Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
File:                     uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json)
Hash identifier:          PzMAZHhgkfK7YVt30VX8J4aQfIsp+RE+BNswJVEjNfE=
Subject key identifier:   28:76:C7:1B:C9:FA:1C:2C:9A:03:EB:33:2B:CE:86:CB:E2:95:3A:B7
Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4
Certificate issuer:       /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
Certificate serial:       01962E99738C85784C8A866DB9C97B34E913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: nLKcCNIy4zT7/1i64GIACNOm7jeS83mOnyotsvXwUgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:8c:85:78:4c:8a:86:6d:b9:c9:7b:34:e9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=2876c71bc9fa1c2c9a03eb332bce86cbe2953ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:60:10:3d:af:21:91:76:79:54:48:80:ab:
                    2b:00:df:c8:0f:2e:72:50:c4:38:98:e0:6b:82:97:
                    04:a4:0b:26:24:5c:f8:4d:32:36:8d:fc:d7:d5:ed:
                    b7:c0:18:f8:b2:08:3b:0e:5e:a3:c1:62:ee:83:74:
                    28:e8:22:a3:8a:1e:33:9c:2b:77:e9:94:6e:8b:fb:
                    22:83:bf:46:fe:cc:f1:27:bf:20:ee:a9:a5:55:5f:
                    52:16:3d:ef:d9:a1:1a:4a:8c:1d:c4:be:e4:83:91:
                    16:ab:5e:a7:8d:d3:62:a4:d5:ba:85:42:26:e5:f1:
                    de:31:19:54:d5:15:d1:51:b1:9b:07:f5:a7:da:74:
                    94:e8:bb:9e:c1:ee:28:56:f0:eb:2e:d5:19:f8:fb:
                    53:53:13:76:a7:32:34:cf:31:02:1d:03:b1:e0:bf:
                    c2:9c:93:30:3b:20:aa:91:48:60:7f:4c:ee:1e:00:
                    ee:3a:e7:04:20:a4:19:66:08:b3:4d:32:c4:d7:20:
                    22:c6:16:ff:6e:62:30:37:fb:3b:7c:f6:53:c1:04:
                    39:e2:51:ee:46:61:2b:6b:74:db:f2:10:cc:5d:42:
                    e7:fd:42:7f:cc:51:f0:24:c2:ae:c9:8c:67:0b:6f:
                    9a:c0:60:2f:ae:40:63:d4:1d:33:7a:b2:a8:97:47:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:C7:1B:C9:FA:1C:2C:9A:03:EB:33:2B:CE:86:CB:E2:95:3A:B7
            X509v3 Authority Key Identifier:
                keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:ef:e7:8a:5d:7d:b2:f4:49:0b:fe:a9:52:12:9c:52:c4:
         33:8d:63:93:c7:e2:99:15:be:2a:44:6e:b3:f9:ad:6c:fe:c9:
         93:a9:fa:7e:0a:2e:9f:c8:49:97:99:a3:32:1e:fd:3f:11:a6:
         19:5d:85:e2:e0:cb:ae:75:18:bb:ab:3c:7a:64:79:7a:04:d1:
         0e:48:06:38:6c:e6:97:80:4f:a1:5a:2d:d1:80:d4:9c:bc:76:
         d1:1f:e8:a2:cb:af:7a:af:bf:6a:28:de:2a:ef:a4:c9:eb:e6:
         0f:c7:a3:3f:17:92:5b:ea:4f:09:5c:f2:d1:2a:28:aa:0e:7e:
         c8:5d:c3:d1:58:88:a5:23:11:09:d5:d0:85:c0:29:4b:6a:6b:
         96:d8:aa:a4:49:c8:b8:da:16:08:05:ba:5e:76:0d:3e:ee:9b:
         1e:eb:d8:be:ef:0d:a0:ec:99:4f:69:0a:4b:51:0c:11:ff:d2:
         bd:6e:38:5b:c3:a2:6a:9e:ad:f9:29:05:20:fe:6d:07:87:cf:
         8b:05:c5:5a:ff:ed:5e:bf:81:c0:a1:33:a0:11:4b:7f:b1:69:
         5c:36:c8:e6:71:09:79:e4:20:0e:43:b2:7d:fa:68:d4:81:53:
         62:9a:66:71:b6:37:a8:a6:15:60:4c:fb:a7:67:7c:42:63:2e:
         9e:fe:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----