Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File:                     U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier:          3VUluieT5CJbiUDfJpSYeJ89S75NqVk08kS/eb5jlu0=
Subject key identifier:   47:74:19:FC:01:D9:1F:34:D1:F0:59:34:AC:90:19:C7:E5:20:D6:A4
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer:       /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial:       01962E99469D567D984452CC585B3E9AA66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
                          2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: rFIKHz/ktBJaa2Sfhx9XgShkWHO2fGN+1l1d+lmDx6M=)
                          3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:9d:56:7d:98:44:52:cc:58:5b:3e:9a:a6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=477419fc01d91f34d1f05934ac9019c7e520d6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:e0:45:bb:bb:8b:d9:d9:bc:a5:48:c9:c3:
                    72:a5:be:31:68:84:68:6c:d4:30:f5:d4:6d:a1:f3:
                    bd:49:26:7d:e7:24:d9:58:96:6b:0a:95:7b:d1:ac:
                    a8:05:85:7c:a3:25:01:87:05:3c:10:72:fa:3b:20:
                    06:a9:6e:a5:07:9d:c4:ec:be:87:08:4c:16:aa:f7:
                    f3:c8:7e:31:2f:cc:3f:47:41:fb:aa:c8:06:16:6b:
                    c4:bd:11:86:99:f6:8f:73:f4:aa:6c:59:2c:5c:18:
                    8b:70:1d:08:4c:32:e2:3d:bd:a3:3b:be:2f:8f:ed:
                    af:97:b2:24:4c:7f:7c:bc:33:1f:a9:e5:20:66:15:
                    3b:d5:1d:e2:e1:46:63:c5:d2:fc:eb:74:56:0d:54:
                    00:c9:77:e4:d2:b8:30:c0:8a:98:f4:d2:5f:6d:13:
                    58:cb:b3:86:65:eb:c9:17:9a:89:ba:d9:65:ce:1a:
                    b1:4a:5a:d2:67:2d:b9:fb:85:a2:65:24:08:a0:6a:
                    89:0b:77:80:c4:b9:51:e2:65:a4:9c:b5:67:a2:d5:
                    32:8a:0e:06:7b:19:59:73:d2:78:e3:ab:21:01:23:
                    17:0e:df:2a:53:5b:ed:19:98:a0:80:26:47:70:25:
                    f9:b4:60:15:1c:05:9d:c6:1a:30:94:6b:0d:0a:85:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:19:FC:01:D9:1F:34:D1:F0:59:34:AC:90:19:C7:E5:20:D6:A4
            X509v3 Authority Key Identifier:
                keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:41:00:10:35:1f:08:78:98:d1:2f:cd:18:c4:a7:e6:09:fd:
         47:8d:e2:2c:14:18:44:a7:c2:a7:00:55:31:67:65:db:c2:fc:
         97:14:43:50:04:00:f8:75:57:f4:51:e8:1c:14:fa:3d:bc:3a:
         56:5c:3a:5a:17:83:ef:da:31:a1:30:e1:78:d1:b8:78:7e:ce:
         c0:19:29:c0:2d:53:4b:98:af:ce:0e:64:ee:d6:2a:9c:f3:30:
         34:7f:c6:fd:31:45:33:c4:b9:16:3a:72:2f:64:d6:e3:76:61:
         4a:90:c4:0a:be:86:4d:3d:8b:83:33:0d:72:27:d9:c0:85:74:
         59:65:f6:0d:06:55:66:f7:7d:d7:bb:ed:5c:a9:3e:31:02:e8:
         23:15:9f:f4:30:1a:73:05:6a:9b:51:61:ee:f8:e4:ce:a5:49:
         3a:f9:66:ff:7f:b9:47:5f:65:fb:f7:29:3c:d7:28:31:3a:ac:
         92:d1:f4:5f:d8:08:e4:b8:bb:c2:2d:30:3c:f6:8f:eb:d1:74:
         b5:5d:e0:ef:04:19:d1:e1:ce:b4:3b:3a:98:42:ab:57:f4:70:
         7c:53:a7:35:83:40:72:71:8a:02:f9:fb:e0:ed:5e:a1:8f:de:
         52:0e:74:7c:19:00:aa:ff:d5:47:91:3e:0a:9a:66:4a:64:b7:
         6b:6c:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----