Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File:                     vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier:          7fppyGc8p5ysy7a4xkGPhPb5PflFsrR/bRbNqkboKM0=
Subject key identifier:   56:C7:60:F6:DC:DB:9C:76:ED:96:E9:AC:54:74:C9:DC:FA:CB:0D:80
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer:       /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial:       01962ECF6C7F6B87D601625346343E5D0362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: f54g9Idv6PqQc5NMQvmsvFWJIzA.roa (hash: l130lZQGnDRQWTrBtDjmk6wY+7GBZMzcTr0yBlbCoVI=)
                          2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: QqBh94VNCO/6DOyJql3jZAq1jcHjDDGfu2SF4qlRHtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6c:7f:6b:87:d6:01:62:53:46:34:3e:5d:03:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=56c760f6dcdb9c76ed96e9ac5474c9dcfacb0d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:15:ea:3a:21:99:b7:e1:59:b5:f3:e5:2c:
                    bc:a1:b1:c9:32:14:0c:9a:89:4a:be:20:bd:60:c7:
                    f6:6c:12:cb:51:1f:ca:69:d9:27:db:cc:fb:29:3c:
                    b5:b5:b3:18:9d:51:46:24:e7:09:41:bc:9d:57:c6:
                    a6:e0:e3:74:e3:08:a7:e9:91:77:e2:6f:32:fd:90:
                    05:94:03:97:88:a4:80:92:0b:54:e8:47:f6:d8:e1:
                    24:ca:98:6d:07:f6:3c:72:6e:9b:c2:13:9a:e0:09:
                    fa:c5:15:6c:d6:0c:72:d0:82:51:d3:60:4e:70:74:
                    f4:ee:1f:a6:0e:13:8b:7b:3f:7d:09:3d:18:c2:9d:
                    aa:0d:ae:ff:8b:3f:53:8e:24:99:ef:e7:9c:f5:6d:
                    c5:4e:31:f4:1b:cc:fb:dd:0c:93:68:1b:f6:b7:0f:
                    d6:0c:71:85:97:01:6b:b2:91:99:2e:d2:ee:72:90:
                    ff:7e:3d:fb:f3:2f:04:97:e1:f2:c3:5a:fd:d9:53:
                    70:78:69:4d:14:97:c9:48:ad:38:8f:fa:76:b7:51:
                    ac:c1:41:c5:e4:5a:90:62:b9:a0:c1:80:85:e9:06:
                    1b:af:69:7e:61:47:ad:b3:ee:24:27:25:03:65:89:
                    c8:4b:08:59:59:2b:bd:7f:17:26:f9:63:be:6f:a2:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C7:60:F6:DC:DB:9C:76:ED:96:E9:AC:54:74:C9:DC:FA:CB:0D:80
            X509v3 Authority Key Identifier:
                keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:8d:c7:92:26:e2:78:7e:6c:ba:33:d6:48:ab:32:f1:f8:
         c6:45:42:42:2e:35:2b:10:b2:17:9b:18:5f:8d:f9:86:47:c3:
         80:9e:7f:dc:88:28:0d:6b:0b:3e:e5:01:1a:25:d6:48:ad:6b:
         b9:6e:2a:c7:cb:65:7a:ef:45:10:b4:c0:36:3c:47:13:93:cd:
         a7:ad:45:a8:ba:76:38:96:c9:37:7f:76:26:60:2a:f0:30:e3:
         8c:c0:5b:ba:a5:a9:12:0a:89:26:9e:9f:3d:87:d7:71:b9:1b:
         9d:11:fa:0f:2e:b0:9e:05:40:c6:95:7e:4e:db:b5:6b:0d:6b:
         4d:e6:4e:c7:10:7f:c9:a8:49:88:f3:ba:b9:73:dd:4c:60:11:
         8e:df:69:0d:1f:1f:78:14:8f:c9:54:8d:20:34:b1:b8:d6:93:
         b2:e9:eb:7d:87:43:33:11:d2:fa:20:43:b9:ba:c6:ea:aa:ee:
         a4:2e:20:c1:93:7a:86:a2:f4:37:20:f6:37:75:1f:8b:a7:ee:
         dc:5d:d5:b7:b8:2a:6e:9e:f9:08:0e:7a:5a:3e:ae:88:6a:e0:
         1d:7c:96:8b:46:e6:8c:30:74:28:ab:0d:28:13:05:39:2e:46:
         ca:c7:cf:fe:1d:0a:d2:57:b1:65:2d:85:32:60:5f:1d:0a:8b:
         5d:e1:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----