Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          lr3OlYtduDXpInv8OSXq3tQACXxtWjdUX8GZvfie23k=
Subject key identifier:   00:31:C4:26:44:B6:47:F8:77:FC:14:2D:BA:E7:D3:87:3F:79:08:86
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       01962F3D8D97D92507122F0BDDEC6035B4EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          0484
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: iEBsMxSvSxhj9OmOIrmUmozaPwN9G+KPNhK/Qcpo3ys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8d:97:d9:25:07:12:2f:0b:dd:ec:60:35:b4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=0031c42644b647f877fc142dbae7d3873f790886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:bb:5a:b6:5a:08:0e:8f:9b:14:ca:07:1e:
                    84:32:91:8a:1a:02:5b:3e:ac:56:87:e4:51:f7:41:
                    82:4d:76:a2:9a:58:da:0d:da:25:e6:ba:94:0f:81:
                    5e:ef:1f:09:5e:86:26:b0:02:3c:a5:e6:dc:32:8c:
                    d7:ee:69:f6:e5:a3:23:8f:37:d9:81:ca:fd:87:ef:
                    89:9c:42:2a:c1:04:ab:4f:ac:5f:69:75:5e:c7:7f:
                    d4:e2:98:2e:cb:9c:7c:8f:8d:cb:d8:d3:af:d9:0a:
                    dc:e0:36:3d:1c:93:76:a1:02:0a:05:11:08:6f:2f:
                    5b:3d:cd:b5:9a:be:c4:d0:c8:0e:c6:29:ac:3d:cd:
                    03:1f:fd:cb:03:2f:08:b6:bb:b2:82:87:a3:16:45:
                    bf:29:b5:82:50:97:3b:08:ad:07:f4:7d:3e:bd:12:
                    54:f8:95:72:72:b6:f2:3a:1e:a2:46:f0:79:2d:00:
                    b2:97:9d:d5:15:d3:fb:6f:20:1b:73:49:75:d4:aa:
                    d7:61:bb:2c:7c:5c:73:08:31:10:2e:5a:a2:75:4c:
                    54:df:f2:25:2d:b5:99:fd:7e:6b:81:f7:04:6c:5b:
                    c2:22:e9:11:6d:24:68:4b:a0:20:b3:01:0c:ac:50:
                    14:21:e3:20:e0:9d:32:c3:0d:2f:a7:f6:8d:d4:d7:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:31:C4:26:44:B6:47:F8:77:FC:14:2D:BA:E7:D3:87:3F:79:08:86
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:49:14:91:6c:d3:c2:96:9f:e6:3b:51:95:56:69:a2:63:71:
         27:9f:77:dd:78:a1:65:66:5e:57:a1:1b:04:ec:4b:2d:c6:92:
         13:b4:7b:a1:10:43:0f:03:ec:01:dd:2a:78:b4:a3:7b:b6:79:
         53:75:d8:88:83:9d:8f:6d:34:bc:b5:b4:db:39:0e:aa:e6:69:
         ba:7f:32:39:c4:af:7a:e7:56:2f:cc:d6:07:95:58:e3:17:9e:
         a2:49:09:59:72:80:4e:cc:ea:e2:ec:69:1e:26:87:20:a9:4b:
         ca:0d:e5:e0:89:79:1f:9d:cc:60:95:42:32:09:45:b9:02:ab:
         59:38:ea:9a:b5:aa:cc:db:65:64:c4:d5:5e:1d:c0:91:a4:21:
         53:81:7f:f0:04:f0:18:99:e5:37:ba:c9:02:ed:66:c0:de:39:
         4e:db:d9:15:bb:75:c2:3a:2f:f5:73:b5:18:13:c6:bf:42:84:
         66:b8:ab:35:3f:af:9f:b5:ce:d5:1d:a4:d5:5a:73:65:3e:54:
         b1:9e:0a:f2:f8:65:59:68:bd:d5:7a:56:a1:97:0f:79:bb:c4:
         b4:ea:e5:7a:5e:eb:0a:45:80:c7:4f:b8:0e:d5:81:ed:75:7a:
         15:fa:81:07:8d:1a:16:38:dd:75:24:e9:5d:9f:22:d0:2f:a7:
         e2:40:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----