Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File:                     U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier:          r7c+gmEM9g1qlLYiw2gOrlxid+6J9A0M/K6loY/+DaA=
Subject key identifier:   A1:93:D1:28:39:CA:2A:44:C5:A8:66:5D:3B:41:4D:9F:DA:0F:24:35
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer:       /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial:       01962E61C6A0D0D22A5EF6C82216C10B4255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number:          0FE8
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
                          2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: HNm8oa0OGhb3Fi9nZKjZQKegcSNYgXgSuCc+SSVNo18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c6:a0:d0:d2:2a:5e:f6:c8:22:16:c1:0b:42:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=a193d12839ca2a44c5a8665d3b414d9fda0f2435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:05:07:c0:55:78:89:81:8b:99:c6:96:61:
                    9c:f4:8e:3a:34:c1:69:2e:ef:de:33:3c:cf:d5:d1:
                    a4:a0:97:95:6d:c3:35:22:91:14:fb:f0:9f:fe:e1:
                    bd:0d:4c:b5:f3:eb:df:d6:8a:d0:7e:8c:aa:00:5a:
                    3a:5f:00:29:08:9f:aa:f7:7c:bc:58:fc:a4:54:f1:
                    3f:69:07:71:b8:c5:79:23:9c:f4:c1:ab:b6:e5:ae:
                    24:50:04:89:6e:d3:20:d9:1b:59:04:4e:9c:c0:8d:
                    c0:e5:e5:6f:d2:a1:5a:0d:0e:db:70:8e:ee:77:36:
                    6d:4c:f5:15:6e:0f:0f:70:35:8f:8b:1a:f4:4c:60:
                    de:10:28:71:13:ad:1c:27:a2:4d:34:65:85:4a:60:
                    bd:5c:fa:50:1f:7e:42:d2:4d:a7:55:97:86:c1:fd:
                    50:b4:fa:d1:32:12:fa:6d:8d:fe:6c:d9:50:11:96:
                    6e:4d:0f:95:0d:c7:80:cc:b5:64:5b:f8:e3:35:52:
                    d6:c9:84:2e:63:ed:cf:e6:ab:6a:54:4b:af:ff:fb:
                    a8:27:67:75:ce:f9:8d:ff:f7:a5:8f:be:e0:a1:a5:
                    80:05:42:a0:49:d0:34:b7:7c:bc:12:70:be:a0:dc:
                    c3:ef:9c:e5:5e:09:a8:0f:03:12:bb:50:80:ed:1f:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:93:D1:28:39:CA:2A:44:C5:A8:66:5D:3B:41:4D:9F:DA:0F:24:35
            X509v3 Authority Key Identifier:
                keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:81:1a:41:2d:f9:a9:24:b5:a5:58:40:ff:29:03:5d:01:
         7d:29:ea:6c:fa:66:a9:ff:ec:cf:2d:6f:c5:81:86:88:e5:2f:
         41:ac:a4:8d:30:0b:45:7f:09:89:cc:c9:71:5c:40:82:99:c1:
         51:de:c7:d9:bd:62:03:ea:75:aa:54:f2:a0:5f:2c:af:f3:c3:
         39:d6:68:98:0b:dd:39:f9:cf:b6:47:a3:21:20:e3:66:af:85:
         12:d0:85:d3:29:ac:ab:5b:7b:15:46:ec:59:81:bb:b0:86:31:
         d6:c3:e8:24:0c:10:a7:f6:db:84:de:7d:61:ea:0b:81:ec:7a:
         a8:77:88:bc:e7:98:b6:46:23:42:87:52:76:9e:bb:90:30:d7:
         7f:9c:85:c3:7e:29:e7:30:52:0f:13:96:fa:d1:d0:a5:34:74:
         1e:fe:57:73:57:05:ba:7c:5a:fc:44:0c:81:5a:8d:ca:5c:22:
         d1:69:00:be:21:11:8d:e5:c9:58:47:73:76:b5:1c:39:79:8f:
         13:9a:82:74:ae:b8:75:98:fc:bf:79:0a:23:59:c7:ba:bc:72:
         1c:78:48:78:97:6d:30:96:f3:8c:fc:3b:64:b6:5e:da:7c:77:
         8c:06:52:39:d0:02:57:be:a7:5c:20:35:37:64:b8:81:99:a0:
         b9:d2:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----