Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File:                     vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier:          zvrwQIKQbmI9fVS+85qwHHhRKUD8KLs0x++SZng4Jz8=
Subject key identifier:   E2:60:F6:8F:1F:FA:AC:E3:D2:3E:A0:E0:79:DA:F7:06:B8:BF:CD:72
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer:       /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial:       01962FAB97FDCCC57E2C1F743D064E6BA37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number:          0426
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
                          2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: MOLA+28TO9elzD94TRIcPecCG5hLCnYzjV5JIGBWMHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:fd:cc:c5:7e:2c:1f:74:3d:06:4e:6b:a3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=e260f68f1ffaace3d23ea0e079daf706b8bfcd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:b2:ba:2e:d1:d6:a2:e4:ed:74:3e:a8:32:
                    6d:13:a0:9a:80:17:30:f7:d3:5d:2a:b4:49:67:d8:
                    69:a3:c3:67:96:d3:71:d7:2a:4b:d2:d1:eb:ad:e6:
                    77:9e:59:b5:6e:23:42:04:45:88:09:9f:6a:8b:4b:
                    a8:d3:a3:e1:bf:73:dd:f2:a3:1b:b5:d8:58:c8:79:
                    d3:79:54:7b:ac:53:da:25:46:7a:6b:c7:2d:8e:71:
                    5f:b8:76:e3:f3:07:c6:43:a3:2c:34:5e:fe:33:10:
                    25:c0:8b:29:b7:53:dc:7b:c8:2a:4f:bc:05:32:19:
                    a3:ce:0e:72:4a:3f:e2:2c:fa:21:9f:26:ce:14:8f:
                    f5:cf:ad:7b:24:54:c5:b3:e7:6f:6b:85:b2:55:36:
                    87:4d:ca:84:aa:a1:17:7d:69:1b:5a:40:42:c8:20:
                    e7:4b:93:d8:12:d3:5d:8a:53:21:34:2d:1a:68:44:
                    94:9a:64:1c:92:04:cc:2b:2f:a2:d2:94:16:fc:9d:
                    e2:4d:50:ad:53:9b:93:dc:45:c2:39:ec:4a:6a:a3:
                    12:5d:6b:cf:e0:5b:7e:31:16:80:6b:4f:88:38:40:
                    97:71:4d:0c:1e:1e:71:d8:73:ec:70:f9:d7:4b:49:
                    a6:54:07:95:99:c5:b7:25:e8:74:6f:ad:b3:35:bf:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:60:F6:8F:1F:FA:AC:E3:D2:3E:A0:E0:79:DA:F7:06:B8:BF:CD:72
            X509v3 Authority Key Identifier:
                keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:ed:2d:69:b8:17:31:07:3e:ab:cf:e6:e3:4e:2d:8a:33:
         78:c4:61:f4:6f:2b:73:e5:0b:7f:5e:36:0f:d9:bc:24:a6:75:
         0d:20:a7:90:a9:47:a6:fc:a0:08:5e:84:48:db:b7:f4:d4:fd:
         10:0f:25:39:06:de:7d:76:58:2f:18:f8:b2:88:04:c4:f3:32:
         5e:27:74:e9:64:b2:b8:d8:bc:21:e7:27:13:60:fa:6d:9e:95:
         17:36:56:2d:80:be:2a:16:b7:c0:57:84:ce:76:ed:02:df:ae:
         55:13:c4:4a:95:61:aa:78:f9:de:bc:b9:9c:bf:7c:77:d2:0f:
         5f:50:87:c7:9a:f5:79:a1:85:20:93:9d:74:f1:dc:4d:67:ea:
         9a:de:66:12:84:97:cd:ce:63:32:d1:8c:bb:c5:f1:17:f2:92:
         86:be:d3:e1:5a:ac:76:6d:f9:30:56:38:b9:29:6d:c7:43:ec:
         26:26:69:43:25:ff:fa:0d:2e:ca:22:4e:6f:fd:db:a8:3c:4b:
         23:21:51:ca:8a:8e:6b:67:42:81:81:c9:4a:12:db:47:4b:ce:
         82:38:d6:46:26:46:30:4d:3a:7b:e7:ab:d0:ab:52:a6:f6:f3:
         0f:85:03:51:e8:83:00:8d:cd:42:d3:9f:32:3f:b3:9b:3a:e4:
         05:57:c3:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5f9zMV+LB90PQZOa6N8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlY2I1NTI2ZTg0MWU3NzBjYjU1NjRmMzA0Y2M2Njk2ZWFi
MWU0YmIwHhcNMjUwNDEzMTUwMTM2WhcNMjUwNDE0MTUwMTM2WjAzMTEwLwYDVQQD
EyhlMjYwZjY4ZjFmZmFhY2UzZDIzZWEwZTA3OWRhZjcwNmI4YmZjZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSiyui7R1qLk7XQ+qDJtE6CagBcw
99NdKrRJZ9hpo8NnltNx1ypL0tHrreZ3nlm1biNCBEWICZ9qi0uo06Phv3Pd8qMb
tdhYyHnTeVR7rFPaJUZ6a8ctjnFfuHbj8wfGQ6MsNF7+MxAlwIspt1Pce8gqT7wF
Mhmjzg5ySj/iLPohnybOFI/1z617JFTFs+dva4WyVTaHTcqEqqEXfWkbWkBCyCDn
S5PYEtNdilMhNC0aaESUmmQckgTMKy+i0pQW/J3iTVCtU5uT3EXCOexKaqMSXWvP
4Ft+MRaAa0+IOECXcU0MHh5x2HPscPnXS0mmVAeVmcW3Jeh0b62zNb/sUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJg9o8f+qzj0j6g4Hna9wa4v81yMB8GA1UdIwQY
MBaAFL7LVSboQedwy1Vk8wTMZpbqseS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2Qt
YTIxMjdjMmFhMWIzLzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2QtYTIxMjdjMmFhMWIz
LzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK/tLWm4
FzEHPqvP5uNOLYozeMRh9G8rc+ULf142D9m8JKZ1DSCnkKlHpvygCF6ESNu39NT9
EA8lOQbefXZYLxj4sogExPMyXid06WSyuNi8IecnE2D6bZ6VFzZWLYC+Kha3wFeE
znbtAt+uVRPESpVhqnj53ry5nL98d9IPX1CHx5r1eaGFIJOddPHcTWfqmt5mEoSX
zc5jMtGMu8XxF/KShr7T4Vqsdm35MFY4uSltx0PsJiZpQyX/+g0uyiJOb/3bqDxL
IyFRyoqOa2dCgYHJShLbR0vOgjjWRiZGME06e+er0KtSpvbzD4UDUeiDAI3NQtOf
Mj+zmzrkBVfDbQ==
-----END CERTIFICATE-----