Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
File:                     vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json)
Hash identifier:          VULIrmBLHqlea0cZridsvDd44jZuTb7XR09Aly210bI=
Subject key identifier:   75:29:A7:67:23:47:04:B8:1E:DF:CF:B5:4F:59:48:27:98:1C:A3:74
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Certificate issuer:       /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial:       01962F7428B1E25F0F28B8B16B7C7486A514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
Manifest number:          11FA
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=)
                          2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=)
                          3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=)
                          4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=)
                          5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=)
                          6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=)
                          7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=)
                          8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=)
                          9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=)
                          10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: KUQTJl8UIelhn3CqLQsfmTfFudh8SasR0w0VpncsrjY=)
                          11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:b1:e2:5f:0f:28:b8:b1:6b:7c:74:86:a5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=7529a767234704b81edfcfb54f594827981ca374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:31:f9:70:c8:d1:b1:49:eb:56:97:3e:03:
                    23:95:71:3a:fd:15:0f:0a:1a:28:26:f9:45:0a:a1:
                    41:63:f5:23:63:b8:4d:74:d4:8d:39:40:a7:e7:e5:
                    3a:4a:a1:1f:f6:12:ca:c7:4e:88:08:d1:40:6b:a5:
                    c5:e6:b8:6f:52:97:f8:04:eb:af:e7:a6:59:91:5d:
                    ec:7a:2e:5f:af:53:b5:88:d9:74:33:48:72:ee:9b:
                    88:ba:02:bf:2d:01:0a:85:e1:8f:11:a0:8c:60:68:
                    75:12:9f:06:9b:2a:29:12:e5:a9:62:66:7e:23:63:
                    5a:a3:e8:94:af:45:17:49:40:5b:3a:b3:69:3c:0a:
                    bd:2d:0d:bb:ae:a1:75:a4:4c:21:ff:cb:4b:4e:00:
                    70:6b:57:e0:bf:fd:de:d1:3d:1d:cb:64:cb:cb:d5:
                    01:dc:38:df:78:1b:5c:f2:bd:16:1a:fd:23:f7:6a:
                    6d:49:1a:b7:3d:0e:9a:01:5a:43:8e:a8:48:e3:3e:
                    b7:c2:f1:2c:07:8f:34:9c:15:b3:12:12:4a:3e:92:
                    95:4f:61:12:3d:2e:2a:f6:f3:d7:34:d9:b5:49:3e:
                    21:22:22:98:49:97:8b:52:0f:4f:6c:8c:db:4f:13:
                    82:03:2c:01:67:ca:d0:f2:4b:8a:8d:8c:33:d6:9d:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:29:A7:67:23:47:04:B8:1E:DF:CF:B5:4F:59:48:27:98:1C:A3:74
            X509v3 Authority Key Identifier:
                keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:03:bc:cb:92:13:70:c0:d3:ee:85:f9:67:11:bf:aa:ba:84:
         3b:62:61:d1:a4:63:15:80:34:5a:13:e8:9e:99:47:29:9d:74:
         74:dc:42:cd:31:54:e4:64:8b:5a:82:b6:41:16:26:65:45:26:
         df:7c:9a:ee:ea:fb:e5:59:5f:8e:b9:fc:2c:57:6a:34:f1:53:
         94:f5:df:46:8b:f9:f4:8e:fb:ef:e4:5b:28:89:dd:8e:a8:f4:
         04:fc:33:ea:3c:2d:1e:7f:63:83:c3:b6:7a:73:a5:19:43:61:
         a5:0a:41:39:e3:89:4c:fd:d1:69:fc:e9:ff:f8:45:ec:ef:42:
         3a:06:f3:79:2e:b1:2b:07:fb:43:a6:2c:20:57:e7:53:15:d9:
         4f:4a:7d:30:81:11:24:e1:70:0d:d0:03:e7:b2:0f:72:b1:c7:
         c7:09:02:99:f2:9b:f3:8a:46:b3:64:6b:f5:95:0e:99:8e:8b:
         42:d9:81:c0:77:02:dd:72:5f:3c:67:bc:41:97:bc:c2:7b:7e:
         4b:aa:78:8d:8e:0e:f2:f3:50:2a:94:b6:1d:46:97:aa:77:8d:
         bc:ea:66:2a:bd:85:f7:8b:9b:bd:9f:2f:e8:af:1f:ce:b6:3f:
         f8:99:6e:97:f1:77:75:e3:7d:60:00:36:15:f9:57:38:61:e4:
         90:a7:b8:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCix4l8PKLixa3x0hqUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj
ZGM2NWMwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
Eyg3NTI5YTc2NzIzNDcwNGI4MWVkZmNmYjU0ZjU5NDgyNzk4MWNhMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjwx+XDI0bFJ61aXPgMjlXE6/RUP
ChooJvlFCqFBY/UjY7hNdNSNOUCn5+U6SqEf9hLKx06ICNFAa6XF5rhvUpf4BOuv
56ZZkV3sei5fr1O1iNl0M0hy7puIugK/LQEKheGPEaCMYGh1Ep8GmyopEuWpYmZ+
I2Nao+iUr0UXSUBbOrNpPAq9LQ27rqF1pEwh/8tLTgBwa1fgv/3e0T0dy2TLy9UB
3DjfeBtc8r0WGv0j92ptSRq3PQ6aAVpDjqhI4z63wvEsB480nBWzEhJKPpKVT2ES
PS4q9vPXNNm1ST4hIiKYSZeLUg9PbIzbTxOCAywBZ8rQ8kuKjYwz1p2CsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUpp2cjRwS4Ht/PtU9ZSCeYHKN0MB8GA1UdIwQY
MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct
NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3
LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAO8y5IT
cMDT7oX5ZxG/qrqEO2Jh0aRjFYA0WhPonplHKZ10dNxCzTFU5GSLWoK2QRYmZUUm
33ya7ur75Vlfjrn8LFdqNPFTlPXfRov59I777+RbKIndjqj0BPwz6jwtHn9jg8O2
enOlGUNhpQpBOeOJTP3Rafzp//hF7O9COgbzeS6xKwf7Q6YsIFfnUxXZT0p9MIER
JOFwDdAD57IPcrHHxwkCmfKb84pGs2Rr9ZUOmY6LQtmBwHcC3XJfPGe8QZe8wnt+
S6p4jY4O8vNQKpS2HUaXqneNvOpmKr2F94ubvZ8v6K8fzrY/+Jlul/F3deN9YAA2
FflXOGHkkKe4lQ==
-----END CERTIFICATE-----