Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File:                     UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier:          AYzrpQAgsxBMUOpBmzh3Rg9nEbI4EUDuvwjo7hR9XDs=
Subject key identifier:   F1:3C:63:2D:54:A6:4A:C4:25:19:27:77:8C:9C:6D:AD:BA:2E:84:1C
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer:       /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial:       01962FAB523837D81691AA13E8159F9F790D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number:          0BF1
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
                          2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: aUzpS8sZc76Ar+jmBhC6tIUJfMQk3XyL+fnDBtX6PAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:52:38:37:d8:16:91:aa:13:e8:15:9f:9f:79:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=f13c632d54a64ac4251927778c9c6dadba2e841c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:68:9a:75:67:b8:ca:d8:50:1e:49:45:8b:
                    ae:3d:ea:46:64:d8:5f:5f:41:15:9a:e0:fc:65:88:
                    dc:2d:64:07:9a:82:0f:fb:72:ae:39:ff:d2:30:ce:
                    36:4f:87:ba:70:51:8f:e7:f0:cc:56:44:74:d7:66:
                    46:01:82:2b:57:19:5b:57:39:79:a3:f1:8e:04:6c:
                    a9:de:40:37:dc:4a:5a:89:3d:f5:e3:c6:4d:de:1a:
                    9e:ac:1c:4a:1a:45:58:a8:0b:82:fb:c9:b3:66:e7:
                    2a:20:a9:6d:a9:19:77:06:d8:1a:33:53:56:53:4d:
                    73:2f:92:04:d2:22:bf:ba:0f:6f:76:e4:6c:1c:70:
                    16:df:3c:f6:60:45:d2:86:c2:5c:bd:b6:bf:93:32:
                    91:74:70:c1:d0:ef:54:3c:c5:ee:be:e9:03:da:d6:
                    73:b2:5c:39:79:06:40:c9:ce:c3:65:67:e6:78:8f:
                    fd:9d:8b:18:46:f1:f6:92:d1:9f:6c:fe:82:54:b0:
                    37:9d:17:91:23:88:f5:5c:b2:28:d1:66:74:c0:9c:
                    1c:42:57:b9:a7:6d:ae:10:01:5e:28:8f:f0:5c:80:
                    7d:d7:cc:1b:73:53:ec:81:d4:83:ca:e0:29:30:4d:
                    f7:68:47:86:2f:f3:5b:86:86:5a:a7:0e:5b:63:3d:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3C:63:2D:54:A6:4A:C4:25:19:27:77:8C:9C:6D:AD:BA:2E:84:1C
            X509v3 Authority Key Identifier:
                keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:92:d9:79:b6:1d:5e:0c:5c:f2:b1:5d:13:7a:90:82:5d:62:
         79:e6:c5:5e:87:e5:56:0d:7b:1d:af:ab:4f:9e:8d:e1:88:40:
         94:3b:ec:bb:71:2f:94:0b:79:75:47:86:43:c5:26:8d:fa:13:
         e7:42:b2:fb:ec:3c:f4:4b:00:86:7f:34:65:01:13:ae:a6:77:
         1b:76:c7:c0:f6:fa:81:35:1d:ad:14:a4:fb:32:e5:be:ce:29:
         bd:e1:36:95:4c:96:8b:d5:e2:7a:29:21:82:08:f8:ae:a5:f4:
         1a:fb:cb:a8:56:55:5b:15:a0:95:6a:0e:8b:30:c7:db:07:91:
         fa:c1:9a:ae:3b:88:54:f4:29:90:3f:61:5a:bd:28:ad:9b:84:
         0b:0f:cf:fd:2e:e0:43:ef:ac:11:c5:a7:77:af:32:a1:7b:07:
         0b:97:c4:26:c1:5d:17:b2:73:ac:04:b0:18:2a:2a:c5:51:22:
         06:2f:0b:d1:a5:a6:e4:f0:ff:2c:07:2a:66:38:83:53:c2:0e:
         76:94:4e:7c:7d:50:fe:3c:81:18:e7:c7:a3:83:99:a7:e9:28:
         f6:58:85:1d:d4:3d:03:a6:b9:56:b4:61:e9:5d:54:36:e2:8c:
         71:f7:25:8c:d2:a1:bc:07:f6:63:a1:e6:98:22:d9:70:a5:aa:
         9a:57:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----