Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          YjNFFIkipbIkRjaTXipy53kc1hOSNMDNZqXQtM4OMlQ=
Subject key identifier:   EB:24:B1:74:1E:C7:F7:29:A8:24:A6:E5:43:DE:2D:94:F1:78:C2:D5
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       01962F74ABD9F5E4C1A7235F9028DBD4DF6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          0C20
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=)
                          2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=)
                          3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: 4nn6YbPu3ktJyJeG6FeKr1/0BvP02JHWb8rvY1MNK8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ab:d9:f5:e4:c1:a7:23:5f:90:28:db:d4:df:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=eb24b1741ec7f729a824a6e543de2d94f178c2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:b1:ed:09:bc:36:b4:22:7f:e1:9d:44:0d:
                    35:cb:d8:f3:88:79:84:7a:fb:1c:13:9a:b3:d0:02:
                    9a:87:60:7a:90:0e:ae:08:65:5b:44:52:d3:1a:26:
                    fb:ae:ec:b7:07:15:7a:d6:e3:a3:13:56:5f:19:5e:
                    23:5f:0c:6c:f9:0b:fc:66:0a:f8:75:9d:61:6e:cf:
                    bc:1a:de:48:e1:2f:32:30:0b:85:ff:ac:c5:ae:c0:
                    f0:4c:5b:30:ba:d0:d5:76:e5:57:6c:e1:31:be:e6:
                    f7:a3:96:71:45:53:e2:da:b1:c0:4f:8c:52:47:2a:
                    7e:c9:1c:0d:e2:05:32:c7:cc:a5:36:d4:28:38:3e:
                    7b:2c:6b:e9:93:75:d1:c2:a4:14:2a:70:88:97:27:
                    a4:87:e3:1b:5d:b4:14:76:41:47:bd:5b:2f:7e:e6:
                    17:3a:a0:d9:dc:d6:96:37:4c:06:db:85:92:36:c8:
                    33:91:ca:f9:5d:8c:3c:dd:f0:da:bb:00:26:c9:ad:
                    56:49:6b:c3:4a:31:3e:2b:e6:96:48:c8:f7:35:d3:
                    5b:5a:3d:b1:6b:38:1d:5b:18:ae:14:0b:df:9b:37:
                    67:42:a7:94:0e:41:f5:70:8f:1b:b0:ce:e7:fa:81:
                    06:2e:5c:da:ec:a1:18:34:0a:22:46:14:58:d5:99:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:24:B1:74:1E:C7:F7:29:A8:24:A6:E5:43:DE:2D:94:F1:78:C2:D5
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2e:46:65:70:20:56:fc:11:d8:fd:12:2f:4f:0f:3c:36:67:
         94:d3:43:7e:d4:ca:27:24:a8:f4:6e:78:19:d6:14:5d:36:db:
         ea:07:28:60:a8:c2:cb:74:06:d8:5b:02:77:ef:0c:ee:05:e6:
         27:f2:0c:a9:27:48:59:73:91:75:f4:3e:3b:2c:91:bf:ab:ff:
         32:4c:10:b0:cb:9a:48:73:ab:b4:c0:e6:da:77:75:20:80:c0:
         18:87:12:e4:12:5a:22:c0:50:2a:65:0b:4d:6d:af:2d:c2:be:
         fa:fa:39:52:86:c3:cd:7d:f3:e2:6c:25:be:3d:be:54:cf:30:
         df:6f:ab:54:cc:64:fe:5b:58:76:89:c9:d7:7c:39:93:87:11:
         5c:63:ae:b0:53:5a:a5:1c:1d:e5:fb:a1:c2:de:59:62:e4:0e:
         ca:e9:ba:b5:16:55:60:7a:1e:41:cd:72:bb:a8:9a:06:ac:d1:
         3c:10:8f:07:9b:c4:b6:e7:b0:ce:af:9f:e9:92:4d:4c:f1:fc:
         bb:83:ce:12:0d:57:68:06:e7:3a:ec:01:12:2c:86:4e:d8:60:
         ea:94:24:cd:89:12:ac:b6:e8:06:35:d1:a1:5a:22:05:fc:74:
         c5:6a:ae:c3:c6:05:4c:1a:52:46:e7:58:43:11:80:be:3f:fa:
         9e:c9:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----