Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File:                     UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier:          wAcNZMeTjT7Vdf94aZI+Pjs19uzcvnkbYl/kwE6w66w=
Subject key identifier:   39:66:0A:E2:EB:FF:AD:1B:97:30:B5:DF:74:9A:B6:DF:03:7B:06:11
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer:       /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial:       01962F06426E59AA5DFAB867882E929D4B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number:          0BCD
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=)
                          2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: 9rfZzznFVFIjT+6tOhg/TZLmGEKKr85vzNTw6dSt1Lg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:42:6e:59:aa:5d:fa:b8:67:88:2e:92:9d:4b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=39660ae2ebffad1b9730b5df749ab6df037b0611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:80:fd:66:96:9c:c0:82:0d:21:64:e9:b2:
                    7d:2d:d3:ee:ae:61:d9:f9:ad:27:05:e7:7d:2d:45:
                    9f:01:38:b4:b3:14:22:65:44:f4:4f:83:a6:03:f6:
                    46:6b:7c:44:c8:37:bc:a3:0d:03:2f:c6:f0:dc:37:
                    9f:8b:8c:33:45:69:37:3e:e7:b4:36:16:1d:e3:e1:
                    b6:a9:1f:b6:6e:a6:e2:bb:80:39:76:04:67:9f:c1:
                    06:11:f9:16:5e:d7:ef:12:6f:3b:57:f5:e5:ff:be:
                    95:db:c9:81:f9:7d:c1:6c:a3:95:4c:a9:95:dc:8c:
                    c8:1b:29:5b:7c:59:b6:49:cc:31:16:87:82:4d:50:
                    a4:ab:46:44:1c:76:92:21:5e:a4:72:2f:db:5f:fb:
                    a8:17:b8:3a:95:a3:2d:0d:9e:83:06:f5:43:b9:b7:
                    7a:b4:02:c1:3e:c9:bc:11:5a:8f:6a:49:fa:89:f7:
                    75:97:d2:97:5e:d5:3d:85:98:c7:c4:f1:37:7e:4d:
                    ff:59:79:dd:26:e7:74:01:ac:4f:06:d6:44:db:c1:
                    3d:db:7d:ee:c8:04:bc:f0:02:2c:2a:dd:a7:55:10:
                    36:20:5b:74:1f:0a:9e:2d:82:55:68:a0:3c:98:6c:
                    73:fd:06:5a:59:38:f6:34:55:5d:20:e4:43:12:34:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:0A:E2:EB:FF:AD:1B:97:30:B5:DF:74:9A:B6:DF:03:7B:06:11
            X509v3 Authority Key Identifier:
                keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:51:f6:ba:90:bf:01:78:56:7f:eb:bb:fe:bb:e5:4d:af:
         32:c3:40:45:18:a4:c8:fa:b0:69:35:92:94:78:4f:e4:b9:a2:
         2f:ad:55:26:86:f2:59:ca:86:aa:31:89:33:0f:27:ca:21:f6:
         c2:66:a5:ba:fc:53:61:d1:4c:25:bd:c2:37:40:b3:69:dc:b3:
         4f:9c:20:1c:25:fa:69:a5:46:8f:f9:c1:f3:75:78:bf:16:67:
         97:b2:5d:73:e6:05:14:ab:a7:94:7e:16:d3:a0:82:cc:fc:12:
         05:b8:b6:77:43:2c:d4:3b:f4:8b:7d:69:c2:57:00:29:f9:4a:
         2c:0d:c0:b4:81:fd:59:3a:10:4f:dd:4f:9f:e9:80:88:3e:c9:
         e6:f0:af:d0:17:79:b3:67:a5:d2:6a:d0:88:8f:ff:1d:48:d3:
         cd:80:47:ba:55:af:b0:63:b2:4d:31:69:bf:3a:8d:43:46:3b:
         f7:6e:97:46:b3:62:7b:b9:3f:a6:27:95:58:a2:24:79:d1:5a:
         b1:45:5c:f8:7a:0f:7f:4a:d4:c7:70:b3:cc:cf:63:c8:21:e5:
         bf:95:84:fd:8b:95:2f:3f:22:20:5b:22:ac:15:b7:a0:46:13:
         c4:21:17:0c:17:15:10:15:3c:34:99:33:92:f6:22:7c:f1:41:
         2e:85:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----