Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File:                     UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier:          HNZd4S0pPS9OI6rvcbKATXutpD2WInC1E7FHOblRSK4=
Subject key identifier:   53:A6:BE:A9:C1:CA:A5:8A:CD:B4:B7:AD:34:73:28:7F:5D:62:D0:3C
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer:       /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial:       01962DF3E9CEB3B881C65A845C6A6AF49FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number:          04BB
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: rBelvsY1pEkY2T400qHC72G5GOX29jYLVFJ40PECviY=)
                          2: iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa (hash: LNWcJcYvVHSoTAScNXiZdlhb/qYL7H8xTSxcF3h+E20=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:ce:b3:b8:81:c6:5a:84:5c:6a:6a:f4:9f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=53a6bea9c1caa58acdb4b7ad3473287f5d62d03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:43:11:ab:b2:83:5e:f1:24:27:80:76:5e:
                    93:e0:f0:50:9c:5e:86:f9:06:fe:20:94:34:18:0f:
                    5c:9a:e0:59:ad:47:bb:4d:d0:93:cf:84:b9:b0:04:
                    ae:92:05:2f:8d:41:30:3f:ab:df:d9:34:47:97:a0:
                    05:e4:d6:72:d5:d2:f3:37:00:94:d7:e1:84:bf:50:
                    fd:46:74:ab:12:87:c5:17:ca:6d:2f:92:58:3e:4d:
                    38:e8:f8:32:02:23:f2:7c:40:c7:86:dd:fe:19:15:
                    e5:c2:d6:21:a2:fb:b3:39:47:fd:45:b4:b3:90:77:
                    a1:cd:50:73:5b:77:de:a9:b4:f7:9f:57:0d:4c:c9:
                    01:c1:b4:85:7a:4e:98:df:27:92:28:e0:d3:e2:15:
                    df:5d:22:02:5a:d2:7e:7f:e8:31:96:0d:2a:f5:76:
                    8e:b5:f9:85:62:88:b9:65:9f:90:14:ce:c5:27:21:
                    81:64:19:9d:87:4a:a5:9b:01:e7:9e:64:8b:be:c3:
                    12:ef:c0:ab:a6:d7:1a:74:88:43:45:c3:46:0d:e0:
                    62:8f:c2:5d:17:07:f0:ff:64:2e:04:6d:2b:42:8e:
                    24:c0:5e:d2:df:77:b7:13:5c:35:1e:1c:78:11:4d:
                    de:87:43:c6:b0:2e:57:74:8b:62:ed:cb:1e:b2:ad:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A6:BE:A9:C1:CA:A5:8A:CD:B4:B7:AD:34:73:28:7F:5D:62:D0:3C
            X509v3 Authority Key Identifier:
                keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:83:f8:e0:9c:33:f8:24:66:a3:ff:89:72:b2:24:c5:c2:7e:
         7a:6d:b7:ba:ad:b6:70:79:89:89:33:d3:48:27:3a:d1:71:0d:
         f7:cd:c9:05:6d:c1:82:c3:b0:34:16:f2:fc:de:b8:3d:9d:2e:
         f0:82:78:d8:c2:7b:c2:d4:92:d6:6d:08:0e:78:3d:ff:02:36:
         45:29:d7:d1:ab:ec:f2:4d:a7:12:f7:e0:b7:5a:c1:d1:35:3d:
         41:c6:06:23:0b:ca:b2:da:10:23:5a:2b:56:1c:73:05:2d:76:
         67:89:60:e5:50:cd:02:f6:f2:32:7e:2c:1b:a5:5e:50:73:2e:
         31:a1:a0:e6:f7:41:d7:02:dd:78:9b:a6:07:1a:75:a6:d6:10:
         19:bf:68:e7:16:ed:29:d0:54:26:84:43:64:4e:3c:e7:de:fe:
         27:4f:c9:27:fc:d2:57:01:52:b5:63:fc:29:41:5a:c7:9a:0e:
         95:fb:da:37:a8:2f:33:8b:d9:97:fd:66:0d:06:94:6d:46:9f:
         ff:19:d1:43:79:10:0d:e0:e8:93:0e:17:8e:f0:7b:dc:1d:01:
         ce:0a:f0:1b:20:4b:51:26:70:29:90:a4:de:81:fb:b4:5f:9f:
         3c:f8:b2:69:b8:02:5c:44:62:d1:a9:48:8a:f7:14:cf:bd:ee:
         6e:81:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----