Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File:                     vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier:          LUUyEOag4wjvm9ngwdN2aM90w5aC2p96ZB+JvZtcqYk=
Subject key identifier:   62:5A:AF:B0:F7:CF:4F:8D:A8:D8:8C:7B:7B:CC:7C:8C:FB:14:22:23
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer:       /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial:       01962E6189428D15B3DB6E74534E108DA731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number:          0712
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: fqR68VfdKOjlL4-2CaY4FkN0s68.roa (hash: A8R6xLSF5DJaL8IgTl84uUw6UJHCXjrGFrGhjx80Cv0=)
                          2: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: mlVrkHoJOJt8MO0Tga+PK3uImuOqC2mJ8TX/j+6the4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:42:8d:15:b3:db:6e:74:53:4e:10:8d:a7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=625aafb0f7cf4f8da8d88c7b7bcc7c8cfb142223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:ab:9b:ff:91:1d:d3:43:69:5b:c6:f8:70:
                    f9:c6:83:96:33:b3:08:16:ea:aa:14:08:3e:92:38:
                    89:88:d2:f9:3f:5c:f6:68:47:5d:14:57:8c:04:02:
                    d5:ce:53:da:4a:3b:dd:27:56:9c:47:cd:fa:14:5a:
                    33:e9:9e:8d:c9:96:13:3b:d5:45:14:85:a1:48:17:
                    fe:e9:39:f7:e1:de:37:1c:fc:68:4f:c1:ca:c0:1d:
                    3d:c4:2b:66:15:c0:b5:c9:84:36:7f:2a:af:19:d7:
                    d6:1e:59:d4:79:d2:2e:45:7e:a1:4e:bd:42:c3:ea:
                    22:3c:8f:87:a0:9a:2e:d3:24:1c:4a:e1:95:71:57:
                    5f:7d:15:07:4c:e1:28:3b:6d:56:c1:3f:6c:f0:8b:
                    9a:cf:90:5d:88:8a:b5:44:b0:8e:14:df:f4:61:ea:
                    d6:ca:30:d2:6b:3e:48:5e:a9:40:f0:d5:18:03:13:
                    3c:3a:0e:4e:f1:ae:73:78:75:6e:d0:c6:fa:9c:29:
                    83:b0:8c:7f:55:b4:e4:78:40:58:0d:de:c0:75:99:
                    a1:5e:9d:1b:0c:6f:54:ef:1e:ff:41:c0:54:c6:fd:
                    0d:25:80:f0:b7:a2:05:8b:88:ac:cc:45:0f:63:14:
                    fb:03:5f:aa:e7:f4:2a:73:0e:27:02:56:27:8f:bb:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:AF:B0:F7:CF:4F:8D:A8:D8:8C:7B:7B:CC:7C:8C:FB:14:22:23
            X509v3 Authority Key Identifier:
                keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:0a:d6:71:40:a4:2f:7b:75:8e:b2:1c:f3:6e:29:24:40:
         db:94:85:a2:4f:f9:b0:0f:9c:29:38:2a:26:56:4d:a1:38:4f:
         20:b5:c7:4a:91:77:31:14:13:37:51:c7:15:70:1d:f4:65:9f:
         81:f1:eb:06:7d:54:39:82:f5:46:8c:c0:d3:e4:07:8b:fb:0d:
         fe:b3:b6:34:46:36:d1:dd:e7:ab:65:b1:95:49:46:fd:14:74:
         b7:7a:4a:c2:b7:9a:51:66:3a:13:dc:a2:e5:a6:cb:e7:60:de:
         c2:6a:4f:1d:03:58:8d:08:8d:63:ee:97:61:b6:c7:5d:80:e0:
         15:16:aa:fe:d7:75:71:f6:3a:80:79:b8:db:38:3e:60:a6:e8:
         a5:c2:87:f8:37:05:95:5c:b9:dc:f3:a4:2e:53:fa:a1:1f:46:
         9d:ad:d5:64:a8:21:bf:10:df:63:39:d6:11:6b:11:fd:71:66:
         9f:cb:83:1e:e1:56:32:a5:d0:69:4d:a0:26:ce:69:a7:92:d6:
         93:1d:0e:3b:0c:d1:38:20:01:97:19:ae:75:7a:1e:df:93:c6:
         e1:e8:f1:9b:0a:79:3c:ae:f7:77:89:34:73:8b:70:98:da:ea:
         56:08:be:11:e4:29:e4:a2:50:ac:6c:eb:5e:83:1f:62:82:d1:
         cb:1e:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----