Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File:                     1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier:          cWGFlOmBf9UEtWPWG+oHijZ0PPAgu9/cUJQemZSpcho=
Subject key identifier:   5C:27:36:DF:A9:14:BF:7B:96:96:08:F6:48:0D:83:AB:5B:4B:22:6A
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer:       /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial:       01962F3D814B140AB5393ACF2DBF2C0FE465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number:          0170
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: zn8pBfsNI95+iyA/N+1ez4IcICBnfrR6Xxs9eiteXhQ=)
                          2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:81:4b:14:0a:b5:39:3a:cf:2d:bf:2c:0f:e4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=5c2736dfa914bf7b969608f6480d83ab5b4b226a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:8e:06:c6:cf:2d:f8:b3:3d:7c:ce:b2:62:
                    6d:d8:31:44:45:a5:7d:9e:c6:e6:9f:b5:f6:10:22:
                    3a:0c:67:45:ce:a0:a7:76:e0:85:68:f3:65:31:f7:
                    4c:da:5a:aa:34:45:8a:77:c4:59:fc:95:a0:58:f7:
                    26:51:b9:e5:f8:5d:89:e5:e6:c0:26:ba:95:9a:3c:
                    e0:76:b1:88:99:a6:b8:85:22:76:b0:7d:27:75:0b:
                    19:42:76:9d:a3:40:08:52:29:e2:fe:1f:a0:49:8c:
                    5a:f6:b4:7c:f4:71:0d:ec:8e:37:da:63:ff:3b:f6:
                    f9:4a:48:ca:4c:40:7e:80:1f:16:3d:96:a0:ca:b5:
                    28:5f:c2:85:81:df:29:c9:b7:1e:eb:d6:98:1c:73:
                    0a:13:e0:21:02:db:3b:ff:ba:60:c3:19:4d:58:33:
                    e2:30:b7:b1:f4:69:2b:5c:45:cd:53:06:97:2c:fa:
                    22:53:6f:1f:4a:7d:02:b1:66:6c:80:96:d3:f2:06:
                    1a:af:c0:fb:cc:c6:f3:22:f1:73:0f:74:2d:a5:50:
                    89:e9:18:84:59:15:e7:19:d5:68:dc:16:d4:1d:59:
                    c3:0c:a9:8a:c0:bb:63:7c:d7:63:1d:e5:1d:f9:cf:
                    5e:d8:b2:b5:54:d9:fe:54:51:6f:96:13:5d:50:05:
                    fd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:36:DF:A9:14:BF:7B:96:96:08:F6:48:0D:83:AB:5B:4B:22:6A
            X509v3 Authority Key Identifier:
                keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3c:20:d7:60:f5:e6:f5:52:b2:67:c8:e1:9f:f5:9f:a5:19:
         02:e4:a0:c9:6f:42:79:c7:ae:a5:b7:00:0f:80:ec:e6:09:ed:
         da:91:29:89:bf:55:e3:bb:40:30:cc:47:d3:c6:4b:61:c0:05:
         25:4c:f0:be:2f:ba:6e:a7:8d:a9:26:a6:62:b5:51:d0:fa:f1:
         5c:26:44:eb:a6:0e:08:69:e0:61:75:59:02:38:a7:36:46:1c:
         be:39:6b:99:b1:fb:9e:dd:13:ac:c7:6a:5b:f0:8d:c6:f4:76:
         3a:36:73:4d:a5:f9:af:95:de:cd:d4:bb:f5:72:8b:19:f4:dd:
         a4:10:ff:7e:0d:c2:da:7c:5c:4a:36:63:8e:38:15:e3:4c:5a:
         95:1f:a8:ec:58:bd:98:3e:a4:b2:d6:23:55:ac:dc:99:c1:64:
         61:bc:15:f6:a7:cb:4e:c3:a5:43:1f:ab:b9:5d:9e:36:b6:d5:
         bb:66:15:a9:ba:39:eb:23:99:4d:e2:ea:1e:6a:c2:10:84:98:
         a7:7f:31:2f:6f:99:48:09:2f:13:45:f0:5b:eb:c0:3b:75:74:
         4a:49:9e:91:f8:c0:d4:01:c3:85:d4:73:b1:6f:37:08:db:db:
         e8:81:e8:11:f4:7e:b3:8f:33:b5:ca:fb:1a:13:44:ac:c7:f1:
         77:30:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----