Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File:                     ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier:          1QmDehJJbd2IjQZel6DCI6/LwTSoNJyxlQmaFQ9cJ6A=
Subject key identifier:   28:6C:5B:2A:FE:2E:74:10:8A:D5:13:93:08:97:EC:73:76:E2:D8:29
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer:       /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial:       01962F741BF76169DDA6DD8FDB05CCDA98D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number:          08C2
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
                          2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
                          3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: 85kX3+ISpa5iL4nkGQ4MvBIg/es4R75reQ7X0rrlB7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1b:f7:61:69:dd:a6:dd:8f:db:05:cc:da:98:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=286c5b2afe2e74108ad513930897ec7376e2d829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ba:aa:ef:0a:98:e0:cb:cc:70:02:d4:10:ef:
                    ab:fa:8a:74:07:e3:a4:27:2c:e4:a0:cb:21:aa:05:
                    8e:97:4b:20:20:d0:a3:72:90:2d:5a:99:07:75:45:
                    e7:47:a5:c5:b5:3f:05:30:50:7c:fc:fe:03:c8:b0:
                    d8:fd:ed:0d:80:3b:6f:80:65:50:0e:de:71:f8:b9:
                    c1:2f:1e:3d:2f:d5:c4:34:98:86:ce:b1:ee:e1:23:
                    1a:22:fb:4e:4e:71:6c:6c:d2:dc:d7:22:64:ab:b8:
                    50:7b:ae:e0:74:5a:7f:9b:57:36:c5:9b:f7:44:3d:
                    72:cf:b4:73:2e:70:51:5d:1c:1a:90:6a:f6:3d:5a:
                    d7:09:2f:7b:9b:f3:72:10:9c:7d:8c:fc:29:76:18:
                    54:1f:8f:88:3a:ad:b0:6b:23:a9:fe:24:ed:67:b7:
                    f4:89:1c:6b:a4:27:d4:87:43:b2:b3:1f:68:70:68:
                    7c:26:d4:71:2a:03:9f:0f:ad:17:f8:4f:a6:b1:d0:
                    f5:e7:d6:fc:d9:43:95:fd:d8:c7:a9:59:a8:49:3e:
                    42:cf:37:56:aa:91:a2:a9:d3:5b:5f:2d:12:e2:71:
                    27:aa:96:fc:03:e5:01:8d:ca:3c:de:51:7d:b7:a5:
                    5d:cc:c0:cf:e3:9f:d4:81:f2:a3:b6:d9:66:d6:dc:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6C:5B:2A:FE:2E:74:10:8A:D5:13:93:08:97:EC:73:76:E2:D8:29
            X509v3 Authority Key Identifier:
                keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:96:82:9f:0b:b2:c9:78:91:1f:0b:cc:57:42:17:13:e8:90:
         13:ea:9b:56:90:45:9f:cc:9c:d1:9f:fd:73:a2:72:80:07:89:
         a7:15:ac:66:4f:25:4e:31:f4:86:e6:3a:ff:5c:c9:8e:be:ed:
         d4:92:1b:d8:fb:0b:da:2d:a8:89:f3:b7:6c:1f:e4:c1:36:5b:
         58:f2:d3:80:3a:1b:95:11:6c:bb:9e:16:b0:37:7f:95:a8:e4:
         c9:f3:a8:79:f1:6d:30:3e:af:18:7f:b5:45:da:f7:b5:6e:a1:
         67:62:d6:e9:a1:15:21:93:32:56:25:d5:fb:c7:96:a2:09:8d:
         93:62:15:c9:c2:78:e5:06:7a:12:f5:c7:83:20:cb:7e:df:a4:
         66:ce:61:46:7c:38:f7:93:9b:34:c7:bd:bc:24:4b:ba:0c:5c:
         b2:3f:9d:52:c8:18:e8:b7:3f:c6:eb:9e:86:3b:16:80:3a:22:
         f5:c6:fc:44:6a:af:a9:2c:e2:b7:00:e7:21:01:d4:cd:0a:16:
         4d:2c:1f:fc:f7:a9:bc:a2:cf:03:cb:0f:b2:99:b2:ed:56:c4:
         19:75:ca:42:23:86:ae:f3:ff:8f:5c:67:15:71:d4:df:0c:fd:
         c7:78:e1:c8:7b:7b:21:06:18:21:db:d1:fb:58:6a:0c:d6:3a:
         63:c8:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----