Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File:                     uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier:          +/kz+JE80puhYMmBzLuT0FVRF7D3aItv9/A3X9oYUbc=
Subject key identifier:   F7:B1:60:1F:DE:F1:62:61:D7:03:06:50:9C:EC:F1:A2:A3:8D:9E:BD
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer:       /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial:       01962E61FD759C04DB2B1BB814B1C8A6DE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=)
                          2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: ZPxT6c8p07LaSmI1Cil6Z3xlVLo3gVRhgfkmpUdKNzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fd:75:9c:04:db:2b:1b:b8:14:b1:c8:a6:de:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=f7b1601fdef16261d70306509cecf1a2a38d9ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:54:e6:d7:2c:1c:86:49:b1:67:6e:ae:f6:
                    b4:40:5c:66:da:49:8b:7a:d8:4d:13:cb:98:3d:32:
                    a4:56:af:e8:fb:28:39:f2:b9:25:df:9e:ec:23:ab:
                    d3:e4:48:6e:cd:36:06:d8:2e:1e:68:89:58:13:b3:
                    48:3c:e2:a6:d5:d9:1d:8a:b6:a1:d9:46:ad:23:fd:
                    2a:21:9b:b8:5d:6c:a3:8a:2c:70:9d:64:f9:a8:86:
                    53:38:3c:97:89:1d:bf:1b:bb:b9:b5:9e:f6:96:28:
                    3c:eb:0c:6e:14:ac:01:44:01:77:a9:44:d6:68:ea:
                    f2:83:9b:31:9b:6d:0a:ef:c3:52:9e:80:cb:e9:e9:
                    b9:5c:ba:8b:b8:83:f7:36:91:60:f8:70:36:a7:c2:
                    0c:f5:de:9e:bb:83:60:d7:8a:5c:3e:43:6f:3c:40:
                    74:7d:ea:be:19:31:a1:3c:41:af:c2:db:2e:1b:4a:
                    6d:a0:1b:38:2a:51:be:c2:00:8e:5d:c1:b8:be:51:
                    03:23:bc:6d:63:72:56:d4:b5:7f:fd:d9:77:c9:95:
                    38:f2:e0:e8:0e:60:2d:8b:7e:65:3e:46:a4:19:70:
                    b1:ca:6d:14:0e:35:db:d8:26:70:99:ef:b2:6f:36:
                    53:8e:a7:fe:16:62:6d:44:b8:e7:3b:05:d4:f6:83:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:60:1F:DE:F1:62:61:D7:03:06:50:9C:EC:F1:A2:A3:8D:9E:BD
            X509v3 Authority Key Identifier:
                keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:5d:de:49:70:4c:4c:e7:8f:e8:40:7f:51:9c:73:fe:e4:
         33:19:b9:19:0b:21:39:8d:4f:aa:bf:f8:d8:a2:7b:28:69:2d:
         c1:b7:76:eb:5b:8c:69:7c:bd:e0:90:d4:61:1c:96:e0:6e:f9:
         9b:c1:80:7d:65:ed:e4:a4:8b:e3:3e:ac:9d:4f:92:25:5f:5b:
         fd:bd:d9:a4:f5:84:cc:88:2a:c1:07:a3:8d:c0:95:01:7e:1e:
         80:d1:4d:b5:6e:39:8a:f6:ee:ed:42:02:94:20:d0:94:f6:5c:
         d2:cb:c1:65:cd:f0:f0:c4:ba:a4:d8:e2:67:45:cb:d7:9c:c0:
         27:5c:32:f2:a0:48:94:cb:67:0a:3f:8d:b8:5e:ee:aa:70:39:
         90:d2:90:02:8d:7c:09:72:55:ce:08:c5:97:55:9c:e6:c1:22:
         07:4f:8c:2c:a5:5b:aa:bd:22:d5:d4:93:6a:da:f6:7e:12:65:
         9d:40:2a:f1:63:bd:e5:03:fb:37:21:56:84:62:da:a8:46:fe:
         e5:fa:d9:8a:b5:a1:38:75:f4:a4:bf:4f:d8:a9:0f:57:a9:2e:
         1e:4b:46:12:96:87:58:d1:bd:57:88:a0:25:4a:86:75:7c:11:
         d7:af:7b:90:ac:38:30:49:2d:a2:0d:8f:4f:df:f6:cf:5f:16:
         15:48:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----