Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File:                     ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier:          ooEx5IsWYFjNt6cv50Rxr+YRTzpKW8JAdJPK0QMIKk4=
Subject key identifier:   98:5A:9D:76:43:0E:92:6D:19:3A:A1:49:F0:F8:EC:E1:46:63:9D:59
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer:       /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial:       01962E62086BC457B35E87CFBD78F5A91CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number:          10C5
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: PEeDUIL1z7R/V22kOOAllshEmuWmQWnzYYpYtJDcdWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:08:6b:c4:57:b3:5e:87:cf:bd:78:f5:a9:1c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=985a9d76430e926d193aa149f0f8ece146639d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:c3:46:75:f4:b7:7c:01:77:38:bc:71:06:
                    79:96:f4:a4:1b:11:34:be:da:a5:b4:75:a8:a6:ec:
                    d4:8f:79:6c:d4:84:c5:f0:fe:1b:c4:63:7e:c6:92:
                    b1:5e:d0:c6:2e:71:a6:5b:f1:49:e9:44:a2:21:da:
                    03:2c:75:2e:7e:9e:1b:d5:a0:79:40:10:8a:6e:72:
                    04:6c:1c:d6:b0:41:36:54:af:40:62:22:81:2c:4d:
                    d2:06:6f:d7:42:61:7a:2e:65:70:15:11:84:91:3b:
                    fc:c6:23:dd:66:7e:9b:c4:0f:78:16:20:02:21:82:
                    2c:bb:19:da:bf:6f:48:ed:1b:90:7f:71:42:3a:31:
                    61:16:39:ae:1e:47:21:f8:97:e0:94:13:e4:29:86:
                    36:c6:c1:8d:b2:8f:69:d8:76:0e:0e:02:70:24:a0:
                    fd:cd:dd:fa:b5:e8:2a:77:f9:03:e8:e6:1f:da:32:
                    9d:83:b7:24:7a:8a:96:ae:82:43:19:ba:04:e7:66:
                    49:2b:e7:85:38:a9:a9:fb:eb:63:c0:8f:f6:fb:f7:
                    a4:66:c2:3e:74:fa:b9:ce:df:c3:31:7d:a2:0f:70:
                    2c:b6:49:05:15:1a:78:41:9b:e5:05:d7:78:fd:88:
                    4b:20:20:62:c8:90:ca:ce:03:6f:b3:2a:86:74:a7:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5A:9D:76:43:0E:92:6D:19:3A:A1:49:F0:F8:EC:E1:46:63:9D:59
            X509v3 Authority Key Identifier:
                keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:6c:23:fb:ba:0a:0e:75:d8:ef:6b:cc:de:f6:27:85:94:
         44:6b:5a:8f:9d:70:fe:e1:5e:55:44:42:a6:a8:40:4d:74:b3:
         a2:4a:e1:b5:93:98:49:09:88:6a:c3:83:1a:23:81:2b:cf:8b:
         aa:21:a5:d9:c0:1a:49:27:b5:20:7b:63:46:ef:8c:35:2c:f4:
         26:32:e7:63:7a:47:91:f1:20:2a:a8:af:41:fe:ad:c1:0c:41:
         db:4f:6e:33:86:cf:02:2a:7a:bf:76:15:6e:49:03:17:c8:be:
         07:9b:ca:22:ec:1d:4e:bd:ff:dc:58:9c:35:9c:f3:17:3b:29:
         24:84:7d:11:25:6b:69:9f:a0:b0:7d:3a:1f:ce:70:38:b7:97:
         e4:03:40:ee:a1:54:a7:c2:8a:e2:4e:d2:e1:36:8d:1c:cf:d0:
         99:f2:2d:4f:ad:f6:0a:25:05:d4:e3:84:ad:73:69:16:41:7c:
         86:46:d5:ce:0e:04:be:c0:4d:8d:b3:99:7c:57:ad:c4:31:74:
         1f:e8:3d:2f:64:05:04:0c:70:44:aa:75:c2:2f:8d:26:b5:8a:
         8b:93:45:f1:4d:bd:93:8b:a2:e0:a1:32:03:4a:98:60:e5:41:
         63:b4:93:fc:a2:b8:2f:23:82:09:97:66:f1:3f:1a:40:47:91:
         61:a6:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----