Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File:                     U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier:          9EV+t1Y54f0GRRgoKLdMXsQNkUlrBKsXpixzwQhMqr8=
Subject key identifier:   B3:30:5B:AF:C8:9E:CE:EE:DC:4E:6F:56:F7:8B:F3:56:86:1F:0E:4E
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer:       /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial:       01962E2B459AC523E9FCBFD26AE064251B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number:          0D18
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
                          2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
                          3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: ml/aAr4GvO5/CDhmkuas1cHfUbzVy/XGJ4p1h54aDLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:9a:c5:23:e9:fc:bf:d2:6a:e0:64:25:1b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=b3305bafc89eceeedc4e6f56f78bf356861f0e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:cb:43:84:a6:ce:df:0a:62:63:c8:b6:3d:
                    04:af:01:43:37:f3:95:ed:c7:bc:81:0d:21:b7:58:
                    7a:63:56:eb:ce:53:92:76:7e:f7:fd:8c:d8:3d:e5:
                    4d:b1:7d:0e:de:df:38:19:83:f0:16:7e:61:04:10:
                    aa:30:ae:74:2b:b1:12:40:9a:4b:93:fd:45:ad:94:
                    2d:0b:b4:13:65:65:74:f5:4f:a2:ba:51:91:7c:cc:
                    53:d7:4a:8f:23:67:66:8d:5e:75:27:3e:3e:87:2f:
                    c6:c8:9b:d2:a9:00:3f:37:32:41:ca:3c:dd:af:e5:
                    00:fb:17:41:95:87:67:a3:91:ce:cf:05:c2:91:94:
                    a1:ea:d2:85:d3:55:10:01:f7:ae:76:6a:44:ed:66:
                    56:78:72:9e:2e:18:68:93:b2:fe:6c:86:d4:79:5f:
                    1b:2f:31:5d:d3:6c:39:58:47:82:c4:31:83:a9:a5:
                    8c:e5:0d:67:be:5f:bc:c4:25:b1:2b:0c:f0:87:aa:
                    9a:ce:1e:67:ee:08:a1:50:93:5b:c8:7a:21:b7:2b:
                    8b:2f:85:f5:5f:25:0e:80:12:44:62:1b:77:1c:14:
                    a1:58:c6:ea:e5:23:b7:0e:65:1e:82:70:ad:f2:67:
                    72:ad:66:74:a1:84:0d:03:bd:f3:cc:53:c5:df:c8:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:30:5B:AF:C8:9E:CE:EE:DC:4E:6F:56:F7:8B:F3:56:86:1F:0E:4E
            X509v3 Authority Key Identifier:
                keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:ec:3a:ac:80:b7:c0:eb:47:95:f9:12:7f:0e:31:ac:84:
         ba:ae:19:f3:3f:6f:83:58:e7:8a:26:c7:9b:09:26:a9:0f:a0:
         a5:33:86:1b:4f:5e:82:cb:89:75:00:c6:cc:d0:9d:a2:94:5a:
         c5:7f:8e:3c:b4:fd:bc:24:db:09:e0:51:7f:d2:d1:0a:8c:2b:
         1e:51:4d:a9:21:5a:f8:a2:68:61:8f:e6:40:85:e9:7f:94:7d:
         ad:ef:ac:36:24:48:2d:04:9b:b5:87:3f:42:22:7b:0d:59:bc:
         47:82:40:6b:3a:cb:fa:00:53:6d:29:88:5e:08:71:30:43:31:
         ea:c2:3f:f7:b7:d2:0f:0e:37:53:a4:30:75:cc:91:82:ed:36:
         2d:63:5f:87:f9:32:91:95:a8:33:a1:40:ef:6b:4a:bd:d6:a3:
         77:e5:44:b8:27:70:d9:8f:55:04:cc:02:3a:83:3c:b6:3a:3c:
         12:53:10:b1:74:b8:30:e5:dd:e6:81:50:bc:2c:b9:39:1a:f0:
         b5:27:3d:fe:44:5f:98:06:b0:13:e3:0b:1d:ad:63:5f:aa:f8:
         0d:2d:2f:e0:35:c8:b3:8a:1a:e1:dd:02:9c:38:92:c7:65:8f:
         e8:fc:9d:32:8f:82:db:f2:87:58:b6:3d:21:08:e3:ec:30:af:
         e2:c4:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----