Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File:                     uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier:          QdoXssbfS+JxK8P6e5Bo+AzHWwkmWdOpgdPxKBiYgUA=
Subject key identifier:   FB:01:CA:02:8B:4A:36:51:39:8B:6E:69:7F:F5:3E:F7:8F:3E:11:DB
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer:       /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial:       01962E2B035786416A175E9F1F0057337D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number:          0330
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
                          2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: HRl0XY+w91mgeUQL2TfIzMiGr9mGBdtpOVhEbVFGPKo=)
                          3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:03:57:86:41:6a:17:5e:9f:1f:00:57:33:7d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=fb01ca028b4a3651398b6e697ff53ef78f3e11db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:3f:c4:e8:7e:4c:28:14:7c:9d:0a:4c:89:
                    1e:62:94:7a:36:c4:be:e5:6b:b2:73:a8:d1:aa:c3:
                    41:59:cf:1e:be:13:07:0a:df:3d:5a:f9:d7:27:61:
                    63:71:c3:38:b3:29:9a:2d:30:32:ff:18:30:d8:0b:
                    58:ed:63:47:f5:cd:eb:27:dd:8d:a6:1e:53:2a:cd:
                    b3:f4:da:77:88:fc:77:7d:31:3f:93:c7:1b:5a:8a:
                    9d:aa:c9:9c:e9:5b:e9:0c:5c:d5:ca:62:77:7a:ef:
                    a3:f6:69:c8:b0:d6:8f:74:d6:34:32:88:c8:75:1a:
                    e4:8f:f0:64:fe:bd:37:62:25:f4:43:22:8a:c5:c3:
                    73:03:0c:cf:59:de:9a:3a:e7:b6:80:a2:82:48:c5:
                    67:84:2c:bb:5f:26:ba:2f:5a:72:89:14:4c:5a:f0:
                    d9:63:6a:4d:43:9f:31:7a:bc:59:42:19:b9:2a:33:
                    af:40:b6:b5:50:70:c7:33:d4:a6:a6:71:7e:98:28:
                    bf:96:eb:61:8e:5d:0b:22:48:20:cf:81:7d:eb:30:
                    c1:1f:8a:a9:6c:46:15:46:0b:ee:60:25:a3:c0:56:
                    ee:06:07:2e:ec:5d:04:50:e5:f2:ca:11:76:04:fc:
                    ee:08:3c:13:63:05:e1:09:05:05:9d:dd:95:28:0c:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:01:CA:02:8B:4A:36:51:39:8B:6E:69:7F:F5:3E:F7:8F:3E:11:DB
            X509v3 Authority Key Identifier:
                keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f1:fd:35:47:f4:fa:19:36:e3:05:d1:61:2d:98:49:a4:b6:
         97:0a:02:87:24:b7:fb:41:3e:c5:00:a1:cb:41:85:b7:71:18:
         cd:9e:eb:c1:c3:e6:6f:9a:ed:5c:e0:e1:73:a8:47:ba:09:72:
         bd:44:76:0b:37:e7:27:18:7f:69:b2:d0:09:5d:86:a4:df:5b:
         7e:66:cf:b3:e0:1c:10:d0:1d:23:ad:9a:fb:82:dd:45:fe:20:
         2d:4c:bd:79:c2:d4:87:13:de:d7:90:a9:a0:09:b3:24:2b:c0:
         8d:5d:57:69:e3:85:0d:64:54:67:d0:c9:de:4f:78:bd:82:1a:
         25:72:c4:62:0c:4e:c2:06:3c:26:ff:29:13:92:ce:1e:15:bc:
         5d:1f:2f:0e:0a:99:c8:b4:75:58:b0:f8:e2:6c:61:17:01:ba:
         66:d4:8a:1b:31:3a:e6:a7:e3:10:19:3f:75:9e:70:c2:7e:41:
         ec:95:8e:a1:e8:02:92:52:0f:bb:38:36:61:ab:93:35:78:65:
         06:68:b7:fc:96:17:1f:43:28:e7:f7:de:64:96:61:e0:5c:99:
         fa:3a:ae:3e:f1:7b:9c:6e:25:0f:f1:48:2c:6a:b5:ac:a9:e1:
         0c:54:39:4d:cd:db:b2:d0:d4:9b:03:99:d7:26:8d:ed:4c:1d:
         d2:38:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----