Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File:                     Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier:          s2Rp1+F++LwO7PB980V71xrV1EfRK360Ec0z7Yd8jLk=
Subject key identifier:   71:FE:62:96:3E:A5:E5:54:6E:E7:F7:DB:73:7D:AD:D8:3E:98:94:DA
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer:       /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial:       01962E98EFF478F6F73714097F9DF58D52AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: cAD3ataifIeAzUiAwYNwWtBBIiY7CpXeJyG81azp/jw=)
                          2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
                          3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ef:f4:78:f6:f7:37:14:09:7f:9d:f5:8d:52:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=71fe62963ea5e5546ee7f7db737dadd83e9894da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:7e:d9:fd:99:09:4e:a1:aa:68:29:88:3a:
                    a7:c4:38:7f:60:56:8b:71:6e:17:c2:ba:6a:7b:d8:
                    8d:71:79:7b:bb:e4:0e:37:19:6e:4c:98:22:f2:8e:
                    8f:2e:5c:c5:a8:64:ca:d3:55:fd:06:ae:ee:02:ae:
                    b9:9c:e7:1f:c0:0d:1c:cb:a2:46:62:ed:e4:92:2f:
                    d5:fc:6d:f2:82:07:41:24:1e:4b:dd:2a:a1:ce:f6:
                    31:82:79:99:e1:96:d2:28:45:2b:c6:7e:c8:e4:c1:
                    e6:87:7f:ff:d9:3c:4b:6b:b0:7d:d7:19:36:67:d6:
                    e4:77:2b:94:08:42:e4:e8:7d:5d:88:62:2a:58:60:
                    26:15:c8:41:49:e2:50:e8:b9:bf:17:d2:7d:f7:37:
                    f7:8c:8a:df:cb:b5:dd:0c:34:f0:6b:72:90:c7:8b:
                    e5:f1:b4:3a:df:da:50:a5:0c:36:c3:42:7d:40:77:
                    60:98:cc:29:3f:85:23:fc:fe:ca:f1:7d:30:85:8d:
                    5a:25:4b:df:93:65:26:7c:05:d8:68:c2:86:10:94:
                    a9:b9:36:d0:7c:97:cb:4c:97:15:9b:dc:a8:66:7d:
                    4e:01:b9:a0:89:7b:82:bf:6a:72:1b:15:9a:93:f0:
                    61:db:36:dd:16:1a:46:c7:0b:39:15:fd:2e:14:b9:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FE:62:96:3E:A5:E5:54:6E:E7:F7:DB:73:7D:AD:D8:3E:98:94:DA
            X509v3 Authority Key Identifier:
                keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:c0:9f:da:f3:f0:3b:f9:b2:49:60:49:2c:10:3f:42:e9:
         25:46:56:ed:48:53:8f:ab:e7:7c:5c:63:d6:1e:1f:a4:d0:b7:
         1a:63:0c:34:22:e3:ad:88:86:bd:76:99:c4:3a:0f:51:b9:8f:
         01:74:27:99:a3:69:6c:c6:33:32:90:43:5a:67:02:87:73:6c:
         fb:e0:d5:77:45:6b:8e:c1:ba:08:87:66:22:43:e6:b2:86:6c:
         a3:70:68:7a:19:be:12:83:1b:c6:25:f2:5f:93:6b:ca:eb:8b:
         21:cc:34:5c:7b:2d:c6:d1:f3:63:ad:4d:f0:21:4e:17:58:af:
         8d:4e:f4:c5:4e:93:1e:47:3f:97:ff:72:78:40:cd:b3:76:03:
         6d:a7:11:4b:ab:48:63:f1:1d:5b:bc:46:c0:46:2d:51:dd:d3:
         8f:3a:3d:02:0e:1d:6a:ae:8f:02:d8:23:ce:82:0c:41:8a:03:
         66:32:13:4a:77:e2:b7:db:4b:ec:66:aa:f6:7a:dc:02:9b:76:
         27:97:2b:00:31:7b:4f:2e:48:dd:f8:10:15:2b:23:e0:2a:58:
         7a:e8:f3:b7:90:44:a3:99:4a:77:9a:bc:df:93:a4:20:c4:59:
         14:d4:21:a9:b3:c7:90:a4:92:09:94:92:54:e8:ec:54:08:bd:
         4c:d3:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----