Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File:                     uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier:          9vpZ4emnzGdjqQuaEfNVihjxeviy6e3cpqtwgsJEqD8=
Subject key identifier:   C9:B0:79:91:25:98:16:CE:6F:9A:8D:F2:63:1A:C3:25:75:5E:3B:3C
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer:       /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial:       01962F74D6DB14F282EE4B309FB96FD358E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
                          2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
                          3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: 57ksCxe11m/+QGe9auxxIVCgIEKD2zo3XvOPgRB2cys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d6:db:14:f2:82:ee:4b:30:9f:b9:6f:d3:58:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=c9b07991259816ce6f9a8df2631ac325755e3b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:1b:93:72:27:77:01:d9:ca:bc:c2:44:a8:
                    e7:96:c0:4f:00:6a:b2:6c:a9:f5:8d:7b:43:f6:f2:
                    77:7e:97:fb:ec:73:d7:c4:c1:de:d6:79:9d:fe:a4:
                    90:96:c3:20:d9:a6:76:a5:f1:b5:6e:f9:e8:98:6c:
                    d1:fb:82:5e:b9:83:c5:10:6b:40:ad:99:bb:78:e2:
                    29:4f:8f:2d:bc:e6:d1:9e:92:48:a6:13:1b:e2:a4:
                    35:75:ef:1f:1e:9c:b2:56:2b:20:d9:66:54:43:d1:
                    6c:be:57:48:c4:46:92:7a:9c:17:f6:8f:87:0c:1e:
                    ce:43:b0:40:b9:92:bc:71:ab:d4:95:f3:c9:91:96:
                    ac:c8:43:c7:c6:a0:d2:22:19:a5:4d:3e:aa:db:5e:
                    62:97:cb:7f:8e:d6:90:f5:01:13:20:5c:a8:52:bf:
                    59:8f:76:fb:f0:cc:04:ca:72:9a:1d:05:6c:47:16:
                    33:31:4d:e8:a6:51:47:42:8b:49:4c:96:f2:63:44:
                    24:c6:25:de:3f:cb:09:07:95:43:16:36:1e:55:b9:
                    e4:26:59:c1:38:62:de:be:8b:a6:35:4a:88:32:27:
                    4e:dc:cd:8b:60:e1:d8:31:b6:16:81:bc:1a:54:6f:
                    ee:70:c2:7b:7c:88:52:59:ec:fc:a0:d9:a8:06:24:
                    97:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:79:91:25:98:16:CE:6F:9A:8D:F2:63:1A:C3:25:75:5E:3B:3C
            X509v3 Authority Key Identifier:
                keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a0:9e:df:9a:28:6c:2c:40:2d:a4:26:e6:76:25:45:78:c8:
         70:95:7f:4f:73:c0:b3:a7:e8:85:da:e7:c8:86:3f:1e:ca:9a:
         20:45:f0:24:d2:cf:12:62:43:29:6d:05:ec:32:b3:55:22:fe:
         28:c9:e5:b1:13:ce:1f:c3:32:be:d1:3a:7e:53:d7:51:a7:90:
         c7:34:60:99:07:ea:b7:cd:f9:6f:72:56:65:a1:05:6a:ae:04:
         ec:65:6c:a8:78:1d:e0:79:c2:5c:17:7d:03:6c:04:3b:ae:fb:
         ae:8d:b0:09:af:53:6e:db:64:fb:ed:5f:e7:17:83:78:46:e1:
         17:5e:7e:7c:1f:a3:53:2a:73:8f:d3:fd:9d:bd:16:d8:16:c9:
         9a:52:5f:f7:4e:b0:84:02:20:e7:e9:45:6c:1f:95:f7:c6:95:
         68:59:72:25:b4:be:1c:9c:0b:ce:0b:5b:69:71:f5:12:da:fd:
         14:02:ca:e1:ec:85:d1:23:75:99:51:19:d2:f9:09:ca:8c:92:
         af:f6:ff:4c:a0:68:b3:36:01:16:b2:0b:7f:7a:32:67:46:39:
         a2:9d:29:ef:70:ed:06:c8:b7:25:64:d3:58:19:96:de:26:4e:
         84:11:f0:58:64:51:7a:82:e3:c0:9c:fb:21:89:31:d6:b5:5d:
         12:19:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----