Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File:                     U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier:          1zw/dW+QCw6uu3iM+L/F0SBjgbChmj+BbqceSjBbN24=
Subject key identifier:   35:A1:18:3C:7C:87:F4:88:BC:96:31:04:47:72:B4:67:2F:41:F5:61
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer:       /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial:       01962F06743E2F42D3B6EAE71EEF77B76CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number:          0C86
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: Jpi5P7jP9kV29oMrf0/HoxIswOYBLhgO6ShGBkv+ibM=)
                          2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:74:3e:2f:42:d3:b6:ea:e7:1e:ef:77:b7:6c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=35a1183c7c87f488bc9631044772b4672f41f561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:22:82:35:7d:67:a6:5d:ce:e6:e0:c1:f8:
                    9f:f7:cc:47:9d:77:3c:28:13:c0:bf:87:77:27:b8:
                    5f:04:73:eb:05:b4:4a:c8:36:03:a1:15:e0:d8:bc:
                    db:db:53:b8:8a:68:0d:8d:ad:60:15:4d:e5:80:3d:
                    78:7c:df:2a:47:99:e2:fd:97:cf:f1:63:0a:4b:67:
                    46:bb:29:de:76:12:60:c3:f0:26:2d:92:e4:79:82:
                    84:6a:81:bc:bc:d3:6a:c0:dd:2c:47:9d:25:1d:c8:
                    5d:a4:a6:b9:bc:5e:08:6f:a4:0c:4a:3e:2e:67:8d:
                    7e:70:76:b4:0e:1e:16:10:7c:5b:c8:fe:0b:fa:d5:
                    b5:cf:45:54:79:24:27:ae:d5:be:82:e8:8d:d2:7a:
                    88:93:d4:5e:c2:2c:cb:eb:b7:89:54:9d:12:83:56:
                    de:e1:27:0d:95:96:05:5d:d6:11:f5:96:3e:87:ff:
                    ca:b8:3a:1c:d6:f0:f0:67:0a:10:40:6d:be:eb:e2:
                    ee:07:59:70:89:8e:dc:14:a2:88:26:37:c6:c2:d3:
                    f7:35:07:6d:79:9e:e1:bf:95:89:41:0f:97:df:44:
                    38:71:f8:87:c8:7a:09:e1:d2:f5:f7:35:d8:f8:f9:
                    09:dc:f9:b8:a8:12:66:f8:39:4c:af:b0:1f:c1:8e:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:18:3C:7C:87:F4:88:BC:96:31:04:47:72:B4:67:2F:41:F5:61
            X509v3 Authority Key Identifier:
                keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:37:71:ff:a3:97:9a:df:f6:9b:45:9c:2d:c7:16:f0:51:
         34:ef:f8:01:60:31:90:f9:eb:45:f5:88:c7:97:78:de:f8:43:
         c0:b9:cc:a9:6a:80:81:91:86:a4:f2:85:11:d7:fa:77:5d:27:
         26:42:00:8b:d5:19:5f:4b:35:d2:92:e9:74:06:9f:19:3a:a8:
         95:cf:c3:c0:d6:75:f6:57:8d:e0:72:96:d1:08:61:47:65:2a:
         f7:90:ab:b5:11:28:f6:20:fc:70:3c:8c:cb:4c:76:f3:c1:a1:
         ff:ec:62:b8:4b:f2:09:d8:9b:85:02:71:cd:19:d8:fd:84:be:
         dc:6a:41:35:85:da:73:88:3e:f1:9c:10:22:fb:e9:a0:6e:f9:
         94:19:de:db:b1:97:90:3e:f1:de:1c:52:4d:32:cb:20:d0:95:
         97:2f:c6:1d:3a:d6:4b:f4:39:82:15:64:cb:37:af:e4:ed:1d:
         1d:bb:69:b4:ea:16:7a:00:77:2b:82:e1:5f:bd:7b:8f:2f:2c:
         c1:15:ab:7d:f5:70:9d:f4:ff:d6:97:74:80:1a:88:5b:31:c0:
         94:4f:3f:69:96:63:b6:b3:ab:52:42:e1:df:2f:b4:21:a5:77:
         29:eb:a1:6d:e7:a6:fb:c0:19:d2:7b:f3:52:a9:de:38:85:c4:
         9b:6e:6e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnQ+L0LTturnHu93t2z+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTUwYjIzODJlMDBmYTdkZjE5NGU2NDg1ZmUxNDI1ODM2
MjEzZmYwHhcNMjUwNDEzMTIwMTE0WhcNMjUwNDE0MTIwMTE0WjAzMTEwLwYDVQQD
EygzNWExMTgzYzdjODdmNDg4YmM5NjMxMDQ0NzcyYjQ2NzJmNDFmNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYYigjV9Z6Zdzubgwfif98xHnXc8
KBPAv4d3J7hfBHPrBbRKyDYDoRXg2Lzb21O4imgNja1gFU3lgD14fN8qR5ni/ZfP
8WMKS2dGuynedhJgw/AmLZLkeYKEaoG8vNNqwN0sR50lHchdpKa5vF4Ib6QMSj4u
Z41+cHa0Dh4WEHxbyP4L+tW1z0VUeSQnrtW+guiN0nqIk9RewizL67eJVJ0Sg1be
4ScNlZYFXdYR9ZY+h//KuDoc1vDwZwoQQG2+6+LuB1lwiY7cFKKIJjfGwtP3NQdt
eZ7hv5WJQQ+X30Q4cfiHyHoJ4dL19zXY+PkJ3Pm4qBJm+DlMr7AfwY5JFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWhGDx8h/SIvJYxBEdytGcvQfVhMB8GA1UdIwQY
MBaAFFNVCyOC4A+n3xlOZIX+FCWDYhP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDIt
ODljNTNkNjMwNzY1LzEvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDItODljNTNkNjMwNzY1
LzEvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRw3cf+j
l5rf9ptFnC3HFvBRNO/4AWAxkPnrRfWIx5d43vhDwLnMqWqAgZGGpPKFEdf6d10n
JkIAi9UZX0s10pLpdAafGTqolc/DwNZ19leN4HKW0QhhR2Uq95CrtREo9iD8cDyM
y0x288Gh/+xiuEvyCdibhQJxzRnY/YS+3GpBNYXac4g+8ZwQIvvpoG75lBne27GX
kD7x3hxSTTLLINCVly/GHTrWS/Q5ghVkyzev5O0dHbtptOoWegB3K4LhX717jy8s
wRWrffVwnfT/1pd0gBqIWzHAlE8/aZZjtrOrUkLh3y+0IaV3Keuhbeem+8AZ0nvz
UqneOIXEm25uUg==
-----END CERTIFICATE-----