Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
File:                     UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft (raw, json)
Hash identifier:          fQ7t6F+wSHvc6EnUSdfkqT+JHU2WqFt6pWDab/N2kz0=
Subject key identifier:   72:41:B3:61:04:71:80:66:C3:23:4E:D3:D0:DC:8B:C7:3D:C6:91:C1
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Certificate issuer:       /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial:       01962F74B45FE276F6C59AF3915550D000CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: PHMUioSV6r8_zcC5NX0kowWeLiU.roa (hash: Zgy4HYim+fh6zPODOf4zTcRCqIKQwEhvSl2nYZcO3+g=)
                          2: UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl (hash: PF/stsRODBfUyPj6zgLu3mNKH8b6pv3VAIK3KSePH40=)
                          3: sCXtdqp4cXaJS2Ln-_IeOocxpNc.roa (hash: J4ntkjmuAU7zZwkkuhYRl8vaQJj+FqwqLBhEct+ihHA=)
                          4: vev4R9SqcqVytee6s6Z0JR3COYM.roa (hash: 0hHUicyfDNcNzd9gVOE9ykNNh2B97kn9na0214xMYkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b4:5f:e2:76:f6:c5:9a:f3:91:55:50:d0:00:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=7241b36104718066c3234ed3d0dc8bc73dc691c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:50:60:ed:1b:a2:59:97:e1:36:12:0c:75:
                    a7:df:98:36:df:82:a4:59:4d:5d:df:b9:68:59:69:
                    f9:49:49:b1:4b:f5:67:a2:0d:cf:a1:8d:44:9d:9b:
                    b0:af:5b:0b:df:09:c0:05:10:fc:b1:c9:75:fe:e1:
                    c9:95:17:fb:e6:0b:fb:2f:4c:cc:f8:85:66:b6:9b:
                    c0:c0:55:1a:fd:e5:61:0c:b6:aa:c4:5e:fb:6c:ee:
                    b2:6d:13:79:69:a1:e8:59:11:35:89:d5:b8:5f:ba:
                    87:17:74:ac:87:10:b8:92:35:e1:2c:c2:5a:0e:a7:
                    75:06:71:a0:43:a8:52:4a:c5:c7:e9:7d:c7:4b:7b:
                    29:16:ac:d4:c5:e4:9f:f6:aa:99:3f:c4:33:e2:fb:
                    12:8e:db:b1:41:3e:d2:1e:40:77:a8:4a:90:4f:96:
                    23:6f:5a:d0:a3:7e:f7:88:f0:dd:6c:e8:c8:d9:fd:
                    73:46:17:45:00:3c:db:a4:e5:52:f3:50:79:ab:e7:
                    7c:b9:3c:ba:dd:07:28:52:91:9e:31:45:c5:20:de:
                    ce:7d:83:3e:37:2e:4c:a3:ae:4e:06:87:59:cf:a2:
                    c1:ff:af:4f:79:a5:67:2b:79:90:2b:1e:41:9b:97:
                    66:9e:2b:74:45:06:c8:98:75:a5:f5:4b:ea:88:90:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:41:B3:61:04:71:80:66:C3:23:4E:D3:D0:DC:8B:C7:3D:C6:91:C1
            X509v3 Authority Key Identifier:
                keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:5c:25:93:66:c4:c5:87:c4:a2:bd:5a:25:1b:ad:c9:02:
         0c:51:9b:be:a0:c6:cb:9a:dc:46:92:ac:f5:38:d6:a7:4a:b1:
         83:30:fc:e6:54:13:29:1d:d9:cf:5c:6c:68:69:de:09:a1:11:
         6a:83:c7:db:f4:74:7e:82:33:d0:05:57:c3:1a:4b:5b:f2:b8:
         17:95:64:5b:03:a3:40:db:4c:d3:b9:39:ab:20:0b:16:1b:24:
         3b:29:0b:2b:47:29:5d:11:1f:06:90:9b:d2:9f:20:8a:2c:53:
         fa:85:de:12:da:48:ff:ab:1e:33:de:92:b4:72:9f:15:9a:30:
         d0:e1:30:c8:fc:f2:dc:3f:9a:20:74:c4:07:84:4b:b1:52:25:
         b1:55:f5:b0:dc:84:8d:13:89:1f:e9:4f:bc:49:c4:69:0c:cb:
         4b:91:18:6b:69:91:ea:36:f4:be:1c:1d:8a:42:c0:dc:f9:81:
         69:d3:87:97:92:49:46:05:2b:fd:7b:a1:75:be:09:b2:3e:c3:
         82:22:1b:30:be:7c:17:91:7c:ba:a6:1c:df:93:60:92:07:df:
         e1:30:8c:ea:51:ea:87:92:f7:ba:da:87:0f:cf:56:7b:0e:2d:
         f5:db:ec:12:d5:ec:48:ce:83:d9:f0:2d:ce:b5:6a:bb:60:96:
         ca:86:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----