Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File:                     UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier:          bd5+ANF9R9hHWsRnVb/vCYZ9M31BizbLscUbXWS229A=
Subject key identifier:   EF:41:99:A5:07:6B:5B:ED:45:6B:FD:D7:AE:90:46:BE:51:A7:29:40
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer:       /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial:       01962F3DE4B65D11ABD54D593AF209080D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
                          2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: UVrMgkT99rXUKGQzsYVVBMhSFLeodwC8TkZRyJWgnr4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e4:b6:5d:11:ab:d5:4d:59:3a:f2:09:08:0d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=ef4199a5076b5bed456bfdd7ae9046be51a72940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:6a:d4:ee:c6:0b:2f:2e:68:1e:1d:80:93:
                    ac:ce:49:ec:da:f2:a3:05:d8:46:fc:e9:a4:30:87:
                    27:bb:d6:ef:83:c8:f2:b5:9a:0d:1b:3b:a5:47:fc:
                    d6:18:c8:f2:d0:56:84:4d:0d:e5:6e:de:4f:9d:71:
                    18:0f:33:34:3a:52:9b:9d:49:02:82:d5:41:a5:e1:
                    b3:8d:17:f4:42:a9:76:94:71:e1:88:dc:42:6a:6f:
                    87:0b:d3:ab:9b:5a:00:12:2d:84:83:fd:d0:a3:61:
                    8f:7c:63:af:72:69:b4:d2:4f:1b:84:b4:31:95:cb:
                    65:7a:95:c9:5f:85:94:45:46:ee:3b:60:77:fd:ea:
                    98:3d:26:ae:41:8a:02:66:03:63:4b:08:20:53:74:
                    a3:38:2a:6e:c1:fe:2b:8e:cf:43:8c:5e:dc:6b:19:
                    0a:78:ed:1b:10:8a:8b:32:1e:eb:8b:9e:27:15:44:
                    49:f8:71:7d:fa:43:81:6a:e3:2f:84:df:eb:82:9c:
                    e6:fa:ae:6e:ed:fd:fb:01:ae:8a:15:99:98:1b:f3:
                    47:c8:35:cf:e0:60:25:c2:23:aa:4b:b9:0e:d7:77:
                    c5:45:49:4d:bb:9f:af:d4:c9:c9:25:68:61:f7:5a:
                    29:c7:54:f9:c9:07:fe:c6:72:bb:ad:8b:e5:88:b3:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:99:A5:07:6B:5B:ED:45:6B:FD:D7:AE:90:46:BE:51:A7:29:40
            X509v3 Authority Key Identifier:
                keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:c0:0e:fd:c6:43:c0:d5:c1:db:0d:95:00:1a:48:3d:6a:
         e1:11:59:de:a7:80:fa:6f:6b:ef:dc:45:f7:22:24:ce:82:d8:
         68:41:65:de:3a:4c:f0:0f:e4:27:d7:09:65:dc:53:75:d3:1d:
         b3:82:c5:a1:ad:3e:63:86:60:b5:4f:55:85:13:3a:80:ce:34:
         94:56:f7:db:24:9f:86:51:6c:c6:e1:59:69:b1:e6:ca:07:b4:
         e9:83:05:7e:ce:1e:37:32:2e:c0:a8:71:14:3b:2f:3b:85:25:
         b2:4d:70:45:86:19:41:a6:77:1a:96:35:4f:da:20:f0:2c:64:
         92:9a:22:5c:8d:9a:1f:93:28:a1:05:cc:b1:43:84:5b:8f:fc:
         9b:89:7b:37:b9:a5:9f:45:67:68:05:da:a7:2f:15:33:40:d9:
         47:58:66:95:90:91:6f:bc:93:a6:cd:b6:9d:25:eb:61:37:f0:
         36:59:14:cd:1e:ef:4e:e9:3d:57:aa:fb:4c:89:b4:13:8a:21:
         e5:e4:9d:d5:ee:8a:e4:15:ec:af:c2:c2:8c:40:69:71:12:88:
         89:a7:63:a4:e3:b2:9b:f3:7d:68:52:2f:27:96:62:13:15:ad:
         6a:9f:0b:9d:37:fa:32:9b:16:ac:56:20:d6:8a:d6:e9:5b:8f:
         ec:b4:b0:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeS2XRGr1U1ZOvIJCA1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOWNhNWE2ZTVkNjc0MjFmM2YyY2QyMTEzOGNiNzA3MDQ4
NTA5NTUwHhcNMjUwNDEzMTMwMTQ3WhcNMjUwNDE0MTMwMTQ3WjAzMTEwLwYDVQQD
EyhlZjQxOTlhNTA3NmI1YmVkNDU2YmZkZDdhZTkwNDZiZTUxYTcyOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp9q1O7GCy8uaB4dgJOszkns2vKj
BdhG/OmkMIcnu9bvg8jytZoNGzulR/zWGMjy0FaETQ3lbt5PnXEYDzM0OlKbnUkC
gtVBpeGzjRf0Qql2lHHhiNxCam+HC9Orm1oAEi2Eg/3Qo2GPfGOvcmm00k8bhLQx
lctlepXJX4WURUbuO2B3/eqYPSauQYoCZgNjSwggU3SjOCpuwf4rjs9DjF7caxkK
eO0bEIqLMh7ri54nFURJ+HF9+kOBauMvhN/rgpzm+q5u7f37Aa6KFZmYG/NHyDXP
4GAlwiOqS7kO13fFRUlNu5+v1MnJJWhh91opx1T5yQf+xnK7rYvliLMuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9BmaUHa1vtRWv9166QRr5RpylAMB8GA1UdIwQY
MBaAFFKcpabl1nQh8/LNIROMtwcEhQlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEt
M2EzYTlmMDI0MmI4LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEtM2EzYTlmMDI0MmI4
LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyzADv3G
Q8DVwdsNlQAaSD1q4RFZ3qeA+m9r79xF9yIkzoLYaEFl3jpM8A/kJ9cJZdxTddMd
s4LFoa0+Y4ZgtU9VhRM6gM40lFb32ySfhlFsxuFZabHmyge06YMFfs4eNzIuwKhx
FDsvO4Ulsk1wRYYZQaZ3GpY1T9og8CxkkpoiXI2aH5MooQXMsUOEW4/8m4l7N7ml
n0VnaAXapy8VM0DZR1hmlZCRb7yTps22nSXrYTfwNlkUzR7vTuk9V6r7TIm0E4oh
5eSd1e6K5BXsr8LCjEBpcRKIiadjpOOym/N9aFIvJ5ZiExWtap8LnTf6MpsWrFYg
1orW6VuP7LSwJw==
-----END CERTIFICATE-----