Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File:                     VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier:          kKPwiHBXK+UP0Za56wo+sPhzF4f7MqwwW+BXzs9VTto=
Subject key identifier:   0B:85:77:A3:8B:EA:F9:44:54:3D:20:01:E0:FF:BD:37:92:84:32:C3
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer:       /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial:       01962FAB4A416EF83BD02AF7D07422C6B79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: +HelEq28JfAAhwRSjUW5mDvjW3b5Nc9wCoL4x58GbIo=)
                          2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=)
                          3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:41:6e:f8:3b:d0:2a:f7:d0:74:22:c6:b7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=0b8577a38beaf944543d2001e0ffbd37928432c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:3f:02:e5:c7:0e:9f:ac:4c:67:ce:95:cb:
                    ce:4c:c0:b4:5c:c1:d0:3c:1f:c6:55:31:70:f6:d8:
                    85:6e:03:98:c3:55:e7:74:a9:0b:81:93:5a:a6:e8:
                    4b:02:fd:3f:dd:af:23:19:9c:31:8a:27:98:7d:3b:
                    13:1c:49:74:8f:50:f2:94:89:91:22:00:d1:85:b0:
                    d9:00:5a:a7:0d:a5:b0:ca:8b:be:ff:8f:49:c9:c4:
                    ad:f6:9a:ad:87:b4:32:63:8c:82:03:30:e5:6d:4b:
                    67:f9:87:68:fe:40:0f:3b:66:e5:2a:d3:62:68:bd:
                    72:a0:2a:d7:cd:32:48:f4:6d:10:71:e7:c9:1d:88:
                    b6:5a:74:40:e9:d0:12:f0:f5:65:c1:e3:e0:d0:dd:
                    02:fe:8f:44:f0:10:43:4b:b7:a9:b3:4e:fa:d5:78:
                    46:b1:2c:c6:52:1b:7c:1b:e0:4c:f2:7b:74:a1:a1:
                    4c:21:f2:c1:7e:72:0e:1f:eb:9f:3d:3b:0d:32:eb:
                    bd:a2:52:1a:10:1e:76:59:64:d9:93:aa:87:83:32:
                    fc:6e:8b:b8:48:fa:32:8b:d5:5e:c8:55:a5:d5:5b:
                    fb:3d:af:cb:bc:1c:1d:84:6b:41:9b:f2:73:bf:d1:
                    26:19:69:26:56:3f:bd:b7:d9:b8:86:82:97:ca:dd:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:77:A3:8B:EA:F9:44:54:3D:20:01:E0:FF:BD:37:92:84:32:C3
            X509v3 Authority Key Identifier:
                keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:59:9e:f6:25:88:47:75:d3:76:ba:1a:75:19:c8:9b:97:
         9a:91:75:18:65:ae:39:d3:e2:34:e3:e3:ab:47:a3:68:96:18:
         18:b8:79:25:6c:10:a8:7a:e8:fd:69:ea:22:5a:08:0b:13:9e:
         c8:7a:e7:69:69:9a:01:33:f4:53:ef:32:a3:f4:d9:5a:a0:35:
         20:a0:e6:96:f2:fb:60:9c:05:eb:71:ef:8e:9f:3e:01:8c:88:
         6a:f4:f4:e9:d9:86:0b:f1:d3:58:8d:b6:d8:35:de:1d:fc:61:
         8d:5b:a7:e4:b9:e1:cc:84:8a:71:bc:b7:48:57:55:6a:6b:58:
         c0:9d:6f:cd:44:72:0a:b0:e3:d1:20:f4:41:ef:1c:4b:7e:f5:
         ac:cc:8e:bb:07:80:2a:7e:92:c7:b5:83:fd:c6:6c:5f:ea:06:
         e4:be:a5:c1:41:d6:31:00:37:21:df:c5:a9:a2:60:d8:84:db:
         67:b1:b9:6a:33:1a:d7:cd:2d:1d:c9:b3:be:22:71:83:d7:3c:
         66:53:89:6f:ba:68:92:43:d5:9b:78:40:cc:e6:cb:d4:57:2e:
         ed:02:be:ab:41:3d:15:db:26:6c:53:2f:4c:f3:6b:57:de:1b:
         88:7c:78:79:1d:51:dc:ef:0a:7e:43:d3:d1:fa:f4:b8:ad:31:
         66:58:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----