Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          qKMHykp08d+TD3N1dv6/3xrzEDcMiRYb8iFsGJYB8cc=
Subject key identifier:   52:93:AC:41:31:1F:98:DD:45:39:4B:40:B7:8D:91:69:B9:B4:2E:23
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       01962FAB322E99105EF6120F26BBB795B185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: ZTACx8/kvlEOKv5pKoQ6+NYqJVLt6NAzajPtpPwzD/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:32:2e:99:10:5e:f6:12:0f:26:bb:b7:95:b1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=5293ac41311f98dd45394b40b78d9169b9b42e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:cc:1a:4a:36:64:45:6b:63:2c:b6:b4:c3:
                    48:b9:a5:46:b3:cf:3c:f1:23:99:d7:9d:9e:1d:23:
                    2c:4a:32:a1:f1:c5:57:8e:c0:f4:97:d3:f9:3c:1a:
                    ec:f5:eb:27:c6:d9:3e:98:da:76:e1:3d:12:be:b9:
                    e2:c6:74:57:b0:b8:34:98:35:3c:68:e9:ba:00:31:
                    ca:2f:7d:6d:a0:42:42:d9:e4:18:58:b7:b8:9f:cf:
                    c3:87:ee:82:b7:83:80:09:a3:6c:3d:1c:b1:da:a4:
                    39:2e:62:7f:0a:e5:08:10:a8:b9:79:e9:20:2e:9b:
                    e1:92:24:da:27:04:48:d4:64:e0:9f:85:53:e8:8b:
                    c6:f8:27:33:6b:7c:3e:df:2e:77:cb:a8:ad:72:89:
                    c8:23:8c:7f:34:ef:2c:98:52:62:7c:a8:12:22:58:
                    c2:93:5e:64:30:c0:6e:cf:99:8a:2b:62:13:3c:83:
                    1a:1c:19:bc:13:84:c3:f0:f8:66:58:08:89:37:30:
                    e4:4b:37:00:7a:27:ce:ca:3d:62:76:53:8f:e0:28:
                    4b:92:ca:0d:ca:f7:5a:e6:a9:38:4d:bf:8e:b0:9f:
                    e9:2f:54:e5:60:c5:15:4c:55:fe:f0:2f:5b:52:09:
                    7b:ab:97:9c:0d:97:8e:01:af:a8:b9:67:27:63:f1:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:93:AC:41:31:1F:98:DD:45:39:4B:40:B7:8D:91:69:B9:B4:2E:23
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:7c:2b:da:72:e6:b1:b0:19:73:b8:f6:76:23:8e:b4:cc:
         15:30:d4:ae:4a:4f:1b:0d:48:fa:7d:61:5c:c6:87:cb:79:f6:
         76:5f:f6:fc:32:05:2a:15:50:21:0f:6d:ab:0e:9d:70:20:a5:
         18:95:65:13:7f:56:17:8f:5d:c2:bf:14:4f:bc:ae:74:1f:46:
         8a:1f:eb:cc:13:66:c6:ad:56:12:57:7c:21:77:be:0d:03:57:
         46:1a:a2:0e:30:92:1a:f1:a7:3c:b6:06:d8:30:9e:2a:a7:31:
         64:1e:51:a0:57:03:7b:37:32:70:b4:95:05:9f:ee:91:2f:4c:
         b8:a7:e3:66:37:48:0c:32:49:1d:83:54:6b:4e:c4:08:57:d3:
         74:e6:d7:be:f1:09:b5:47:31:10:b0:f5:a6:49:44:48:b0:6d:
         7f:17:bc:7a:28:2b:b6:3e:c6:49:e9:d1:e7:b8:9b:58:c4:65:
         97:9c:02:62:10:fb:a6:06:bd:ca:59:4f:75:b9:62:b2:52:c0:
         4d:d6:a5:f7:e9:d5:40:56:34:78:a8:73:6d:03:63:7c:44:cf:
         45:d4:b0:0b:11:6c:d1:41:48:fb:da:98:a1:99:f2:34:81:9b:
         5d:25:8b:b1:ae:d5:ab:15:91:18:01:8e:99:ff:51:02:85:c4:
         c8:f3:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----