Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File:                     U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier:          xWRXtkRB4F3saqb55IybcirwBYv7qn4pJNwirFYQROQ=
Subject key identifier:   93:BF:D8:56:98:AA:DB:47:F4:51:35:1F:1F:3D:62:96:3E:33:64:7F
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer:       /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial:       01962E2B245C7D7C8C1E6284C2672DC46B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=)
                          2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=)
                          3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: tVw1qxmCe5BB6nVHLPopaiigu3KEIJpJVd/eQqOd2nM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:24:5c:7d:7c:8c:1e:62:84:c2:67:2d:c4:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=93bfd85698aadb47f451351f1f3d62963e33647f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:22:9e:06:82:fa:82:9e:81:4e:be:1a:23:
                    b7:a2:70:38:55:80:23:f2:f4:8b:f9:ab:09:c4:e6:
                    4a:c1:93:62:f7:41:8c:d2:ed:46:f9:1c:13:a9:7d:
                    5c:d4:54:dc:38:f9:af:b1:0b:66:e7:b3:e1:46:a0:
                    3c:2e:36:b4:79:16:6f:2c:af:98:a0:45:2e:d0:06:
                    09:13:68:0e:93:7d:ba:ee:e6:58:15:d0:ae:b7:c2:
                    8f:41:ee:f5:c7:f7:bc:ba:50:ff:2e:dd:7f:02:73:
                    59:e2:5e:44:e0:41:5a:8e:d6:e9:25:3c:93:3c:58:
                    6b:61:ac:6d:02:ce:1e:06:8e:bb:7c:f3:f6:73:d1:
                    ed:c8:00:1d:71:ac:0d:40:d5:ba:1a:ec:8d:00:54:
                    01:e9:1f:f7:e5:0f:10:7c:a6:25:78:a5:4e:2f:7a:
                    3e:4d:4f:02:9e:5c:23:df:c0:32:83:d5:01:48:ab:
                    17:73:bc:cf:44:2e:cb:e3:b8:5c:04:b2:dc:76:29:
                    36:fd:64:72:1d:5e:fa:0b:f8:5b:13:92:73:ac:62:
                    57:82:94:2e:48:04:f9:18:e7:01:b5:69:f5:8f:5c:
                    e2:ef:34:e3:47:cf:77:79:f7:12:21:a8:8a:24:6d:
                    61:63:e0:17:89:44:90:6c:d3:f6:9e:e9:56:38:7c:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BF:D8:56:98:AA:DB:47:F4:51:35:1F:1F:3D:62:96:3E:33:64:7F
            X509v3 Authority Key Identifier:
                keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:14:93:58:57:c2:c1:6d:b1:2d:4f:cb:c7:53:ab:3c:3d:11:
         a5:d7:e7:e8:77:a3:ad:0f:3c:bc:0f:72:27:47:89:eb:56:52:
         a4:bc:d1:2f:41:3e:5c:51:97:ed:13:08:33:39:4a:7d:24:4b:
         0c:ab:59:86:f9:07:89:c1:fa:54:9e:90:98:3a:25:d0:f7:a2:
         3d:cc:04:ec:66:96:f1:5c:72:c8:99:fc:ae:bc:c2:25:af:58:
         08:26:94:75:4b:74:5f:96:1a:cd:78:73:3f:d4:ed:33:80:5a:
         be:41:96:cd:92:b2:57:45:63:04:35:79:91:e8:f2:be:ac:84:
         46:c1:83:f5:94:cf:92:c1:f5:13:ab:ed:62:f9:0c:37:15:4e:
         a0:7c:c5:37:18:5b:f0:03:50:36:d4:7c:74:1e:cb:95:b2:63:
         db:6f:7d:3e:f3:14:48:04:be:87:4e:c3:a8:1e:ac:9d:33:c3:
         46:2a:8b:dc:76:95:7f:ed:4c:07:55:60:e9:b2:4c:ba:59:7d:
         02:33:9d:20:ae:80:9f:58:7d:e2:cb:d4:f8:b1:cf:18:63:04:
         f9:46:56:f0:21:ff:6d:64:2c:a6:39:03:42:d4:22:45:db:35:
         6b:13:f7:3c:97:99:a2:12:75:df:9e:ea:bb:f4:92:bb:f5:44:
         ef:86:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----