqpKew6av5n/gZp8zHb54RPRfN+L6AbVKc=
Subject key identifier:   64:45:C0:26:B4:52:BE:C2:73:9C:24:80:40:C1:D3:15:21:19:0A:00
Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
Certificate issuer:       /CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Certificate serial:       01962F06B8C503990E366F33EF37FED783B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: oiUT3SGz2+5pXwp/V9jWNdwzktsnFu8uppHQFnoGUV4=)
                          2: nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa (hash: HsNAyKM2xYLYihaIQPq7p3bRxHDLIVC8wZ1mzcn3eIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b8:c5:03:99:0e:36:6f:33:ef:37:fe:d7:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=6445c026b452bec2739c248040c1d31521190a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:c0:a5:60:51:8c:52:a3:be:c4:63:7f:65:
                    af:b5:6c:74:d8:3c:a0:2e:5d:07:0e:64:94:d3:86:
                    32:01:cb:42:46:b6:ca:79:8c:be:04:b9:77:e1:47:
                    22:79:cc:40:c6:d5:5d:08:98:4a:8d:0f:86:8b:1d:
                    41:1d:2d:dc:36:43:98:ef:5f:f2:c2:32:08:a7:bc:
                    39:15:b1:13:4c:f7:eb:f1:93:53:a0:f8:23:a9:98:
                    81:87:42:ba:37:69:8e:1f:2b:b4:cc:55:4b:f2:68:
                    6d:5a:28:03:d3:30:ec:0a:09:04:6e:fb:5c:10:83:
                    9d:3b:89:ee:e6:50:b2:30:56:ed:84:ac:76:6c:f4:
                    84:d5:91:72:3d:4c:24:c7:7c:c0:c0:9e:bd:e9:81:
                    84:2d:0d:74:ec:a1:89:46:30:49:65:cd:4a:de:e3:
                    a1:51:a9:66:60:a0:73:de:6b:01:a1:7a:a6:a7:a0:
                    fe:96:14:7c:97:2d:bd:8d:ca:86:18:72:81:71:cf:
                    05:91:75:b5:33:45:d9:d3:83:8d:57:30:cb:eb:c4:
                    2f:a6:bf:43:20:dc:8e:82:1b:a9:2d:05:06:7d:4a:
                    11:2d:f9:a0:9d:7a:99:8d:96:2f:ad:27:d3:1c:2d:
                    d1:de:ae:a4:ea:55:fe:d2:06:fd:0e:5a:47:99:83:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:45:C0:26:B4:52:BE:C2:73:9C:24:80:40:C1:D3:15:21:19:0A:00
            X509v3 Authority Key Identifier:
                keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:77:f9:00:1c:20:9b:da:78:ec:67:b8:2e:df:01:04:61:
         fa:64:47:af:27:ca:23:c0:c8:a8:7f:23:3e:d8:b3:e7:38:74:
         3b:8f:db:de:b6:29:37:71:74:2a:3b:19:a4:a5:3e:1f:06:14:
         ee:0d:8d:85:d7:e4:14:5a:d0:c1:4a:db:36:12:f2:99:19:f8:
         da:9d:90:df:f0:11:78:ac:03:b1:18:27:29:ba:5e:52:27:6d:
         b2:d4:44:4c:4a:1c:0b:29:b6:fb:c9:9b:fb:f2:73:76:7c:b5:
         c0:5a:e1:39:23:af:70:98:90:3c:32:dd:17:c3:db:31:8a:3e:
         7b:5a:92:b1:27:f2:d5:e6:bc:25:81:1e:49:65:0e:e6:59:77:
         71:f3:8b:9f:2d:bc:5a:c6:f0:52:71:ca:57:ce:d1:b1:7a:13:
         36:e4:02:ce:ee:cd:7b:f4:fb:b3:3c:94:4e:e8:8d:97:04:28:
         5a:a9:ba:a7:7b:a0:9d:f5:16:6b:55:01:70:25:d1:72:0b:dc:
         61:61:30:52:5d:ab:dc:eb:20:5c:0a:15:54:62:69:8f:b9:d3:
         ac:ef:32:35:93:e9:65:66:bc:3d:3f:35:ca:86:88:a8:76:f1:
         65:c1:d0:f3:98:e3:dc:6a:74:48:f7:02:6b:e8:f7:08:8c:6f:
         53:12:08:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----