Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File:                     UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier:          kNUnOt5K69A3Skr0upO7+8bVYRbfAqvTgauCgULb07M=
Subject key identifier:   2C:57:1C:BD:30:8B:F2:5D:8C:67:BC:CD:F9:97:2F:AE:E2:E5:51:12
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer:       /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial:       01962FAB5F9453ACA538CBBDADC1DDAF9485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number:          0B7A
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
                          2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: jQeNr6Xd/0g4q2CyH+JBDu3GOpbpIL/l8h7KrLdSREE=)
                          3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5f:94:53:ac:a5:38:cb:bd:ad:c1:dd:af:94:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=2c571cbd308bf25d8c67bccdf9972faee2e55112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:62:71:99:15:20:b6:7f:2f:7e:4d:1e:3e:
                    75:ad:29:e2:c8:85:1b:ae:3f:f0:cb:46:dc:ce:2b:
                    25:42:05:51:f4:a5:fc:3c:8a:75:de:c6:8f:ab:08:
                    c9:ed:1d:19:17:72:90:40:50:69:bd:10:9b:7d:59:
                    98:1f:cd:07:3a:33:10:12:a4:43:de:82:d2:26:a2:
                    58:b2:f5:7a:66:83:7e:10:7e:88:b8:44:a7:a6:1f:
                    c9:51:29:5f:6c:28:dc:b7:c7:3b:a1:37:1d:fa:c3:
                    c5:89:cf:2d:09:18:6c:ea:ce:44:6f:97:c7:ec:da:
                    a0:5e:23:47:a9:e1:26:0f:d0:46:74:4b:a7:7d:5b:
                    0b:dd:33:14:9f:06:19:d4:b9:4d:e4:b5:8f:ef:4d:
                    47:f6:56:fa:4d:45:73:12:10:fb:5d:04:53:3e:f4:
                    ec:7d:18:b1:32:d6:8e:bd:a1:a1:2e:32:fd:63:83:
                    74:28:c7:70:57:4d:94:02:fa:55:b4:ab:77:23:c5:
                    86:a9:c1:7f:a5:1e:a5:58:35:85:88:eb:54:47:dd:
                    48:f5:74:59:df:ad:64:c4:2e:ce:b1:d3:d0:d1:dc:
                    48:87:9a:f3:99:d9:cd:eb:4b:af:08:e7:c3:26:a5:
                    ad:1d:ef:d2:eb:91:c1:a7:57:1e:c2:5b:f7:9b:e1:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:57:1C:BD:30:8B:F2:5D:8C:67:BC:CD:F9:97:2F:AE:E2:E5:51:12
            X509v3 Authority Key Identifier:
                keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5f:2a:c4:63:59:a3:fd:d8:63:4a:e5:d7:cf:9d:1b:bd:6d:
         2c:2e:13:78:6c:4c:25:16:11:9b:ca:6e:91:75:e6:65:c7:1a:
         50:32:7c:3b:22:f6:e2:91:36:98:7e:f6:19:50:90:ee:d7:b0:
         8a:d3:ea:ee:a5:95:a0:fe:2c:9b:d9:c1:e6:05:22:3d:75:cf:
         8c:c0:0b:d4:26:bb:bb:6a:d8:a0:3c:59:5a:c5:d3:21:4d:ad:
         68:2e:93:bb:de:86:94:7a:3a:36:33:c1:a1:dd:93:91:25:e0:
         eb:df:92:60:8d:64:fd:c9:7b:e5:90:8c:f2:24:1e:bf:87:ff:
         5c:e9:64:ff:d9:af:68:52:79:24:f5:4d:c7:b8:a7:3b:04:94:
         bb:c8:b4:89:1b:48:1c:57:83:b5:f9:f0:14:d7:4a:1c:18:98:
         2f:c3:2c:d1:61:ff:b5:78:35:18:22:af:04:1e:a6:85:55:e6:
         54:b6:d1:9c:b5:6e:aa:bd:a9:56:d7:16:d6:a7:be:32:ca:c9:
         21:53:4d:5c:60:c9:17:60:92:14:92:a2:37:0d:19:ed:cc:e3:
         e6:fd:00:82:57:a4:2b:d3:28:7f:6a:fa:ad:48:1b:83:a0:ce:
         71:49:8e:5d:ec:07:b4:21:11:29:04:8c:dd:95:06:1b:56:b2:
         4c:31:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----