Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          R5JDazpEII6Rjg9B28iVzASkmKbS++lPc9U2sebmyYM=
Subject key identifier:   7A:80:AA:81:34:69:4C:B5:00:77:34:50:C9:D0:08:98:15:8C:FA:68
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       01962F3DF2FC4E98EF3F4095A408127268A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          0D71
Signing time:             Sun 13 Apr 2025 13:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:50 +0000
Files and hashes:         1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
                          2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
                          3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: kHaztais5JaAJQOoczUITFHz670tInnZ7ki4pSXLY/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f2:fc:4e:98:ef:3f:40:95:a4:08:12:72:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Apr 13 13:01:50 2025 GMT
            Not After : Apr 14 13:01:50 2025 GMT
        Subject: CN=7a80aa8134694cb500773450c9d00898158cfa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:fc:d5:9a:7b:24:10:7e:98:1a:4d:2d:fa:
                    8a:75:f2:50:78:70:e0:f5:8d:d4:2c:fe:86:0b:50:
                    91:17:06:f6:f9:25:46:04:0c:81:ea:b2:78:23:b3:
                    e1:a8:82:38:bc:f8:ef:7b:ca:80:b3:b4:eb:0e:38:
                    f2:a3:a6:bd:af:9f:34:65:f7:a3:51:f6:3f:30:f7:
                    4e:63:56:13:d1:f2:47:9e:61:60:c3:29:09:01:87:
                    bb:41:82:80:73:fa:43:d9:5f:4b:3a:73:ca:5f:63:
                    6f:df:eb:29:4c:e6:f6:a1:77:fe:67:51:b9:29:7a:
                    d2:4b:aa:7c:36:0b:cc:a6:f3:cc:97:ec:2d:cd:2e:
                    e2:c6:1f:65:67:50:67:d2:6f:7b:c9:7c:db:84:95:
                    8f:b9:2d:e5:6c:62:0b:1a:8c:dd:74:8e:9c:ad:03:
                    2e:5e:27:a5:da:13:f6:43:7f:ed:e6:c7:4e:ca:f3:
                    68:cb:34:42:15:20:ae:d1:4e:7a:bf:68:5b:40:b8:
                    4c:ad:11:92:98:8b:22:65:40:65:e0:32:b0:3c:c9:
                    07:73:17:b3:26:ef:fd:a8:20:c3:37:e9:4f:0b:ba:
                    c6:ca:bd:33:8c:84:d4:15:66:82:98:ce:c5:3f:e5:
                    8b:d4:11:09:59:bd:ad:73:87:46:07:ef:34:df:a9:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:80:AA:81:34:69:4C:B5:00:77:34:50:C9:D0:08:98:15:8C:FA:68
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:3e:fe:4c:3a:48:e7:07:b4:19:bb:ec:60:ac:dc:42:44:
         31:8a:4f:18:c8:e7:22:4f:12:cb:de:a8:94:2a:4c:c0:3e:c9:
         b8:b9:38:8e:75:ef:52:ee:64:7e:24:ce:4b:d5:f4:5a:1c:3d:
         d9:eb:1f:f5:ab:eb:5d:fe:86:87:31:54:90:23:a1:81:46:1a:
         60:6d:97:28:08:28:f5:49:35:25:44:96:54:eb:38:8b:a2:b0:
         9b:a7:2d:d9:d3:b4:8f:03:cf:da:b7:26:27:7e:d9:6e:11:26:
         11:29:ed:e6:28:c6:cf:a3:b9:d1:a1:fc:26:a6:12:f1:f3:c4:
         82:4c:dd:b8:56:74:7d:cf:06:49:24:85:a3:10:c1:81:68:a8:
         0d:13:26:69:76:f6:4f:9d:e8:3f:c8:e3:5f:5f:76:44:28:67:
         d2:38:02:b7:ec:5e:10:6b:2b:af:77:61:af:2e:0b:cb:02:9f:
         ad:fd:a0:24:59:df:05:9d:a9:9d:a9:6b:94:d5:53:3b:4f:c4:
         ba:23:77:a9:fb:fd:28:8f:c3:25:31:04:00:4c:ef:82:a5:96:
         da:47:81:20:0d:cf:9a:a0:79:25:2f:03:ee:e6:45:d9:de:21:
         5c:9f:6b:95:a2:79:54:fa:6f:a8:fe:63:f1:67:95:9f:70:3a:
         e9:0b:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----