Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File:                     VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier:          N5iEu7vAyxjBANMaf7ttKckzKMhz3qf+MCWFVXmv4ko=
Subject key identifier:   8E:1C:AB:8E:D7:E1:95:DD:D5:62:45:DA:4A:FB:01:D5:3F:06:A6:05
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer:       /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial:       01962F74C0149C5D15EBC71119405E73846A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number:          04A8
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: YV5o1ET5WcYe6CPJnVMikOlQI/KEb+BxsUBxcGcUDh8=)
                          2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c0:14:9c:5d:15:eb:c7:11:19:40:5e:73:84:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=8e1cab8ed7e195ddd56245da4afb01d53f06a605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:d2:17:da:2c:65:4b:df:3d:1a:d2:bb:51:
                    bc:f8:a1:87:f8:d7:08:8d:b7:ff:1d:b6:a6:81:79:
                    f6:f7:15:72:a7:99:41:e1:fc:a9:e3:16:b3:fe:02:
                    80:f5:82:92:87:d5:b4:7f:db:ff:ae:a2:e7:b0:39:
                    e0:3f:12:e4:47:66:54:06:97:3a:61:aa:34:70:05:
                    8a:19:a2:81:96:41:55:92:c4:0d:41:ed:07:35:c5:
                    8d:8c:90:65:89:23:d8:e0:0c:57:7a:d9:67:34:86:
                    1d:98:af:9c:ac:30:49:b8:8e:6e:d4:05:fd:e2:01:
                    9d:10:40:e0:bf:d0:68:10:64:5d:b1:a8:6b:1f:cb:
                    ef:81:bd:cf:0e:86:d5:8c:b7:86:00:d9:4c:9a:60:
                    dc:76:d4:fe:c7:7c:8d:02:89:88:3c:9f:22:f9:e2:
                    00:50:6e:de:e7:29:e1:31:08:80:03:ea:2c:68:ea:
                    1a:dd:00:58:4a:c6:12:ec:d9:58:69:69:69:ed:60:
                    c3:76:11:07:49:4b:04:33:28:63:e6:e5:a1:61:87:
                    b2:3f:3b:66:ff:87:5e:df:ad:6e:c4:02:13:0b:ad:
                    cc:e8:16:82:b3:29:c5:c1:89:f8:9a:74:d3:2a:15:
                    ab:e9:b1:e0:03:f3:6d:62:c4:88:cd:74:db:2e:df:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1C:AB:8E:D7:E1:95:DD:D5:62:45:DA:4A:FB:01:D5:3F:06:A6:05
            X509v3 Authority Key Identifier:
                keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:27:b9:50:5a:36:7e:02:f0:37:a5:8f:5d:17:2c:8c:3e:bc:
         53:e5:ed:81:31:2c:71:2b:ea:b1:3a:77:33:40:bd:83:4e:c1:
         e9:14:44:50:63:4b:1c:3c:c4:57:bb:53:f0:33:34:db:fc:8a:
         6c:87:c8:d7:b2:01:e9:9f:fe:8e:0f:f2:02:2c:59:37:fb:6c:
         3e:c5:0b:5d:82:c1:28:cc:5a:f2:80:53:23:e5:18:70:1f:9f:
         4f:6f:1a:1f:0d:42:2b:6c:e2:41:15:b5:67:e7:fc:c0:27:ca:
         37:74:74:38:a7:f9:16:fb:c1:7e:7c:45:1b:0a:81:75:ce:21:
         8c:51:83:63:64:a0:af:64:2c:4f:a0:f4:b4:2a:c6:64:64:4f:
         c7:1c:85:6f:e8:e8:fe:35:15:63:ef:bc:96:f1:27:56:71:17:
         12:49:72:79:99:00:37:d7:69:9d:7d:14:8c:09:65:2f:bc:75:
         b4:d2:67:22:f4:8f:c7:4a:a0:5f:39:98:b8:2a:b5:e6:41:b7:
         1f:ea:5a:05:5b:28:67:54:72:26:a0:13:36:0a:cd:5f:83:1a:
         b0:f0:2a:38:d9:f3:3d:de:92:86:dd:b5:9c:3a:5d:d3:7a:83:
         1c:a7:b7:c4:24:a0:71:de:b3:3b:cf:32:5b:5e:34:cb:c2:27:
         7f:77:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----