Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          1uCOFIZQtTVgO3TL/11uVaH8Dw3NGft/GewfUP1Rk/Y=
Subject key identifier:   94:A6:09:83:9D:46:A4:8A:C4:6F:88:9B:B2:92:ED:D1:C4:D0:7A:3D
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       01962F74E0CA7C3B25299248283D673D483D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: y7XlbR/8gIDgBQFOIRzheLmrM57cz+cJ4/HaBd+Vbfc=)
                          2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
                          3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
                          4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e0:ca:7c:3b:25:29:92:48:28:3d:67:3d:48:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=94a609839d46a48ac46f889bb292edd1c4d07a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:87:94:47:45:18:cb:e6:91:45:10:3a:e6:
                    12:71:de:90:34:48:ec:1c:f4:ac:83:d3:3c:9d:6e:
                    98:a1:92:13:11:97:24:34:b9:e6:9b:72:15:a3:a1:
                    bd:23:09:f3:25:1f:30:35:29:bd:45:2a:1f:4b:0f:
                    48:47:db:e5:bc:cd:e2:4a:93:af:37:33:a3:5f:2f:
                    a1:04:92:4a:5e:38:b1:1a:e7:54:30:55:b3:5a:19:
                    3d:33:7b:37:ca:1f:af:f9:ec:67:4b:e1:f0:03:53:
                    c0:87:56:9f:f9:be:f3:ac:b8:63:bd:53:c6:6f:6f:
                    da:b6:43:65:70:9c:37:0c:65:b5:cb:d8:5e:03:ee:
                    dc:c3:68:ee:34:53:55:0d:97:bd:cc:75:a8:81:24:
                    8f:4a:56:6f:3a:22:31:99:c7:6f:39:27:7b:03:fd:
                    c0:47:36:74:67:65:2f:f1:c3:2f:03:9a:3b:34:05:
                    86:03:df:da:e0:77:e9:4e:71:f1:9e:69:e6:66:f8:
                    d0:e9:0c:dd:22:81:f3:14:ee:4a:d8:35:e7:fd:ae:
                    e5:c1:ab:62:b1:54:0f:3f:d2:2f:95:e7:a4:28:27:
                    59:21:be:1f:5b:9d:e1:0f:c5:37:b2:f1:7b:7a:dc:
                    ec:2d:83:21:a6:5e:6c:3b:a9:11:04:ca:1f:41:26:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A6:09:83:9D:46:A4:8A:C4:6F:88:9B:B2:92:ED:D1:C4:D0:7A:3D
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:44:06:6b:d4:3f:1e:c9:06:b8:bf:34:06:39:72:fb:c3:5e:
         3c:95:c6:bb:a2:e7:33:30:2c:d9:c8:ee:5a:b2:17:3a:c9:54:
         68:85:59:8e:7a:ea:1b:67:e1:ac:ef:78:70:7d:46:c2:e0:ae:
         94:67:99:46:6f:1a:e8:c2:25:d5:be:e2:ab:b7:87:18:ed:96:
         d3:30:a1:38:e4:d5:74:52:65:e4:fb:18:30:2d:a1:fc:a3:90:
         12:f2:f0:a6:98:91:39:7b:4b:17:aa:d2:42:60:c3:2a:74:39:
         82:d7:8d:b7:01:1c:76:11:36:0c:b9:f1:1f:ec:38:af:6e:0e:
         b5:cc:71:85:75:b6:fb:33:09:12:ed:1b:a6:7c:0f:95:29:e9:
         03:aa:bb:a6:4a:80:85:8b:b3:b7:ba:e4:d5:17:c7:8f:89:96:
         de:97:09:ca:69:cd:93:23:44:c1:cf:bf:d3:6f:dc:4c:7c:85:
         91:98:e4:6b:55:3b:0e:79:61:b3:a5:03:a5:ce:17:f5:46:ea:
         9b:08:be:e3:dd:5c:cb:5d:1a:a8:fa:05:14:a3:ff:ec:5f:fc:
         82:42:91:4a:3b:e1:8c:43:eb:1e:e3:34:cc:2b:e2:0f:3c:f5:
         76:eb:d3:89:78:4f:4f:8e:38:45:93:b5:6d:4d:88:eb:60:c6:
         f4:6f:1b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----