Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
File:                     vDWQTiTbDpkElaNEXnfRE27WGNc.mft (raw, json)
Hash identifier:          3PXAqMvnl+GCDz8oSsDCgGkRLH6pFzL3sjZuQcVAHqI=
Subject key identifier:   F4:CC:8E:B2:D4:0D:1E:FD:32:CB:F2:D5:F5:CB:17:8B:B3:E2:79:F3
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Certificate issuer:       /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial:       01962E2B16329EB4D4469E5FDC77701BA3D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
Manifest number:          0158
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: Tyq3VKoV7toHz4LXY-F6FRKUTFc.roa (hash: RHBupRRuz7kLI26AVDq35ZlOcZY/SSv2fkkTHG+8t+o=)
                          2: vDWQTiTbDpkElaNEXnfRE27WGNc.crl (hash: ieZ7wspjgIajVMz0FInZhK67h/dLnCGWBYzlFMlo5XU=)
                          3: wwWaYglYvidSGODSVzyMsR7AE4k.roa (hash: GL1hAfbFxjEmGpVQaoVaKQIBWoyn5obmjisb8HeWcZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:16:32:9e:b4:d4:46:9e:5f:dc:77:70:1b:a3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=f4cc8eb2d40d1efd32cbf2d5f5cb178bb3e279f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:63:8f:3a:2e:37:fc:51:42:dc:76:b1:83:
                    8e:b9:ba:27:c2:70:2b:58:71:66:08:62:3d:cc:62:
                    59:aa:d8:e4:6b:37:48:50:1f:07:c0:fe:5c:19:33:
                    66:42:b8:16:f7:f5:2c:b9:9a:6a:71:ca:ef:fa:78:
                    7d:fc:e3:89:37:d9:79:af:0f:b0:94:6c:a4:98:df:
                    5b:21:d1:1a:c6:3e:0c:7c:95:30:4b:65:53:a4:a7:
                    33:4c:c3:82:cb:6f:fb:3c:b6:ae:32:4e:23:32:23:
                    77:44:11:23:6b:a5:3f:23:dc:9d:c0:32:0b:39:3d:
                    a9:11:17:54:58:d5:57:77:b6:50:e8:4d:e2:ba:a7:
                    9a:54:32:7c:ba:15:d6:63:2f:71:16:b7:28:bf:5b:
                    07:5f:b2:c5:e9:cd:a6:be:05:8b:0e:54:b5:e8:fe:
                    a2:42:8b:93:cf:92:e3:cc:18:0f:5d:0e:1b:35:4d:
                    8b:ed:2c:00:f4:b8:4f:8e:fe:35:8f:a6:de:e7:a2:
                    1e:9a:04:b7:03:59:2e:dd:5b:07:80:af:4b:a7:0c:
                    75:a6:77:31:2a:65:3f:b7:4f:89:d9:60:60:e4:81:
                    78:63:b0:75:26:e2:2d:f6:2d:cf:eb:0b:3d:71:aa:
                    03:05:2c:d1:39:89:25:d7:fd:2d:48:45:a3:33:78:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CC:8E:B2:D4:0D:1E:FD:32:CB:F2:D5:F5:CB:17:8B:B3:E2:79:F3
            X509v3 Authority Key Identifier:
                keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:2f:c8:ef:75:6e:88:0d:c3:06:80:af:24:73:65:1d:19:
         fb:26:8c:e9:c0:05:e0:53:41:06:41:cb:18:7d:69:3d:f3:f3:
         5c:62:35:1a:05:32:49:cf:5d:42:be:0c:61:eb:89:bf:1f:9b:
         e9:0b:07:8b:77:04:55:8a:43:3c:a0:25:89:b5:9b:31:fc:f3:
         a9:2e:d0:44:9a:20:ba:3c:e8:67:9b:08:84:e3:15:83:d9:e3:
         f2:0d:2d:5c:ab:4b:08:c7:8d:91:fc:fc:5a:fa:71:3b:6e:f6:
         c0:b4:f2:ae:5a:96:6a:fd:6c:b1:c7:a4:4e:80:a8:d6:bc:59:
         b5:4c:d6:4b:65:e5:a7:94:30:f9:2f:d3:8e:fb:2c:81:72:e3:
         5e:ba:6a:4a:6f:18:5c:f2:aa:be:8f:1a:ac:f2:c7:3d:f8:96:
         2e:74:1a:93:c8:a1:38:b8:20:e6:2e:5f:d3:4e:e7:34:49:1a:
         0d:22:17:43:8c:0c:67:a5:89:53:92:fe:15:59:8f:43:32:f2:
         8a:7c:ce:33:51:2a:d5:63:63:89:d9:60:6c:0d:77:52:4b:9c:
         d2:9c:53:43:f6:6b:4f:c9:cb:e3:e4:14:7e:b1:6f:44:55:31:
         b3:a9:a0:89:db:89:e2:e7:ef:7d:b9:b7:0c:71:aa:fe:c2:c5:
         f2:5d:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----