Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File:                     VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier:          LapG2ZJO9jK1KWBaIV8u/xh7VOE4JFNw3vQnnLWNpGU=
Subject key identifier:   89:35:F1:32:C5:15:88:2D:2C:9D:DA:78:94:04:FE:C8:C0:88:F4:1E
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       01962DF3C2693B1D18D4B243BC5F1120A8C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number:          0968
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 09p6kbowRqEqmGsIE-X77ssBdvE.roa (hash: aNbCunzaHj8fcPNQtO0tqEMAuZSFNh6caJLvvgjcZUM=)
                          2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
                          3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: BHWAGJPV1DykuPphBgWrVzaGyxeEBh4KCAjHomXMUH4=)
                          4: pH__rL1RVjxMSUxHKGG7zRUGK1o.roa (hash: jLPbh/4LV4yxXAw9vyooJrfcnHymRshQqR67+HD469o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c2:69:3b:1d:18:d4:b2:43:bc:5f:11:20:a8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=8935f132c515882d2c9dda789404fec8c088f41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:dd:d1:d3:9b:f0:d1:94:0f:73:e9:44:f5:
                    9d:42:3d:bf:92:2e:e4:d1:3a:7e:21:34:61:04:bc:
                    85:97:bf:9d:eb:e9:9f:1b:d3:e5:78:80:df:10:e4:
                    f3:ca:5e:7b:c5:c7:b6:1a:0b:0e:00:03:22:4a:c3:
                    dd:a9:3d:04:0c:44:c8:b4:53:8e:42:c1:86:99:d2:
                    dd:9f:01:a0:5b:73:66:c0:5b:7e:18:6b:9f:28:71:
                    dd:6f:25:79:94:39:4e:89:02:c7:d6:17:66:64:4c:
                    a3:ee:0a:ae:50:e9:bc:5f:3e:65:a1:4d:39:5e:b9:
                    c2:27:13:d5:d6:bb:be:6e:8b:77:b6:f8:16:9e:92:
                    7c:80:9d:19:af:6c:a6:e0:91:e9:82:dc:11:35:4c:
                    b3:24:36:a9:97:78:40:7c:ff:6d:86:7f:c3:a9:43:
                    04:20:78:16:f5:11:69:46:79:8e:93:cb:ab:a4:aa:
                    22:1b:bb:b3:a3:a0:20:e4:f1:33:14:f6:97:2d:d8:
                    ca:c9:d5:f7:90:03:e0:65:c4:da:a2:a6:c3:64:14:
                    63:06:87:29:72:f2:d2:9e:a8:4a:93:cd:fa:98:9b:
                    75:95:d5:57:f1:91:25:b9:a4:66:d6:5d:70:3b:77:
                    6a:b0:f0:85:3c:0c:8f:a9:52:e3:50:05:a2:ec:e5:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:F1:32:C5:15:88:2D:2C:9D:DA:78:94:04:FE:C8:C0:88:F4:1E
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:53:5e:21:57:68:03:3a:27:aa:ef:29:7b:e9:ab:cb:cc:27:
         f5:c4:06:61:b1:6f:f4:c5:ca:46:71:1e:0c:7b:84:65:b9:28:
         5f:65:45:41:2c:ad:a4:1a:a6:a0:d2:b5:c4:bf:88:23:23:c0:
         80:70:d2:a4:a4:c5:dd:bf:0a:3f:59:09:2a:29:cc:c4:e4:e2:
         39:3a:c3:9a:b5:d5:4e:67:a1:65:5d:da:6f:b9:4a:13:cb:f2:
         43:2b:f1:95:87:bf:f5:90:be:52:b3:1e:8a:06:45:4a:68:bf:
         4c:47:a1:96:72:35:27:ae:e9:66:b3:60:e6:eb:e7:44:ed:fe:
         f0:d8:6c:5b:0d:df:49:2d:bc:eb:0c:9f:66:e9:3b:3e:63:48:
         95:ec:fc:3e:ee:02:37:56:10:c3:32:5e:26:4a:7b:d2:d5:ac:
         63:36:e9:65:58:ab:e2:4a:17:07:42:25:df:7b:44:7a:2f:99:
         8e:87:87:fc:56:51:ba:1e:88:b5:46:e7:7f:05:6b:f7:27:ec:
         3e:00:9f:e2:b4:c9:9b:c4:13:e6:06:7b:be:3e:7b:da:d2:eb:
         6c:25:55:9b:4a:7f:8b:bb:b3:9a:5c:58:fb:9b:c9:ba:90:66:
         3a:cf:2f:cf:9c:07:0f:50:e0:73:89:9c:b6:d4:d6:af:2a:79:
         6b:7f:cb:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88JpOx0Y1LJDvF8RIKjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3
MDliZmUwHhcNMjUwNDEzMDcwMTExWhcNMjUwNDE0MDcwMTExWjAzMTEwLwYDVQQD
Eyg4OTM1ZjEzMmM1MTU4ODJkMmM5ZGRhNzg5NDA0ZmVjOGMwODhmNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Pd0dOb8NGUD3PpRPWdQj2/ki7k
0Tp+ITRhBLyFl7+d6+mfG9PleIDfEOTzyl57xce2GgsOAAMiSsPdqT0EDETItFOO
QsGGmdLdnwGgW3NmwFt+GGufKHHdbyV5lDlOiQLH1hdmZEyj7gquUOm8Xz5loU05
XrnCJxPV1ru+bot3tvgWnpJ8gJ0Zr2ym4JHpgtwRNUyzJDapl3hAfP9thn/DqUME
IHgW9RFpRnmOk8urpKoiG7uzo6Ag5PEzFPaXLdjKydX3kAPgZcTaoqbDZBRjBocp
cvLSnqhKk836mJt1ldVX8ZEluaRm1l1wO3dqsPCFPAyPqVLjUAWi7OUXZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk18TLFFYgtLJ3aeJQE/sjAiPQeMB8GA1UdIwQY
MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt
NWRmY2NkNjFhOWIxLzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx
LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFNeIVdo
Azonqu8pe+mry8wn9cQGYbFv9MXKRnEeDHuEZbkoX2VFQSytpBqmoNK1xL+IIyPA
gHDSpKTF3b8KP1kJKinMxOTiOTrDmrXVTmehZV3ab7lKE8vyQyvxlYe/9ZC+UrMe
igZFSmi/TEehlnI1J67pZrNg5uvnRO3+8NhsWw3fSS286wyfZuk7PmNIlez8Pu4C
N1YQwzJeJkp70tWsYzbpZVir4koXB0Il33tEei+ZjoeH/FZRuh6ItUbnfwVr9yfs
PgCf4rTJm8QT5gZ7vj572tLrbCVVm0p/i7uzmlxY+5vJupBmOs8vz5wHD1Dgc4mc
ttTWryp5a3/Lvg==
-----END CERTIFICATE-----