Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
File:                     cvpBoKemgQK1OrMXQtthJC91kIw.mft (raw, json)
Hash identifier:          D8ysNoggJYVXo4g1Q2g/5TzgzEl5YltaDBtg/mrdVYE=
Subject key identifier:   9F:A5:E8:D5:F9:D5:FF:BB:FF:47:BB:AE:10:E2:F7:5A:CE:BE:C9:3B
Authority key identifier: 72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C
Certificate issuer:       /CN=72fa41a0a7a68102b53ab31742db61242f75908c
Certificate serial:       01962F06ADC8EEBE71942268B98F9F2E5F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
Manifest number:          1334
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: LPL5COduulE_WMolEzZwrGXijT4.roa (hash: H3PvlGhuhwCJd5x48Dt0jme9fPhyxLV/+QRuAD/R+ek=)
                          2: cvpBoKemgQK1OrMXQtthJC91kIw.crl (hash: tLPhWnTKwPdwhnBhwdiOvW64BjhJjuYMjmZZpX7n6Y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:c8:ee:be:71:94:22:68:b9:8f:9f:2e:5f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72fa41a0a7a68102b53ab31742db61242f75908c
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=9fa5e8d5f9d5ffbbff47bbae10e2f75acebec93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:ed:ba:89:21:3b:71:be:04:44:1c:91:b7:
                    5f:c2:ba:6e:85:76:8f:2c:21:d9:17:b3:1e:a7:a6:
                    9e:49:de:20:ab:7c:b1:bb:30:ef:06:87:80:99:45:
                    33:02:dd:38:bf:be:a4:e3:89:68:92:dd:18:72:ad:
                    4f:ca:c7:35:fc:72:20:d8:31:4e:a4:cb:78:09:da:
                    cd:10:75:27:6d:81:3b:05:b7:14:39:64:2d:72:2f:
                    6f:9e:74:e7:34:6a:d3:60:f0:48:db:7d:58:c2:2e:
                    9c:79:bc:6e:7b:0b:47:10:61:b0:73:fe:c7:03:6a:
                    39:7d:1b:58:0f:91:e0:9e:7b:18:fd:67:68:01:ee:
                    90:81:25:19:59:0d:30:7d:16:ac:22:8e:bb:98:89:
                    cc:11:4d:44:19:ca:94:3c:d7:d0:f7:4f:31:2e:8f:
                    0f:d0:96:ff:2d:6b:09:12:85:1d:a9:21:76:5d:9e:
                    b4:d9:44:34:be:20:52:71:c0:9e:d4:e9:78:71:9e:
                    09:50:e6:f4:ac:ca:c3:09:44:21:6f:9c:80:45:7e:
                    23:8c:a4:44:82:f5:b1:ff:20:52:71:13:68:f8:a3:
                    4e:d5:7a:c8:00:b5:6d:bb:6a:7a:fe:bc:90:9e:e4:
                    e7:1a:e8:9a:4d:42:6c:79:88:5d:88:09:0c:16:ea:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A5:E8:D5:F9:D5:FF:BB:FF:47:BB:AE:10:E2:F7:5A:CE:BE:C9:3B
            X509v3 Authority Key Identifier:
                keyid:72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:62:1b:75:fc:2e:45:db:77:4a:eb:f0:65:b6:25:ed:43:
         62:a1:b6:62:c5:ea:32:53:86:80:f9:4d:61:16:de:97:d4:39:
         d1:ba:b8:e6:ba:32:c9:7e:a6:f2:ef:36:7b:ac:de:0c:08:72:
         75:98:92:37:53:8f:e2:d0:22:16:1e:3e:25:77:c8:06:eb:63:
         35:e5:7a:d5:e6:55:20:ed:19:db:de:8a:45:41:fa:ef:0f:b3:
         fe:cc:92:c4:88:9c:82:06:fc:b9:79:3b:bc:20:e5:93:11:a3:
         91:fd:1c:d6:ca:a6:ea:97:3b:f0:e2:69:d8:bd:ff:d1:e3:e7:
         af:87:27:09:8f:5a:58:fa:99:77:78:f7:e0:37:1c:fb:ab:6b:
         9f:e1:2b:48:19:18:28:53:e2:51:6e:51:f8:08:36:c7:a4:cf:
         44:b9:2f:8f:df:62:dd:df:2e:b5:9e:02:80:3a:b3:b7:ed:22:
         36:9c:e5:2e:d7:25:df:a4:22:56:a8:39:db:54:c6:19:2f:c2:
         63:f9:7b:06:90:91:56:bc:79:7f:9e:cc:fc:e3:b5:5f:01:b0:
         77:66:4e:74:8c:94:70:47:74:31:b4:a8:fa:1c:09:60:0d:76:
         c8:2a:2b:0e:ee:0f:61:c3:6e:55:a6:12:8c:02:27:11:8b:73:
         55:5c:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----