Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File:                     ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier:          WFhpVVfBQbZHBpt6AeSaJvIaTW8SwJbHi9RVilRIPqg=
Subject key identifier:   AB:32:7D:3B:AA:C2:FC:CF:E8:4D:C8:F0:D0:54:8A:57:F5:B0:70:D0
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer:       /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial:       01962E997DFB9F554541B08EFDD7CD9B2AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number:          07C1
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: MYsVLl6tvM4sKTrRHBwxL4lqkD+ltTU+LHdIjg4pYE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7d:fb:9f:55:45:41:b0:8e:fd:d7:cd:9b:2a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=ab327d3baac2fccfe84dc8f0d0548a57f5b070d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:76:a0:3b:51:da:91:72:a4:c1:3c:d6:ab:
                    f7:96:2f:a9:aa:81:0f:f1:61:1e:c3:9a:9e:61:eb:
                    5c:11:b1:d0:10:9a:93:d9:ac:3f:9d:97:46:06:79:
                    05:5e:7a:cc:c9:5f:b2:06:e0:41:70:81:83:a9:c7:
                    34:73:1a:b0:36:eb:70:3a:9f:4b:3b:4d:ed:bf:6c:
                    cc:f7:3f:b2:e8:5b:7a:e9:ca:a5:62:35:e1:22:24:
                    47:40:2c:3b:5b:aa:a8:8e:14:54:09:f9:53:af:1e:
                    1e:ac:df:19:55:39:4e:76:92:26:b5:23:88:95:69:
                    43:b8:b1:6a:c8:03:35:6c:bb:fe:5b:55:5f:09:12:
                    ba:15:67:df:cd:b5:07:bf:04:64:85:e7:ba:90:ab:
                    f1:b7:6d:9b:63:54:dd:58:d3:ca:a3:62:14:cf:0a:
                    ba:ae:ad:49:45:3e:e1:cd:e9:9d:02:d3:58:ba:e7:
                    f4:56:82:59:c4:d9:44:4b:6f:a6:1f:74:29:e2:b4:
                    29:cb:25:cb:36:56:f5:63:04:ab:13:0b:73:7e:08:
                    34:ba:e1:58:15:56:16:96:c8:7a:ea:c3:44:31:06:
                    2e:52:69:08:22:3d:97:ba:54:6f:2e:17:0c:86:5e:
                    76:cf:3c:5f:96:84:3b:8b:4f:be:72:19:2b:65:b1:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:32:7D:3B:AA:C2:FC:CF:E8:4D:C8:F0:D0:54:8A:57:F5:B0:70:D0
            X509v3 Authority Key Identifier:
                keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:17:a6:5e:f3:d7:58:98:5f:99:ee:0c:36:b1:93:85:48:
         f4:7c:10:c3:a0:e4:de:21:6e:0e:0a:b6:7a:ef:d2:5a:38:66:
         68:e0:b7:e3:e1:fc:cb:8e:d6:f7:eb:37:fb:ea:77:62:32:47:
         ba:96:91:3b:05:18:3f:63:d0:6c:a9:89:f2:93:d4:fb:44:0b:
         a3:b6:18:6a:eb:6d:92:d8:41:df:e4:1a:b3:1c:4a:ec:f8:d4:
         77:a5:61:db:6a:1b:50:bd:2b:fe:23:72:54:e4:9b:14:1e:3c:
         81:50:a3:54:1d:31:dd:df:08:68:b9:44:b0:77:d8:8d:f2:26:
         8b:c2:ff:75:71:73:22:e8:00:70:88:21:cc:e1:ba:0c:67:3b:
         58:5d:31:58:b3:b0:76:cb:e6:2e:3f:d6:8a:00:8f:ca:35:69:
         f1:8c:62:9f:96:ab:66:20:a7:72:49:f0:ca:74:7e:da:fe:66:
         37:d4:92:ea:62:02:01:34:0f:3e:09:db:04:4c:2b:7c:3d:bd:
         43:13:27:89:ab:4f:dc:05:57:18:cf:b9:d7:63:75:4e:18:b9:
         ca:ec:aa:c9:57:a4:4b:94:69:29:b4:fd:33:9e:db:04:2b:22:
         af:0e:7c:a7:50:40:45:00:1a:16:a4:b1:f6:4f:69:3f:60:0e:
         58:ea:c4:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumX37n1VFQbCO/dfNmyqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzVhYjVlZTgxZjc0ZmNjYTRhMGMxM2U5NzJlYzFjZmU5
Njc5M2IwHhcNMjUwNDEzMTAwMjEzWhcNMjUwNDE0MTAwMjEzWjAzMTEwLwYDVQQD
EyhhYjMyN2QzYmFhYzJmY2NmZTg0ZGM4ZjBkMDU0OGE1N2Y1YjA3MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOl2oDtR2pFypME81qv3li+pqoEP
8WEew5qeYetcEbHQEJqT2aw/nZdGBnkFXnrMyV+yBuBBcIGDqcc0cxqwNutwOp9L
O03tv2zM9z+y6Ft66cqlYjXhIiRHQCw7W6qojhRUCflTrx4erN8ZVTlOdpImtSOI
lWlDuLFqyAM1bLv+W1VfCRK6FWffzbUHvwRkhee6kKvxt22bY1TdWNPKo2IUzwq6
rq1JRT7hzemdAtNYuuf0VoJZxNlES2+mH3Qp4rQpyyXLNlb1YwSrEwtzfgg0uuFY
FVYWlsh66sNEMQYuUmkIIj2XulRvLhcMhl52zzxfloQ7i0++chkrZbHBNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsyfTuqwvzP6E3I8NBUilf1sHDQMB8GA1UdIwQY
MBaAFLo1q17oH3T8ykoME+ly7Bz+lnk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWpXclh1Z2ZkUHpLU2d3VDZYTHNIUDZXZVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jMGJkNjYtZWVkMi00MjlmLWE2Yzct
MTVlZmM2Nzg1YjE2LzEvdWpXclh1Z2ZkUHpLU2d3VDZYTHNIUDZXZVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jMGJkNjYtZWVkMi00MjlmLWE2YzctMTVlZmM2Nzg1YjE2
LzEvdWpXclh1Z2ZkUHpLU2d3VDZYTHNIUDZXZVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovUXpl7z
11iYX5nuDDaxk4VI9HwQw6Dk3iFuDgq2eu/SWjhmaOC34+H8y47W9+s3++p3YjJH
upaROwUYP2PQbKmJ8pPU+0QLo7YYauttkthB3+QasxxK7PjUd6Vh22obUL0r/iNy
VOSbFB48gVCjVB0x3d8IaLlEsHfYjfImi8L/dXFzIugAcIghzOG6DGc7WF0xWLOw
dsvmLj/WigCPyjVp8Yxin5arZiCncknwynR+2v5mN9SS6mICATQPPgnbBEwrfD29
QxMniatP3AVXGM+512N1Thi5yuyqyVekS5RpKbT9M57bBCsirw58p1BARQAaFqSx
9k9pP2AOWOrEsw==
-----END CERTIFICATE-----