Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File:                     uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier:          1GAO+naxj9raoYOvB6ZCMI/vhGAg6rbZJuAJ4BmrRKk=
Subject key identifier:   64:29:88:86:4D:1F:83:CB:B0:B7:A0:81:58:91:03:DE:6F:C3:CC:B5
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer:       /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial:       01962E61D6B06C64C31E929DC426098E310A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number:          0578
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
                          2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: vSZcp5lUDIiP2URpS6FQ5qnk4nepwARsHAOHWZu2wAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:b0:6c:64:c3:1e:92:9d:c4:26:09:8e:31:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=642988864d1f83cbb0b7a081589103de6fc3ccb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4e:25:6e:04:b1:0b:2d:43:b3:88:37:96:fc:
                    32:72:8f:0c:27:7b:e3:ef:0f:ca:24:ab:08:d2:64:
                    a2:f6:69:60:5b:06:26:ff:0a:67:64:c0:66:88:72:
                    0d:5b:f9:0e:25:ed:ad:28:2c:01:c0:76:15:7e:ca:
                    c9:86:ae:c3:9e:f8:21:66:f0:ab:bb:af:c9:7b:ea:
                    09:ad:71:80:ee:b8:35:74:12:5f:13:98:a2:55:d4:
                    60:4e:85:e8:a0:c2:47:4d:ef:2d:b2:63:73:18:02:
                    a5:c8:51:4f:13:db:68:86:71:9b:2b:a4:ed:18:57:
                    82:6f:4e:37:e0:e2:2b:a0:06:da:3e:23:5d:f3:61:
                    a0:37:1a:e3:99:2e:0b:af:98:57:55:cf:9d:2f:be:
                    7f:51:71:2d:1a:a3:b7:18:d2:05:df:6c:bb:b8:1c:
                    52:c3:97:98:e9:e5:10:0f:2b:41:be:18:3c:3b:36:
                    e7:21:90:6c:03:6a:9e:e3:f8:68:2e:9c:83:c6:d2:
                    7b:b3:9f:6d:51:77:9a:c6:1e:21:1b:84:4a:c8:f8:
                    48:c4:a8:1f:6a:ef:ea:1e:5d:fe:34:88:39:48:42:
                    18:57:f2:5d:f6:af:9a:73:8f:b0:e9:66:39:cf:8d:
                    b7:f9:c5:52:40:23:90:84:e6:73:6d:db:0a:a1:43:
                    b5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:88:86:4D:1F:83:CB:B0:B7:A0:81:58:91:03:DE:6F:C3:CC:B5
            X509v3 Authority Key Identifier:
                keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:2c:02:e4:aa:c8:8e:c5:4d:8a:cb:24:ea:04:89:a9:cf:
         9f:2d:8a:53:d6:0d:77:cf:97:2d:a1:03:81:c9:f2:c8:89:66:
         8f:cb:f5:18:b2:c1:42:99:7c:e5:5a:60:e9:fc:71:f2:ce:78:
         85:c7:2a:8d:d4:a7:de:c7:70:41:5c:88:a6:18:be:c5:e5:33:
         25:b9:ab:a2:8c:ab:38:6c:a1:69:16:46:42:2d:70:4f:e6:6f:
         a7:55:ac:3c:31:e9:d3:cd:4d:09:59:4d:c4:4b:3a:e7:d2:4b:
         9f:fc:83:9a:0a:c9:2b:7f:6e:91:79:07:c6:cd:33:51:ad:41:
         1e:39:8c:00:0d:45:82:c8:7b:87:fe:d0:20:40:a5:8f:ef:41:
         2c:76:83:6b:a9:dc:01:e2:f8:b7:0a:8a:2a:55:a3:60:4b:bd:
         da:16:9c:c3:04:31:54:ec:9a:79:59:a5:3a:35:8e:59:fb:2b:
         69:34:72:ec:58:7b:9b:7b:f8:31:0c:0f:00:18:f5:5d:f4:90:
         f6:da:9a:8f:01:34:4b:c4:e5:96:ff:84:0a:3e:2e:e6:94:53:
         19:b7:ea:e3:b0:be:13:65:6d:4d:b6:0d:f2:e0:5a:fe:af:12:
         26:67:53:e6:f6:e2:8a:cb:0c:2e:0f:67:95:27:96:e1:22:93:
         6c:dd:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----