Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File:                     UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier:          vadGoHnTNVpyskLiH9tUpCXRGAP1czHKGqIBlwxRkqw=
Subject key identifier:   BB:23:45:DF:B8:A8:93:F5:E1:39:5B:4C:A1:E3:D5:8F:72:FA:7C:07
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       01962E99238D17E040A9246E9DEE3531EB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number:          0664
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=)
                          2: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=)
                          3: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=)
                          4: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=)
                          5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: iIj8ysTAXb0AS7f+4J7Qg4O9Kvt/TyrQvZB8FKtYHk8=)
                          6: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=)
                          7: ZIUzaNeA-dqB_cS44MLnf0HuawA.roa (hash: q8f9plPLOl0nPVToevY6P1epucVG2NTh0o+Jv1i4WmQ=)
                          8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=)
                          9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=)
                          10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=)
                          11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:23:8d:17:e0:40:a9:24:6e:9d:ee:35:31:eb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=bb2345dfb8a893f5e1395b4ca1e3d58f72fa7c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:d5:5e:b5:f3:c9:0c:ea:90:52:40:25:72:
                    cb:f3:40:30:26:54:44:73:3c:40:07:11:3c:35:eb:
                    ab:af:cb:d6:94:c0:9f:55:ed:1c:80:86:61:c6:aa:
                    56:10:8f:88:8c:a4:07:fc:28:78:87:8c:60:cd:39:
                    3d:4b:5e:5b:b2:31:15:ba:63:48:90:59:82:da:1c:
                    3b:56:99:95:cb:1d:38:fa:88:16:a1:91:82:0c:16:
                    37:d2:97:5f:ae:9e:d4:c1:51:35:dd:4d:cd:2a:4f:
                    23:e7:27:50:b8:94:4e:22:6c:1a:49:36:00:43:3d:
                    4a:97:45:a6:bb:e9:ee:52:b0:6b:13:a8:33:b6:af:
                    c3:d6:ca:ed:c5:46:79:e5:45:5e:93:a5:44:3e:3c:
                    e1:2f:1f:4f:29:75:b5:03:79:8e:f3:61:10:9f:46:
                    ab:ba:fa:80:4c:10:38:e9:ab:5c:b1:ea:26:ce:08:
                    8d:63:89:81:63:3b:0b:59:6e:1e:c9:e0:30:df:73:
                    33:43:71:f8:d7:eb:04:fb:ad:18:9b:9c:6d:80:ad:
                    94:0c:fe:5a:7b:ab:5d:ab:68:43:4c:73:9d:e8:32:
                    3f:89:0b:ed:cd:dd:14:51:6d:f2:46:7f:04:e0:f1:
                    40:5c:f4:84:60:4e:36:da:31:a6:6b:98:bb:e7:5d:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:45:DF:B8:A8:93:F5:E1:39:5B:4C:A1:E3:D5:8F:72:FA:7C:07
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:e8:cb:ba:e8:6b:ca:71:1b:3d:95:76:26:18:e8:75:16:9b:
         c1:53:68:47:f8:4c:11:18:0d:45:3a:fb:d1:d9:c9:96:9e:f9:
         ad:e4:9b:46:99:5b:67:b3:55:83:ad:bd:61:ea:ae:e0:13:82:
         ed:7a:c8:6d:72:fc:ee:fb:d9:48:11:40:eb:05:fd:4e:85:36:
         20:c1:17:16:1b:5f:47:b9:10:f1:98:06:8d:91:81:4d:f7:c9:
         80:aa:e8:a1:69:4a:8e:04:df:7a:74:ef:57:cb:2a:0a:87:7b:
         5a:02:47:80:98:6d:99:4d:49:57:00:da:e9:05:1b:ef:39:9c:
         e9:e8:4a:c4:64:27:cd:99:fd:b4:e1:2e:fa:2e:9f:33:e0:06:
         68:34:e1:91:4f:25:82:c0:d1:1b:16:cd:c9:d2:d8:c5:cb:ac:
         f5:04:0a:c2:f8:0a:11:2e:96:ee:90:12:25:ea:24:77:7d:ab:
         f5:59:70:f0:1f:d5:c7:fe:9f:a1:a0:4c:cb:07:11:47:3e:ac:
         b8:8c:f0:f4:33:77:36:99:66:ce:be:12:68:da:b0:67:c1:b8:
         38:46:76:3c:f8:e0:eb:02:4d:3f:af:42:4e:aa:77:10:12:e1:
         cd:b1:6f:94:e7:9f:ba:44:73:38:cc:a6:08:04:34:03:24:ab:
         8e:27:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----