Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          lL59jvNmgobr7yrJiNSTXPeLjblW/tWXMZNdOfelYD0=
Subject key identifier:   6E:6E:47:85:3F:2C:CE:74:40:25:EA:C8:F3:8D:EA:48:D1:41:D9:4E
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       01962F3D53B5103C17A9A3BF08EC01F0DA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=)
                          2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=)
                          3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=)
                          4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=)
                          5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: LWbp7/AErxe4szQahvrY6It+zL1wd+adC98L+6WFv0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:53:b5:10:3c:17:a9:a3:bf:08:ec:01:f0:da:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=6e6e47853f2cce744025eac8f38dea48d141d94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:a9:b0:fe:a1:5f:76:b8:8c:08:e2:7c:f8:
                    87:40:e8:aa:62:12:1f:88:53:1a:27:ae:72:87:e2:
                    d2:de:b2:88:e1:20:52:8b:dc:b4:74:47:6d:b5:86:
                    fd:f7:e3:08:d0:d6:25:50:91:1f:f9:f5:25:07:ee:
                    23:14:b9:a0:16:3e:72:50:e8:7f:8a:64:6e:9f:36:
                    8b:62:0c:67:9f:ac:a6:99:56:d0:42:4c:55:43:33:
                    8e:e3:bc:ff:d7:5f:f8:44:7d:18:d2:05:fc:59:f1:
                    90:c8:2f:c2:0a:87:da:48:95:b2:85:2d:b8:2b:79:
                    00:21:56:74:ac:d5:1e:50:fd:67:e5:49:33:a9:46:
                    af:79:b0:bb:52:ab:18:d0:fb:fb:f6:b6:d4:77:ec:
                    9a:56:ae:cc:32:8f:fe:af:0f:d8:ba:2a:87:3a:ac:
                    8c:ea:5f:25:5e:44:3f:3a:a4:88:4f:5a:14:f4:ca:
                    b7:35:f2:8a:6a:4b:92:2f:82:b7:28:b3:f9:7c:72:
                    d9:f5:1c:17:3c:cc:40:f5:27:1f:31:2a:a6:cb:c9:
                    2d:36:14:67:45:1d:e0:48:f7:c6:a6:43:49:d5:ab:
                    a7:9f:f9:0c:20:8d:d6:0c:3c:26:f4:fc:21:5b:1b:
                    6e:92:71:47:fe:13:8f:d8:ac:f9:3e:07:97:32:84:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6E:47:85:3F:2C:CE:74:40:25:EA:C8:F3:8D:EA:48:D1:41:D9:4E
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:42:b8:6d:8c:a9:1e:8e:7b:2d:2d:0c:13:fd:91:28:6b:17:
         74:0a:82:9b:2e:4f:10:04:9a:e8:21:69:09:63:a5:b6:b0:14:
         29:9d:00:6b:a6:ed:ab:92:28:8b:db:84:5d:e8:55:81:f1:ab:
         77:a6:e5:b1:52:fb:86:8a:f2:e7:82:91:a0:3c:c2:be:40:87:
         8b:66:f0:72:fd:72:c4:cc:bf:7a:6d:35:0b:58:59:d4:e7:8d:
         7e:17:a3:74:58:d1:c0:c4:1a:07:2a:f0:fc:0b:97:3b:a0:69:
         dc:6f:94:52:35:65:0e:3e:32:98:ea:aa:ed:58:71:9d:dd:23:
         83:f5:6d:d0:54:3a:59:0d:44:18:4d:51:a4:ab:34:37:cd:7c:
         07:ca:67:99:31:64:6f:33:be:f1:47:e3:15:35:4d:a5:fb:a6:
         72:5c:3e:34:cd:19:30:94:72:4d:ae:6a:d5:2b:d0:9c:2d:35:
         be:3b:05:cc:00:36:2a:56:e1:1d:66:f0:7f:46:0e:ec:61:f4:
         c1:98:b8:ed:42:09:73:ba:f0:03:61:ee:96:1d:3f:8a:ab:12:
         1b:60:93:21:ba:62:d3:0e:e4:83:87:62:3b:19:a5:ff:ad:8f:
         c9:7b:dd:46:bd:ef:52:d5:95:09:5f:30:5c:c2:16:c5:7d:ad:
         16:6a:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----