Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File:                     uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier:          3NwfNCnqnye+i53P98eGJ5aMsjiaTDkmlukmOjgp/HU=
Subject key identifier:   34:22:6F:14:B0:8E:9A:CE:EA:5E:22:D2:C4:55:3C:75:22:4C:A8:F5
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer:       /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial:       01962FAB8914BA6EEE844729D07F136E3393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number:          1E
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: ANqfAhUxA42osQwfyLMp0Z2v+rkqpS3kiPeNiTDQNkY=)
                          2: y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa (hash: atFZ+K+NvLsqdqFRmhH9PBtrTTMkkRg/sp5S4neTnNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:14:ba:6e:ee:84:47:29:d0:7f:13:6e:33:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=34226f14b08e9aceea5e22d2c4553c75224ca8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:e0:ed:56:d3:fd:1c:61:2a:3c:0a:a9:eb:
                    89:60:7b:48:fb:e0:e3:d2:cf:0b:34:4e:ef:b7:fc:
                    17:12:d1:b4:b0:b8:b2:5b:90:fd:02:d4:8f:ec:2f:
                    25:88:5b:b1:bc:4a:35:2c:89:58:ae:78:ca:8e:64:
                    8f:f5:e9:bd:93:78:7f:9d:d4:08:3c:e4:22:f3:a0:
                    f1:73:eb:fa:13:24:c6:c1:46:29:f4:3b:d9:4e:2e:
                    77:d2:3f:59:4d:99:a5:87:31:f5:0b:f6:ba:30:0e:
                    0b:a5:d6:d8:95:47:60:59:d5:45:a3:c7:9b:fc:62:
                    d7:2d:41:a5:38:1e:f0:f4:2d:ed:00:68:0f:16:55:
                    f5:bf:e1:84:58:3c:3f:87:dc:80:e3:5a:38:88:75:
                    c5:c1:4f:27:23:c0:94:3f:93:6c:de:9c:af:e0:32:
                    98:6d:0f:8f:59:3f:6f:c4:1f:d7:66:1b:a6:be:e7:
                    64:6c:49:bb:7f:cb:e2:3e:e8:cd:20:8c:24:79:e6:
                    8c:7a:81:43:0a:75:c0:8f:c8:26:14:a5:2f:64:9e:
                    e1:70:14:37:e2:d1:3f:31:36:6c:95:85:33:94:4a:
                    fe:5a:3e:19:2a:9e:e2:60:07:c5:bf:93:88:a5:cd:
                    1f:88:f0:1f:1f:0f:48:c0:f5:9b:b4:0d:a8:9b:05:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:22:6F:14:B0:8E:9A:CE:EA:5E:22:D2:C4:55:3C:75:22:4C:A8:F5
            X509v3 Authority Key Identifier:
                keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:fc:b7:01:61:3c:f8:df:d2:09:02:71:22:f0:2c:42:71:a2:
         40:31:2a:52:61:6a:ac:c3:9b:af:9e:a3:93:93:6d:83:80:f6:
         59:b2:5a:a2:55:4f:57:cc:91:01:0b:1b:ac:0d:cf:17:ba:23:
         4f:4d:a1:2e:a5:29:78:f3:2b:aa:1e:59:bc:30:d0:2a:26:0d:
         4e:3c:64:22:48:38:99:17:f3:9c:67:58:38:8f:fd:4f:dd:62:
         ed:8c:17:a8:eb:6d:a0:60:00:7c:2e:30:f2:c3:ef:1b:71:50:
         0b:19:3b:77:a2:a6:ba:84:71:1c:0f:d1:62:0f:b7:92:b4:cd:
         13:c1:8e:b7:aa:f3:18:db:34:e2:d8:9d:a6:1a:c1:8c:60:b2:
         76:12:cc:61:bd:cc:75:6f:09:23:1e:9d:fc:4a:c3:47:c9:bb:
         b8:c2:a0:34:66:2c:63:c2:b3:a4:ad:c4:2f:a0:ed:46:79:26:
         84:47:b3:b2:cd:f5:40:a0:af:41:ec:7d:34:6a:2a:69:0e:f0:
         ce:b2:db:a6:03:c2:b0:1c:25:b2:90:f3:b3:20:14:0e:d7:4b:
         8a:f8:13:76:2f:da:e7:31:d8:85:76:24:3e:1b:70:e0:6b:09:
         9a:54:53:7c:85:9d:3b:86:e6:da:d1:22:e1:3b:8e:12:78:14:
         80:2f:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----