Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          VsMdAfuf3L3mRwYyDkj9nUR1rj6WZgM28ydqwDylSCg=
Subject key identifier:   8E:35:94:AF:EA:D8:2F:54:F8:4D:B8:62:C3:75:B1:7E:4F:A6:95:E9
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       01962DF3E4C21F784E27F6BEC0FF621A59B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: /EJoAP+UJOtfUFs/BiDNXf18LnrnQkTz16mK+P2uDoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:c2:1f:78:4e:27:f6:be:c0:ff:62:1a:59:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=8e3594afead82f54f84db862c375b17e4fa695e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:dc:52:1f:de:17:44:5e:34:04:d5:d2:ab:
                    bb:83:e7:f3:84:2a:f5:be:2a:65:8b:6d:8c:73:fc:
                    bd:dc:dd:fd:12:e2:4d:84:84:00:23:44:60:bc:29:
                    fc:1d:ce:62:5f:3d:21:c3:ab:41:62:9b:8e:20:33:
                    1b:0a:6a:04:cf:5a:46:0d:d4:38:5a:52:99:12:99:
                    bb:d2:fc:8a:b8:5f:23:a7:f2:37:1e:33:5a:e6:e9:
                    af:9c:86:7e:ef:59:46:39:62:19:c9:0f:27:25:c1:
                    66:25:fb:a5:b9:37:a3:8f:ef:5f:6d:58:c5:81:f5:
                    7c:b8:9c:0c:f2:51:90:df:9b:fe:44:7f:f2:b2:8d:
                    f0:99:b5:03:22:7c:ec:3f:a7:da:53:26:40:84:e1:
                    73:79:ea:23:c7:bd:72:dd:81:24:f6:25:17:75:05:
                    5a:5d:d0:39:f1:dd:f3:a1:90:30:e4:11:d7:bc:c8:
                    44:ff:95:32:f4:dd:72:04:cb:2c:5a:c5:97:26:ca:
                    d6:38:b1:51:ed:d7:a6:f2:b1:ff:cc:b9:96:ed:5d:
                    4f:49:c1:02:a1:aa:02:43:48:37:ed:94:2d:8b:20:
                    ae:7e:f6:0b:0e:27:b4:25:7f:2b:d3:18:f1:6c:fb:
                    98:d3:d8:44:63:dc:85:d2:5c:62:8b:a6:e8:86:fe:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:35:94:AF:EA:D8:2F:54:F8:4D:B8:62:C3:75:B1:7E:4F:A6:95:E9
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:1f:70:9f:92:84:b5:7e:bb:0c:ce:9c:de:00:d1:73:59:3c:
         79:a7:af:56:d9:c8:e6:41:c5:d0:9e:7d:ef:7b:ad:b0:2e:49:
         45:e6:c3:76:13:94:bd:32:d9:fc:0f:18:fa:ee:87:65:79:fb:
         0e:66:d3:6a:5f:bd:88:75:90:00:c2:e6:9d:b9:42:94:f1:9f:
         5e:84:2d:63:93:ea:e7:ef:ce:3a:62:7d:85:87:c8:38:e5:7e:
         a1:bd:02:5a:f6:a9:ac:a2:12:b2:e2:95:e3:41:8f:ba:da:3d:
         4c:44:f8:60:94:39:b4:f5:e6:6d:54:65:6d:06:28:83:59:b3:
         74:73:5d:bf:5f:55:f5:bb:64:3f:dc:78:3d:d1:04:be:ed:4a:
         ad:2f:07:49:0c:12:b4:54:62:0e:5b:97:a1:83:4f:6b:8c:f8:
         37:6c:19:16:f3:8a:cb:ec:73:c7:65:65:52:46:c2:d8:c0:a4:
         16:f3:83:bd:77:bc:d8:30:b3:35:bc:e0:45:30:a6:15:e1:01:
         ed:e2:a9:b7:e8:b0:9e:0a:fe:25:a2:af:60:5d:39:18:b7:d7:
         e8:c1:67:8b:66:8e:7a:f0:01:a5:eb:0f:ea:6c:85:f0:1e:8c:
         ad:b3:0f:01:3a:74:de:14:f3:1d:b5:98:0e:97:c7:52:b8:15:
         d1:8f:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----