Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.mft
File:                     vAdaInSXYuyq_5y8IXuC8XJp42I.mft (raw, json)
Hash identifier:          hTwSYtuntPUd9SzYYMBSgpJrtm8RAxE7Hewkn29pZSI=
Subject key identifier:   08:07:36:BF:5A:65:1A:28:71:95:87:55:D2:04:E5:2F:02:16:0A:3A
Authority key identifier: BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
Certificate issuer:       /CN=bc075a22749762ecaaff9cbc217b82f17269e362
Certificate serial:       01962E989384A1BDFABFD4A271EED1982511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.mft
Manifest number:          079A
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: Y4M02NjeW7DldjUvfZR_ymuxISc.roa (hash: YMDoTAS9ZcbvID2GafVFk/2kZWTGFZXflAp5CAmBDZs=)
                          2: YsyyO8L_rSeXswXuSDBnEvMjtXA.roa (hash: FFYhcYissXyX8DCNEMV9KOBiKRLTOTHAb99wI47N+fc=)
                          3: vAdaInSXYuyq_5y8IXuC8XJp42I.crl (hash: zalD2oUuQ5eeGyxxZ1ucoBAmd+rmpe4nhLfQckxe0QE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:84:a1:bd:fa:bf:d4:a2:71:ee:d1:98:25:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc075a22749762ecaaff9cbc217b82f17269e362
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=080736bf5a651a2871958755d204e52f02160a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:45:99:42:3f:67:a8:2c:7f:d0:f0:c0:dc:
                    7c:a1:b7:4a:ea:6f:34:98:df:03:46:ae:6e:d7:af:
                    4a:2d:de:65:ef:ef:d7:83:95:b1:13:30:90:64:bf:
                    83:57:b6:7c:9c:d3:9e:22:ba:8f:10:08:67:a1:df:
                    e5:03:2c:29:41:2a:99:47:41:34:9e:12:e7:41:be:
                    b2:31:cf:93:ef:95:93:c0:4d:d0:6e:1b:34:32:3b:
                    df:b8:66:ca:fc:f9:6a:a8:a9:6d:cd:87:05:97:7e:
                    d6:f9:c4:d1:cd:96:97:6c:d9:28:23:f0:29:01:08:
                    c1:89:b8:5c:7a:d8:8c:68:a0:d6:68:1b:2d:9b:7e:
                    ae:b1:15:9b:25:ab:01:d4:54:06:4b:7b:3f:db:8f:
                    97:42:16:ff:b4:4e:ed:96:a3:bc:62:78:05:be:49:
                    1f:4c:03:4d:8e:cf:b1:18:2c:80:e1:25:02:85:cc:
                    44:36:04:90:18:98:90:2c:6b:67:b0:04:58:01:3c:
                    9b:c4:fd:ca:53:73:a8:9e:4b:d3:e9:c8:67:3d:e3:
                    65:63:b8:67:a2:5d:8f:31:17:6f:9a:81:90:f5:85:
                    ad:93:c2:6a:ff:50:c5:16:10:96:bb:ea:e0:b2:5b:
                    c6:f6:51:7b:dc:47:33:12:7b:3b:2a:9e:95:eb:aa:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:07:36:BF:5A:65:1A:28:71:95:87:55:D2:04:E5:2F:02:16:0A:3A
            X509v3 Authority Key Identifier:
                keyid:BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ac:7b:1d:04:ad:ff:bc:17:b7:f6:27:8e:d4:97:91:e3:2c:
         a8:1b:6e:ad:6b:ac:b5:90:d7:aa:77:59:50:4a:10:a7:9e:3c:
         59:81:62:1c:ef:99:56:60:19:af:c8:7c:73:03:36:4b:24:d4:
         7b:ef:20:50:4a:fc:c7:19:fe:f2:aa:22:f3:50:e6:5c:45:3d:
         06:15:c3:dc:1e:65:3c:49:aa:35:c3:46:f5:de:4f:25:4b:3f:
         70:24:18:1d:7d:f8:c8:23:4b:df:11:b0:27:37:37:4b:f2:7a:
         96:39:16:e1:e3:9d:43:87:bb:6b:3d:ed:86:aa:76:b2:2a:58:
         a4:c6:a5:21:31:68:eb:5f:24:5a:74:8f:ce:50:5b:ae:93:c1:
         f7:6e:25:73:40:6b:66:d7:34:c0:0b:33:b0:0a:67:9b:19:d3:
         c5:47:53:03:f8:f5:a7:54:9c:9e:c7:51:bf:e8:91:af:27:24:
         e7:21:e8:13:11:40:9e:cc:2f:a7:60:1a:1f:f6:d8:1b:84:8f:
         b6:3a:d1:25:78:75:33:7c:60:d9:19:4b:4b:7a:42:92:c2:46:
         9d:db:69:fd:b9:40:7b:b0:ae:a9:95:9d:c4:6c:82:7f:fb:23:
         b2:84:17:8b:88:2a:20:83:2a:d4:b8:49:84:af:94:35:bd:64:
         f8:e7:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----