Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File:                     uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier:          ybRtF0CQqXoQFXkqF8/IxbgMuwPwcGmdFqk+MgVlQno=
Subject key identifier:   26:1C:00:A2:D8:D8:71:4C:DC:E5:F2:8B:07:80:19:CF:C0:E5:AC:D9
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer:       /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial:       01962F7495D9FAA77A11FB34CFB8B2FDD424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number:          1495
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
                          2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: ++Nu9lanR3kmAvoOl3sV9TLFUb7EOxIfhVVyfsq3R6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:d9:fa:a7:7a:11:fb:34:cf:b8:b2:fd:d4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=261c00a2d8d8714cdce5f28b078019cfc0e5acd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:2c:ea:33:b6:03:90:fa:6f:9f:24:c3:25:
                    09:90:92:af:a1:7f:00:f9:eb:fb:71:49:5d:58:ad:
                    3f:7c:04:f3:2e:6a:63:1c:75:32:1c:6e:25:b0:d8:
                    80:12:38:04:78:1b:46:8c:7b:ab:82:f1:62:f1:48:
                    eb:c1:07:ae:24:db:06:a6:8f:64:f5:47:c4:e5:60:
                    e6:a6:93:13:4a:04:73:02:6b:01:5a:73:7e:2a:d3:
                    75:a3:6e:92:20:9a:98:6f:67:5e:54:0d:89:c3:d9:
                    b0:28:f1:4a:85:69:c5:30:13:41:2a:3e:64:b0:db:
                    2b:90:7c:d9:1a:7d:56:5c:96:9e:86:44:1d:b7:3a:
                    bf:85:74:b7:98:a6:02:a2:5a:ff:5a:59:a5:c8:b3:
                    33:18:b6:4a:58:b0:7b:d4:c0:88:ec:51:05:cd:ff:
                    74:b2:ee:3c:3d:48:ef:c5:4b:df:8d:9f:3f:67:b4:
                    fe:9e:53:c6:8c:d8:9b:11:55:ce:c3:37:ef:79:0a:
                    c0:e8:ca:db:47:d9:60:e4:e3:50:8f:15:44:ea:e8:
                    63:52:e1:2d:08:9d:bd:63:38:5d:46:58:39:84:fa:
                    57:37:af:e8:30:19:b1:12:46:41:46:f4:67:50:10:
                    f2:fc:6b:92:22:52:57:f8:0c:d1:d4:a2:77:fb:b9:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1C:00:A2:D8:D8:71:4C:DC:E5:F2:8B:07:80:19:CF:C0:E5:AC:D9
            X509v3 Authority Key Identifier:
                keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:1f:f4:86:4f:51:c2:53:a0:a6:37:57:60:44:58:16:2d:
         1b:17:2b:12:83:40:a5:ef:7b:5a:df:8a:0a:5a:1d:41:fb:3a:
         2b:59:7d:0a:f7:81:a6:e9:52:e9:d4:de:78:a5:cb:39:85:97:
         71:a0:20:ae:fe:62:e8:b4:01:f3:6d:4a:34:73:db:8a:55:e3:
         ff:24:5d:0d:bb:4d:e7:f3:3f:94:82:ae:38:c9:df:f4:50:83:
         68:3d:3b:dc:02:1f:29:71:3c:64:83:18:4d:00:75:a6:75:09:
         21:b4:8e:c6:71:6f:df:0b:bf:db:11:47:a7:ca:08:11:d6:94:
         a9:45:d0:03:5a:59:f8:a9:9e:ac:68:ca:05:27:c2:71:09:e3:
         cf:97:06:17:a2:b5:f7:a3:d9:08:cf:0f:16:2e:ef:1c:2a:dc:
         ce:41:fd:1c:60:c2:fe:fa:58:f3:04:c7:67:2c:1e:7a:df:5b:
         b4:4c:f9:d3:38:77:d2:a3:4d:fa:b3:c5:9e:2e:77:b4:73:a7:
         49:d6:3d:80:82:f7:1c:9e:5b:b2:10:70:93:4a:39:8c:d9:d9:
         f0:e2:ec:3c:1e:1f:34:cd:29:f8:47:6a:71:7c:88:27:f9:92:
         2d:5b:8a:bb:34:9f:6c:9c:48:33:78:88:ef:50:9a:95:ba:06:
         42:ba:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----