Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File:                     VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier:          /XN+F1WjCEJ+AsXCAzuXr7qFARZX9Hc9FXnlkTJj3r8=
Subject key identifier:   B9:91:C3:2B:44:EF:EE:8C:A1:03:27:38:EE:18:6F:4E:96:40:4B:F4
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer:       /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial:       01962ECF864F552C4E7DD2FBAC92A049F4C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number:          1146
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
                          2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: XnqqH226Jnqp1YzSWU8MF6ssOKCy+Ir1k6qV9y0EoDQ=)
                          3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:4f:55:2c:4e:7d:d2:fb:ac:92:a0:49:f4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=b991c32b44efee8ca1032738ee186f4e96404bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:ed:e0:6a:2e:69:99:2f:e1:f5:f8:44:a2:
                    dd:90:09:50:d4:dc:c4:87:1f:04:d6:bd:9b:6b:48:
                    65:08:07:b4:e7:0c:0b:84:53:99:cc:1b:21:ec:03:
                    8f:33:92:28:c2:0f:70:c1:3e:3a:5a:f9:a8:bf:b4:
                    14:f3:8a:a4:e5:3e:40:92:b5:b7:92:cd:25:0d:e6:
                    6f:a8:34:d1:aa:84:3d:a7:5c:be:ca:ae:b2:51:9e:
                    bc:28:94:7e:ea:1c:55:39:c5:1b:5c:88:f5:ae:8f:
                    47:24:b6:73:a8:61:7e:7d:01:ba:53:f3:c3:d2:a4:
                    94:cb:26:4e:d1:b1:c0:b4:78:48:ea:d0:e2:f0:e6:
                    da:24:72:9e:ec:d5:f5:f8:d9:63:41:3a:49:e2:ec:
                    43:67:d1:49:b6:81:62:eb:d7:ff:e4:b9:9b:f9:a2:
                    47:ba:8a:78:2b:c1:24:1e:a2:35:13:28:8e:c6:52:
                    3d:5a:6c:20:46:5d:9c:c9:65:d8:93:31:9b:24:cc:
                    59:94:ab:e6:f5:a8:49:0c:2c:3d:0a:d8:44:c4:93:
                    09:fd:3b:bf:12:af:4b:9b:c4:c8:07:37:01:e7:e9:
                    7a:06:82:81:ba:6d:12:55:7d:60:ae:7a:80:ed:c3:
                    d5:21:48:3f:37:d2:0f:8b:58:b5:4e:89:92:f5:bc:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:91:C3:2B:44:EF:EE:8C:A1:03:27:38:EE:18:6F:4E:96:40:4B:F4
            X509v3 Authority Key Identifier:
                keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:4a:88:a7:d1:79:dd:fb:83:f3:6b:fb:dd:3f:a1:51:4c:
         55:0a:14:3a:ee:56:5b:55:a1:a0:15:2e:33:76:54:b7:84:ad:
         bd:d2:26:8e:0a:ee:4e:57:37:17:cb:12:c2:08:5f:f8:53:84:
         42:06:85:c3:e0:23:6b:9f:6f:18:5d:31:c2:e2:3d:8d:d1:50:
         e1:25:b2:93:2f:db:bb:aa:81:b3:1d:63:62:a7:0d:f4:8b:fc:
         a6:c1:a9:5f:c7:e8:c0:e7:07:ff:d4:7f:68:3f:e7:5c:42:3b:
         9f:db:e6:c1:37:e9:77:b8:2d:41:c6:05:13:51:e8:f8:c6:69:
         ed:1f:95:e8:ae:5e:a0:6e:32:3c:a1:27:04:f5:de:70:9a:ee:
         d5:fa:1d:c9:eb:78:d4:51:8d:a6:a2:8a:31:3a:a2:6b:03:2f:
         3b:9c:69:1f:31:9f:70:7e:c8:94:a5:ad:b4:4d:e7:70:83:27:
         75:eb:44:28:63:6c:26:a6:67:07:58:50:6c:13:3b:44:96:77:
         34:0e:3d:86:88:9c:d8:a3:15:27:bd:e9:a0:74:4a:64:22:30:
         7d:42:a3:88:c6:67:43:a5:ed:60:5e:03:05:e2:3a:3a:05:c7:
         c0:4e:de:9d:c1:7b:b4:2d:a6:22:fc:8e:8b:1d:80:e0:64:a2:
         4f:04:25:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----