Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File:                     UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier:          UT1CmtOTG7LyO8ht5hJTp4N07JSdk1GSYbcmUjNrMb8=
Subject key identifier:   C4:14:B9:EB:C7:A1:74:D8:62:3A:23:3E:AA:65:8B:C7:C7:75:11:E5
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer:       /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial:       01962F06C3CBAF2B20538E302231909A643F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number:          F9
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
                          2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: nq7k8D0Ui2eQIvXn00HDtbfENQxLLW+/6RKPnsBb3C8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c3:cb:af:2b:20:53:8e:30:22:31:90:9a:64:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=c414b9ebc7a174d8623a233eaa658bc7c77511e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:f4:7e:b0:ff:25:83:1f:08:72:b1:15:db:
                    25:84:b9:b9:32:6e:e1:19:56:77:1a:d6:29:a4:c5:
                    f8:93:aa:54:52:43:c0:fd:ff:40:40:22:8a:10:19:
                    20:d2:86:b6:cf:77:a0:be:89:e7:59:a1:87:06:5f:
                    08:9a:13:bf:77:cc:0a:71:cf:b7:45:99:76:0b:f3:
                    ca:b0:ca:62:33:4e:95:48:f4:66:a7:f3:87:93:ed:
                    e7:e4:d2:81:62:97:3e:ec:e1:cf:93:97:5a:74:e3:
                    ec:2c:67:16:61:6f:b7:1b:54:ef:dc:d2:38:6f:4f:
                    10:ec:21:df:79:37:45:ce:e1:fa:84:94:20:7a:d0:
                    7e:40:a5:ac:46:b7:f9:8b:5f:24:a6:65:37:9b:c5:
                    9b:c1:01:32:d8:31:19:9e:8c:47:fa:a7:1c:f5:f3:
                    21:0b:33:f5:01:28:54:e9:04:85:32:eb:e7:d8:c8:
                    04:f0:d8:ad:96:e4:7d:1f:51:3f:59:17:f1:a6:c2:
                    0f:b5:ae:a4:ee:38:12:68:61:21:58:ed:0f:3c:25:
                    a9:01:6d:e7:62:79:69:30:44:b1:9b:9a:39:8a:05:
                    c4:ae:e8:8d:b2:0a:34:e8:e8:94:5c:1d:5e:af:54:
                    f9:ac:d2:c4:bc:4c:40:ff:99:d2:8b:52:ec:7d:9b:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:B9:EB:C7:A1:74:D8:62:3A:23:3E:AA:65:8B:C7:C7:75:11:E5
            X509v3 Authority Key Identifier:
                keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:74:14:be:fd:12:d1:4e:7d:9f:05:ac:73:ba:7b:29:ca:
         96:6c:0e:b1:8b:84:ae:bc:56:4c:22:d8:01:84:e7:c6:2e:b3:
         aa:1b:b8:09:ae:03:ea:91:88:70:9a:89:62:d3:71:07:59:c9:
         af:30:f5:b6:73:53:26:74:9c:21:40:94:7f:e2:41:b9:e7:80:
         f2:2f:bb:49:1d:94:63:5c:e5:33:69:de:03:06:f0:fd:7e:2e:
         21:2d:cd:33:9b:27:c6:5f:63:cc:f5:9a:0c:75:e9:ef:e8:8d:
         40:7d:94:e2:75:c2:da:ba:f1:ae:c6:00:c7:6a:36:e9:94:97:
         c5:b7:4a:ae:0b:d1:27:54:ca:f4:d3:9b:7c:0e:da:5a:88:1e:
         3a:84:7d:3b:e7:f1:25:05:85:37:cc:ff:01:22:af:a9:c8:34:
         db:ad:0b:18:06:69:0b:21:73:76:fd:0b:08:c3:ed:89:86:a3:
         1d:bd:31:49:4e:98:e4:b6:c6:30:05:30:13:bf:d4:b8:2b:32:
         5d:28:1f:0a:34:07:38:c2:1a:e2:46:d5:bf:d7:6e:3c:c0:00:
         4a:d4:ad:c1:d2:5c:d6:a5:a7:00:42:2b:b3:e9:36:55:37:ba:
         ee:19:e7:f4:3c:18:74:30:55:f8:7a:bf:bb:7d:da:39:a5:78:
         f6:92:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----