Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File:                     VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier:          H2gDbmddNHuGaEIielQUxYaAagA8P7xO8DO2nFMuSK0=
Subject key identifier:   61:AD:3F:DB:A9:C3:D6:F3:C8:32:CF:24:80:5F:71:FA:37:EC:86:CE
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer:       /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial:       01962F065B7F66DDB031542053DFFECABBD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number:          0BE2
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: 0FWPXEaHVPjzwXMyyt+0rU4uj+klFa/z+6A4W+5+YyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5b:7f:66:dd:b0:31:54:20:53:df:fe:ca:bb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=61ad3fdba9c3d6f3c832cf24805f71fa37ec86ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:1c:be:ab:1a:86:06:80:0c:0b:68:f2:fc:
                    b6:cc:8a:ec:90:5d:b6:32:d7:7c:58:32:e9:9b:f9:
                    7a:9e:8c:80:15:2c:c1:c9:11:5e:ef:0f:27:ac:92:
                    66:96:89:2d:05:84:87:76:08:96:5b:06:ee:e4:7c:
                    d0:96:3a:b0:cd:1f:8b:5e:91:1a:05:01:44:67:11:
                    17:13:ac:48:3a:f1:a6:5c:29:fe:51:05:d4:9e:01:
                    e0:97:c3:19:9d:7b:7e:62:41:23:ac:03:cb:aa:16:
                    6d:df:08:2d:75:e3:67:39:c4:a1:89:c9:ad:ed:d9:
                    67:4c:73:ef:a7:9b:0d:90:88:b5:50:2f:7e:d4:c8:
                    94:3d:61:fd:83:39:52:10:f6:82:78:50:3c:d8:44:
                    fb:39:aa:44:08:7c:2d:59:00:1e:df:6b:9a:85:dd:
                    0a:84:2b:51:06:2c:9b:ae:30:98:42:fe:24:82:e8:
                    a6:29:40:26:6c:58:2a:57:8c:94:a6:32:a4:74:7a:
                    23:68:41:1f:b8:87:ca:0e:8a:ad:eb:1c:e4:66:6d:
                    d6:bf:15:38:71:a8:76:96:53:b8:8d:6e:0c:4d:88:
                    82:b8:78:b1:46:a2:96:14:d1:66:44:fa:a8:d9:51:
                    dd:61:e7:5f:4a:00:1d:d8:86:c8:94:d7:48:a9:ab:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AD:3F:DB:A9:C3:D6:F3:C8:32:CF:24:80:5F:71:FA:37:EC:86:CE
            X509v3 Authority Key Identifier:
                keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1b:e3:b2:e4:97:2a:cf:71:99:c1:42:8e:f2:ab:6f:50:66:
         e4:5d:b8:2b:ad:16:cc:c9:aa:d8:c1:7d:76:4d:4c:98:0c:83:
         92:7a:ca:8a:5f:da:d8:f9:a3:77:20:98:82:21:85:bc:b7:fd:
         13:17:eb:df:64:a3:7e:7e:1a:1d:b4:02:a6:1e:bd:3f:b1:bd:
         34:ff:f2:06:80:1b:2b:bf:ab:06:d8:2f:5b:40:57:3b:6c:e6:
         f8:fb:fa:a6:ac:b3:4c:4b:08:b4:46:58:84:74:e9:e7:6a:cb:
         03:e8:c1:31:52:60:d8:d7:2e:9d:60:c2:b3:9a:f7:c0:80:6e:
         1d:10:0f:63:4e:af:d2:85:fd:62:86:97:3a:74:b2:1e:e1:bb:
         60:ae:0c:81:7c:6c:f1:07:8a:77:1b:b4:9f:ea:6d:7a:54:5a:
         0d:00:48:e9:31:86:eb:f7:46:a6:70:40:f6:19:51:55:61:7e:
         19:36:ec:03:20:c7:58:90:6f:54:23:1c:58:50:1a:f1:30:77:
         e5:5c:9c:c2:a1:75:1e:ba:af:61:3d:73:c5:ee:a3:e0:fb:dd:
         4b:5e:c9:e2:f9:63:8c:7f:17:c6:ff:ad:39:d1:60:eb:5c:5d:
         a9:ba:1f:76:df:55:9d:bc:ce:5e:4b:ea:e9:2d:53:27:66:0a:
         88:eb:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----