Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
File:                     uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft (raw, json)
Hash identifier:          58LgSOH8J2h7ABa4wN/gT9hRzbWQugb379/vw115/os=
Subject key identifier:   43:22:5A:F1:F7:47:18:7B:53:BF:81:79:29:26:C1:1D:56:43:8C:EB
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Certificate issuer:       /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial:       01962F3DC43DAB2D8D23874C9863EA21C310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
Manifest number:          06B5
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: fmD84MKcKNszvegRc78ea5yDEkU.roa (hash: l40Hf3OlT5bsApNDrNH7Y+k7wZYD3XggeWdBVJzjivU=)
                          2: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl (hash: p4+TCPKfPFzpVSIKWwupyHMeqIxCfHmLDnwD180JpxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c4:3d:ab:2d:8d:23:87:4c:98:63:ea:21:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=43225af1f747187b53bf81792926c11d56438ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:ca:82:3b:7c:c1:3c:14:65:10:8a:5d:59:
                    64:b2:d6:ed:f7:f5:1b:64:96:19:39:d9:52:f1:ae:
                    2a:6a:30:d4:fc:15:3b:59:74:18:fd:97:10:38:eb:
                    c7:6a:8a:a7:69:1e:76:76:be:28:7e:15:42:75:bb:
                    bd:35:61:a9:80:27:d9:7a:56:bf:fb:90:95:f4:fd:
                    0f:67:a5:86:2d:70:46:00:23:91:ba:d6:44:71:86:
                    58:ff:4c:fb:09:cf:64:d0:fb:0e:db:de:db:2f:ce:
                    75:a1:cc:77:2e:17:ac:3b:da:13:fa:35:3a:68:bd:
                    e3:63:e8:10:1e:c9:86:36:64:49:b8:84:19:71:04:
                    34:3c:b1:70:43:a2:72:9f:fe:3c:c8:0a:59:67:ec:
                    7b:31:55:34:b9:6e:4a:2f:10:73:93:9f:eb:0c:10:
                    bb:af:49:75:68:da:d7:af:f4:f3:6a:09:2e:bc:68:
                    cd:10:58:e9:13:b1:dd:0a:de:69:ba:dd:75:0c:32:
                    32:c4:1f:a0:1c:f3:e5:97:17:68:d0:a7:9e:9f:bf:
                    d0:bf:c2:41:c8:41:e1:05:a5:d6:76:22:41:c9:be:
                    be:f4:f3:9b:fe:a3:29:03:e8:79:2f:ce:a8:da:ad:
                    32:fc:1f:f8:90:c3:4c:b2:e9:b6:af:e9:8e:0a:20:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:5A:F1:F7:47:18:7B:53:BF:81:79:29:26:C1:1D:56:43:8C:EB
            X509v3 Authority Key Identifier:
                keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8d:95:81:43:ae:d3:78:7d:51:a6:69:2d:d0:74:b1:01:13:
         d8:b8:ae:31:56:55:dd:fc:2b:85:21:ff:6b:39:4c:29:82:49:
         f3:b7:d5:f1:b4:fd:ee:85:89:9c:ac:52:91:5c:16:e1:2f:20:
         1f:16:69:69:f1:65:9c:fa:52:bd:d2:9e:ac:33:40:db:b5:21:
         3a:f5:79:87:3f:5c:aa:bf:cb:45:ae:95:8f:91:88:e8:eb:2d:
         99:25:1d:99:10:cf:f0:bd:13:7e:8d:fa:92:ea:5e:95:5c:07:
         43:38:62:1e:58:9c:ac:e7:32:26:53:bc:e0:5c:3b:76:0e:6e:
         09:2a:09:4e:b1:d6:75:85:28:04:3c:aa:07:a0:74:20:0f:6a:
         ca:7e:f1:8d:9f:dc:32:ad:8c:de:ef:53:41:9d:ef:1f:3e:24:
         13:eb:54:ab:09:78:04:17:a9:32:d7:0c:14:4c:2a:01:39:73:
         72:c5:ae:3b:24:70:ce:94:1d:af:0c:3b:1a:6b:c0:25:af:57:
         91:d3:b2:8e:ad:93:b8:1d:97:36:36:61:9c:7e:77:4f:d6:6e:
         15:82:b2:aa:00:a6:6e:78:03:71:a9:92:8c:bb:f2:e5:99:d6:
         0f:39:8e:60:5f:04:fb:98:8c:03:8b:d9:c3:eb:70:2e:42:72:
         ea:57:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----