Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
File:                     UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json)
Hash identifier:          s8/V+2m65CeQMJMBYdEA41mrWhMDwWsCqYO9zWW0X6o=
Subject key identifier:   DC:91:D3:B5:C9:6B:A8:97:96:19:6F:85:B5:8A:FA:57:1B:00:B4:01
Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
Certificate issuer:       /CN=52413f2e55907004c5ab6989de7eed1543535811
Certificate serial:       01962E9946257BCFC344C37161ECA85ECE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
Manifest number:          0591
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: ZwUQaSRwj5FaM1Joiw7IeasqtSv388lKelXrNMeBxPo=)
                          2: pPr-RfjQ8TKLflLIUQw5yKTIFpY.roa (hash: oEBThZTfbjTX75q4IqjgPgOk7OlUAtwvGwGIzijgHts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:25:7b:cf:c3:44:c3:71:61:ec:a8:5e:ce:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=dc91d3b5c96ba89796196f85b58afa571b00b401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:5b:a6:fd:3a:a2:6b:2d:af:6b:f4:b8:d5:
                    f5:db:25:c5:73:ef:d0:b9:a0:8a:eb:1c:37:8b:c4:
                    da:5b:3c:dc:c8:6a:47:92:8f:73:a6:07:f7:68:18:
                    bc:a1:b7:d2:21:22:26:66:40:e5:2c:12:8d:f7:37:
                    4d:57:d8:c2:76:ea:1b:1f:b0:f7:ed:3c:a2:91:dd:
                    c9:ba:41:b0:42:a0:c6:be:38:2c:08:e4:41:3e:cf:
                    cd:48:1f:1c:4c:40:08:7f:aa:fc:65:13:15:d3:a2:
                    fd:7e:c7:6e:36:1d:94:c8:54:bf:ba:10:45:d3:45:
                    3c:1d:bd:a8:b5:1d:71:cb:ea:74:28:37:e7:b4:19:
                    b4:38:59:86:9f:75:a1:e5:0a:80:a1:62:28:fb:fd:
                    8c:06:c8:ee:42:17:a6:ea:02:52:a7:00:69:63:68:
                    74:a7:25:b9:e7:96:b1:f6:30:a0:bc:7b:33:00:8e:
                    1a:9c:7c:ee:1c:35:0e:1f:4e:06:b7:6a:14:d4:3f:
                    f9:8b:84:f2:ac:22:19:70:7d:d7:bc:66:ed:21:56:
                    e5:5c:16:20:ab:88:2d:31:d2:ae:64:46:d7:e3:81:
                    fe:87:b9:53:28:97:91:89:51:a0:54:5d:47:b5:b1:
                    54:05:d8:f7:12:91:c5:eb:87:88:bf:30:71:a2:97:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:D3:B5:C9:6B:A8:97:96:19:6F:85:B5:8A:FA:57:1B:00:B4:01
            X509v3 Authority Key Identifier:
                keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:5d:dc:a9:46:b5:8f:a3:37:bd:50:03:34:5a:02:1d:03:
         bc:5e:21:06:03:b2:99:93:b2:0e:08:11:1b:91:f4:4d:5e:de:
         8c:00:fe:ee:89:f3:60:3b:75:39:16:76:77:e1:c1:69:67:59:
         d8:00:98:31:2e:e1:0a:a5:c4:c8:60:d9:6d:b5:50:eb:f7:53:
         40:9c:44:94:e6:62:e7:37:0b:f2:2a:88:1d:86:d0:ff:20:7e:
         a1:e1:8b:e7:7b:83:59:f4:b1:65:70:4f:6c:18:e2:36:ae:1f:
         43:1c:e8:88:a9:df:6c:79:95:bb:6f:ea:02:50:33:aa:7c:38:
         cf:3c:9d:7c:8c:10:3d:3b:fc:9d:23:79:c4:7e:1f:55:7b:97:
         a7:df:a6:5e:a1:50:32:5c:b1:ab:f0:7e:f6:82:25:74:46:f6:
         78:a9:a9:b7:e9:ec:e3:10:46:d1:81:a3:9d:f8:a3:55:66:9c:
         80:8f:fa:15:54:ff:28:88:b2:8c:26:1e:5d:98:58:33:3f:42:
         5b:c4:b4:c5:25:df:58:be:4e:5b:b8:97:ef:6c:62:37:59:06:
         5c:1d:f8:a0:03:58:e6:2f:6e:41:39:14:bb:39:73:cb:6f:2d:
         7c:92:e0:7e:28:07:4a:58:30:bc:61:8d:b4:94:81:66:cc:7e:
         0c:52:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----