Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          jqiIkkNHIe+5cJW1/3wUl74yzhGPTqjrkGlul0wYB20=
Subject key identifier:   B4:CA:18:38:D4:94:46:BB:C5:C4:26:DF:D0:AE:FE:77:BA:9F:19:68
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       01962F74505C83FEDC6EC09E28772EB53288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: EouGJVwrIQXLafe+nb48mkUDGxcJkBGVrzUKozCdoss=)
                          2: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (hash: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=)
                          3: oEAOgGGkZaklYkgZV_R2RLLowJE.roa (hash: nmzYZ74qwgtxEwczkSmrHUbIJNO39YmkNHQC+ORU3+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:5c:83:fe:dc:6e:c0:9e:28:77:2e:b5:32:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=b4ca1838d49446bbc5c426dfd0aefe77ba9f1968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:9e:55:1e:8b:59:12:04:a2:62:6b:29:04:
                    39:d9:fd:a6:0f:31:5b:7e:c2:6a:02:fd:fb:b4:5a:
                    bd:d5:e9:c0:7b:55:8a:78:47:f1:b3:95:ea:34:ee:
                    a8:b0:4f:94:e9:18:35:b7:d9:73:0c:51:da:91:f9:
                    8b:b7:99:6d:df:01:49:7a:17:c1:a7:c0:3c:0e:29:
                    fd:e5:29:a9:ad:08:55:2a:40:94:79:cf:34:1f:b4:
                    0c:21:57:d7:62:d0:4f:6a:c4:74:81:09:0d:d0:52:
                    96:cc:99:86:7e:2d:90:e3:60:38:37:6e:73:e5:2b:
                    8c:7d:91:2b:fc:41:86:b1:7d:7d:2e:2d:d0:aa:41:
                    0a:59:c7:e4:e3:56:4a:cc:13:53:7d:9b:51:5e:ae:
                    7b:ba:de:2e:97:7c:a5:49:90:51:92:b5:9c:aa:8d:
                    9e:37:16:56:6f:06:b1:6f:5a:87:24:31:99:fc:86:
                    7f:c8:b6:97:e3:c0:1d:1d:61:2f:7e:38:cf:51:ff:
                    7a:2c:e9:22:de:eb:97:73:2b:b8:77:ea:de:7e:d0:
                    4d:33:ec:9a:e8:1c:d8:d6:80:3e:7d:2b:54:c8:9a:
                    4b:d6:0b:0a:f1:1a:ba:98:75:66:91:59:df:41:0c:
                    e7:0b:dd:48:f3:f3:3f:ba:76:e8:0f:c4:91:28:64:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:18:38:D4:94:46:BB:C5:C4:26:DF:D0:AE:FE:77:BA:9F:19:68
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d4:9e:cb:dc:f4:89:f3:30:19:2d:78:50:80:11:e8:c8:89:
         29:24:1c:e3:ae:a5:03:cb:1f:e2:ca:f7:58:ee:6e:b1:0a:1a:
         fb:48:c0:0f:18:41:22:f0:2a:5f:0c:6d:f9:bb:96:3e:c1:99:
         50:8a:4f:86:cd:18:e3:f8:20:26:c9:05:65:fd:7d:08:52:51:
         fb:d5:e5:cc:70:1e:ff:53:e0:11:39:1a:94:a8:55:12:99:0c:
         99:60:a2:ee:24:d8:46:db:4c:4f:9d:01:33:d6:bb:0a:67:37:
         d6:f5:71:35:fe:29:16:58:93:bf:1e:73:6e:7e:d2:4c:c4:95:
         1d:42:a1:71:4d:18:cc:ea:dd:0a:73:2c:da:c4:5e:76:af:83:
         89:a8:a5:4e:a5:11:55:31:0c:bd:90:fb:16:14:28:90:bb:10:
         af:86:eb:20:fd:c7:1e:45:01:70:d6:37:ca:4f:18:cc:08:87:
         8b:ca:3c:45:38:52:47:79:b8:04:16:6c:db:4b:18:8c:37:7c:
         3d:17:c0:40:db:b7:37:67:61:8e:b8:72:47:0d:45:40:d1:a7:
         48:ac:5a:72:d3:89:2b:39:c7:7f:c2:b1:7a:81:7c:0e:15:b2:
         ad:48:56:47:7c:05:b1:9f:c0:04:da:fc:e7:64:a8:3a:6b:71:
         95:fc:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----