Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File:                     vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier:          g+uksf2GhaBSshsTgW400C1Bz7DNYU2FRjzfxPu+Ha0=
Subject key identifier:   05:6E:93:2A:9E:1E:18:48:B0:4F:CE:D2:55:93:21:CE:20:B1:67:43
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer:       /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial:       01962DF3BADC7A768862D4ECE1921602AC29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=)
                          2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: KY5RC0kz9F44zOa02v310lfreOMP51IUEZXfkc9iyJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ba:dc:7a:76:88:62:d4:ec:e1:92:16:02:ac:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=056e932a9e1e1848b04fced2559321ce20b16743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:c8:24:e2:97:88:ae:57:03:7f:5e:3d:ad:
                    06:b8:67:94:91:9a:69:55:94:6d:3a:64:65:ca:77:
                    c5:77:67:f3:3a:2e:69:b6:c6:3e:f5:b6:73:7d:d6:
                    3f:dd:cc:d9:d9:52:67:6d:de:b3:e0:b3:e0:2c:75:
                    96:fe:5f:20:3b:03:da:d5:5d:3c:f9:f5:91:f5:ca:
                    81:bb:ff:e9:40:7c:6a:39:d8:6a:bc:df:b9:3b:f7:
                    81:32:38:1a:8b:1a:33:b8:b7:05:7d:75:a3:61:46:
                    88:ce:82:84:ba:1f:ae:be:8b:34:7e:a9:ba:d3:df:
                    98:8c:3d:32:57:d9:e3:53:2c:b1:b5:d2:1d:00:14:
                    1b:db:be:ff:37:f5:58:e6:3a:9a:8f:6d:b1:0e:24:
                    e9:e2:51:6e:81:d6:0c:6f:b9:dc:6d:44:f9:c7:79:
                    19:c3:ad:14:f2:6f:b0:82:88:c2:d6:4d:02:78:af:
                    f7:bc:6b:44:90:38:04:62:c9:26:c5:6e:18:6f:7a:
                    3e:53:5e:fc:9c:ef:e2:dd:fb:8a:2f:f2:a2:aa:3a:
                    0e:d5:34:e6:70:94:e8:2b:83:c7:f7:07:a5:07:fc:
                    61:0c:7b:eb:14:43:b3:85:c8:44:e1:28:5a:6d:0d:
                    fb:36:b3:71:7d:90:0b:0f:b8:77:df:78:c9:4c:2e:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:93:2A:9E:1E:18:48:B0:4F:CE:D2:55:93:21:CE:20:B1:67:43
            X509v3 Authority Key Identifier:
                keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:5a:31:26:49:72:e2:69:12:8f:85:da:7c:0b:02:a5:56:
         46:c8:89:57:06:3c:ed:82:e1:bb:f1:ae:25:e6:a6:0c:3e:49:
         0f:76:ea:bf:d7:21:4b:1b:cf:37:c5:6e:99:98:50:6c:ce:de:
         33:8f:c0:b0:c2:71:8c:48:f7:e8:65:af:2d:eb:6c:0d:f4:e5:
         8e:3c:6c:c4:db:f7:8d:95:36:d2:b0:78:22:14:22:db:35:cd:
         4d:ac:88:21:6e:11:ed:19:fc:f9:10:e9:83:ba:37:bf:0f:5b:
         47:11:36:63:21:13:d8:64:09:ab:af:e3:d0:bb:a6:23:dc:08:
         43:5a:db:13:7a:4f:ae:6a:87:6b:ff:7d:26:96:e9:ca:55:6a:
         d6:a5:be:8b:28:c6:ec:f8:a6:93:e4:8f:50:4d:41:0c:64:60:
         07:93:39:91:fa:51:c3:62:ee:a3:5f:1a:5e:95:ff:80:75:b7:
         16:67:10:3a:2e:47:cc:12:de:be:64:84:53:6d:d0:77:9c:a6:
         7d:41:da:6f:fd:9d:8a:75:3a:c5:04:b6:d9:b3:8b:9c:b3:6b:
         40:a2:8e:f6:78:7c:8c:9d:f6:f2:7b:fa:1d:38:43:6d:6d:fa:
         b4:be:29:01:3c:25:8d:49:03:df:3c:dd:0b:24:fe:06:a4:7b:
         dc:44:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----