Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
File:                     uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json)
Hash identifier:          sJWUNJ+i5B8Fbi21eqQeJu4K9H63fXPzU6t1bZeKCMA=
Subject key identifier:   BE:5A:FF:29:26:BB:73:1D:87:39:D5:19:0D:33:32:79:DF:5F:1E:04
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       0195E046694FAF4A73A778760178BBE0BD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
Manifest number:          14EF
Signing time:             Sat 29 Mar 2025 05:01:05 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:05 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:05 +0000
Files and hashes:         1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=)
                          2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=)
                          3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=)
                          4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=)
                          5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=)
                          6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=)
                          7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=)
                          8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=)
                          9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: OQFDmShoH3IaHOlXr+wzY0T1W5ZxWZqNFq4qn1B8Ufg=)
                          10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=)
                          11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:69:4f:af:4a:73:a7:78:76:01:78:bb:e0:bd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Mar 29 05:01:05 2025 GMT
            Not After : Mar 30 05:01:05 2025 GMT
        Subject: CN=be5aff2926bb731d8739d5190d333279df5f1e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:70:87:9b:3b:93:23:58:a1:08:9b:bb:f4:
                    c5:f9:2c:1d:e3:98:d0:fd:11:42:2d:fc:8d:59:bc:
                    8a:b5:d2:88:ab:60:6a:91:e5:8a:46:d3:e2:53:22:
                    a0:cd:8f:e1:37:d2:e1:e6:a7:fa:47:8e:93:80:47:
                    92:ab:28:3c:1b:f3:4f:10:11:31:7f:29:b3:e6:23:
                    15:97:4d:ec:59:a3:0e:ad:34:7f:58:73:3a:92:c5:
                    52:d4:73:cc:f8:a0:53:5c:9f:fc:13:84:d2:61:e7:
                    b2:51:cb:17:5d:5e:25:13:50:b3:72:02:ea:1a:0c:
                    51:43:2e:38:09:09:54:32:28:06:77:f1:93:a6:90:
                    ed:52:33:e6:2e:2f:7f:2d:c5:5e:96:0e:cd:7a:32:
                    a9:29:65:a2:3f:e7:96:dd:04:a1:62:14:50:95:88:
                    fe:56:e1:9c:01:54:fb:3c:e5:a4:e6:de:6b:86:ac:
                    a5:cf:4a:21:57:cf:5d:b5:d5:6c:0c:b0:1a:44:3a:
                    3c:c4:7f:fc:15:60:c3:c7:a2:a1:44:36:9f:01:d8:
                    40:00:85:b5:8d:fd:fc:b7:f9:44:ec:7e:ba:df:42:
                    73:f9:07:f5:06:e9:07:27:4d:91:23:bb:3e:30:8b:
                    49:c2:33:d4:91:3b:90:a9:94:14:c2:47:96:cf:14:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5A:FF:29:26:BB:73:1D:87:39:D5:19:0D:33:32:79:DF:5F:1E:04
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:4c:a9:e2:c6:de:19:71:d3:7a:23:32:a5:b5:10:dc:ee:
         17:13:c4:93:f8:e4:7b:55:43:bc:ac:48:19:48:10:39:17:4b:
         3a:1b:e2:fb:e5:38:84:90:12:9d:05:c3:3d:0e:af:31:75:ef:
         3e:74:45:36:17:b5:73:33:12:5f:57:c1:c6:2d:ed:25:d8:ea:
         3d:e9:ef:f5:23:33:3d:96:92:e5:9d:64:72:f9:2a:69:7a:d7:
         f1:28:06:55:03:8d:9c:96:cb:ce:db:a5:dd:54:a7:ab:94:f6:
         9d:14:9b:01:8e:bc:7b:e6:cd:30:71:20:6f:62:25:d5:01:a6:
         8d:39:ba:8b:f2:42:41:12:32:0f:1d:89:87:42:4c:2b:0a:df:
         b1:d1:df:21:fe:d9:8b:59:b1:45:b2:42:2e:1c:69:17:46:16:
         2e:91:95:79:89:55:c9:92:91:b1:41:ed:51:9e:60:88:0e:df:
         98:00:02:f7:ea:3e:6d:ee:91:6d:cd:17:bd:3f:0a:05:65:9f:
         9d:89:2b:cd:e9:d8:c4:63:0e:d1:f3:b7:d0:91:0f:4b:b2:78:
         ba:59:d3:62:3f:18:2f:1b:16:a7:96:de:1d:ee:9c:89:43:a1:
         6d:e2:76:6d:87:ed:76:bf:ce:30:73:fb:3d:8b:87:72:1c:17:
         f1:59:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----