Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File:                     UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier:          V2nvsTU7enM9ye+F2LO/ttR/RBGRgyJcRsOrTleZW/s=
Subject key identifier:   F7:CD:C3:2A:A2:D5:75:B1:75:4D:6B:C0:36:3F:22:95:F3:93:55:88
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer:       /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial:       01962E2B3270927B96725FE552478CD762B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number:          0D68
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: ieIhQOncuorxqr8gg+xGUGkY9ZBTfKs+EFbEYyAT9yg=)
                          2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:32:70:92:7b:96:72:5f:e5:52:47:8c:d7:62:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=f7cdc32aa2d575b1754d6bc0363f2295f3935588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:2c:a7:49:50:65:bc:2d:e1:cd:0c:94:83:
                    1b:5a:32:46:b8:51:9e:70:07:55:2c:73:f7:0f:97:
                    71:a0:3c:18:97:4a:ea:92:37:56:89:8d:c1:48:88:
                    99:44:2c:ea:ea:e6:09:d1:23:97:fb:df:9d:b4:2b:
                    68:40:25:60:7e:c3:66:b1:7a:ee:47:f0:b9:7f:71:
                    16:83:2b:34:9c:5d:be:50:7b:1c:2f:12:46:a9:b4:
                    df:c5:0f:cb:1b:ef:77:db:70:b8:79:50:d5:05:15:
                    38:7d:54:86:bc:55:fd:05:34:36:7c:43:93:21:55:
                    3a:d8:e3:06:29:84:57:f0:7f:16:94:5d:d8:a9:05:
                    04:91:6b:00:c7:73:d0:72:08:84:f2:29:40:79:f6:
                    86:31:5a:0f:38:26:e0:88:73:4c:b9:01:43:8f:3b:
                    e3:de:41:04:9a:9c:6b:f5:65:cc:cb:f8:7a:d5:d7:
                    8f:d0:ec:aa:92:45:a9:be:f9:b9:5a:94:0a:c3:03:
                    ac:42:2c:42:93:7d:79:6e:3c:03:39:bf:ab:57:cb:
                    e7:cf:d7:13:f6:1e:cc:6e:bf:a8:8d:7a:94:2e:df:
                    0e:38:a4:a6:2b:a5:95:db:9d:ee:17:5e:55:be:a6:
                    d7:c0:12:95:3e:ee:c9:03:aa:d9:97:6c:cf:40:e0:
                    16:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:C3:2A:A2:D5:75:B1:75:4D:6B:C0:36:3F:22:95:F3:93:55:88
            X509v3 Authority Key Identifier:
                keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:24:8d:b8:ed:6c:3c:1f:35:72:9c:ce:43:2b:d4:ed:f7:
         49:a4:15:0a:fe:23:10:62:7a:c7:ef:ad:18:77:3e:90:5e:3d:
         3e:7c:2d:be:d9:e3:98:69:0b:a0:e1:ef:ce:d8:54:d4:47:64:
         79:12:46:7d:af:82:96:29:e3:5a:b0:b8:2d:07:56:01:18:13:
         79:bd:bc:25:a5:bf:fc:ca:6b:df:94:2d:26:14:dd:e8:08:b4:
         1f:61:fe:38:be:dc:b0:d2:9a:83:e5:e0:80:6b:98:41:9b:0d:
         47:0d:33:79:47:5e:4f:70:32:1a:97:d4:40:fa:73:b7:af:02:
         11:25:30:7c:36:84:7e:b6:cf:09:82:4c:ac:dc:5c:69:b1:b5:
         b5:48:6d:9d:a7:ea:ec:0c:69:1e:31:7c:ae:07:c7:53:5e:89:
         7b:29:f9:15:1b:0d:b0:8c:32:a3:8a:59:b0:58:b6:ad:b8:ed:
         66:91:d4:93:b0:c4:61:54:a7:c3:5a:d1:f5:43:0a:80:a2:93:
         eb:2e:60:5f:13:95:94:1f:d8:4f:ba:e1:da:8d:61:ba:af:c2:
         dc:e8:2e:f6:6b:77:11:48:3e:d2:72:50:ac:1b:21:73:e1:5c:
         a2:8a:fc:04:06:ee:97:ec:08:e5:04:3c:cd:c6:10:dd:8c:de:
         b9:73:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----