Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          pD251GBJk78/WkNM5iW2XbcP8vBIRAhViLVen0aRU/U=
Subject key identifier:   44:69:C8:2E:7D:83:DC:8A:73:C9:33:07:4D:FF:C2:5A:46:66:CA:2F
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       01962E98746ED9E2440225B6CB46F59F071F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          044A
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: H6LrqNdMHhcEALGoMRwLW0+1Jdz63ztYHNn+Sg1MFSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:74:6e:d9:e2:44:02:25:b6:cb:46:f5:9f:07:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=4469c82e7d83dc8a73c933074dffc25a4666ca2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:5f:9d:9c:73:79:f0:f4:ce:30:16:38:0e:
                    49:92:dc:4f:8c:c8:e9:07:42:0a:08:61:d5:83:28:
                    0f:df:21:70:89:d3:35:c3:80:c7:81:90:a1:50:e5:
                    88:3c:0d:98:a9:1e:d6:01:32:a2:d8:6b:88:53:1f:
                    d8:61:79:10:f9:f2:7e:24:5d:28:c9:98:f0:07:f0:
                    0c:a7:1a:ee:f0:f7:19:d4:7e:89:55:84:ef:58:13:
                    4c:34:2c:3c:e3:b4:78:9d:17:19:fd:13:96:4a:34:
                    05:24:65:cd:20:2a:9f:d2:18:f1:ab:28:13:e1:fc:
                    82:fa:9e:55:c3:56:ca:ec:6c:62:e3:89:51:3d:fe:
                    7f:23:47:19:6b:6c:8b:85:1c:90:b6:09:a9:c8:92:
                    d9:e8:22:3a:9b:ef:b6:95:c8:2f:80:bd:b0:6c:d4:
                    57:9b:fa:94:ed:5d:e3:33:89:23:42:c5:60:6d:24:
                    a4:0a:a5:a3:4d:d1:d8:ac:ac:ee:3a:cf:de:35:4f:
                    58:6e:97:44:5f:e5:6a:ed:a2:c0:bc:db:78:c9:66:
                    72:1f:e3:69:fa:af:f2:30:d0:01:d1:93:83:86:c2:
                    5c:dc:97:64:fc:93:29:55:65:30:3f:9e:09:dc:87:
                    7c:42:d1:28:d3:17:34:e3:be:7b:e1:77:1a:f1:03:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:69:C8:2E:7D:83:DC:8A:73:C9:33:07:4D:FF:C2:5A:46:66:CA:2F
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ea:6f:74:c4:d5:69:84:16:f1:89:07:c9:d1:31:5b:ed:82:
         cc:5e:ea:76:b2:00:2e:78:bd:44:b4:ba:b3:2e:61:be:a3:91:
         f8:62:98:49:49:57:2d:39:6d:93:bd:4e:2a:e8:ca:d9:df:29:
         f2:54:25:5c:fb:62:75:88:01:6d:76:9e:3a:4a:43:87:1a:e0:
         9b:f5:f5:31:05:66:bb:32:04:9f:84:13:4d:1e:fa:3e:3d:66:
         b1:fa:6d:e0:ce:a6:cd:51:d4:c2:a2:94:da:48:1c:9e:d5:0e:
         8b:e5:30:ae:68:51:fe:e1:e1:53:4c:7a:de:05:24:49:4b:5c:
         62:d4:4c:35:b7:eb:0e:79:cd:5e:90:b6:73:3e:ec:52:a4:0b:
         13:58:57:fd:1d:6a:4a:b6:30:63:ca:be:13:88:2e:00:26:32:
         7d:dc:50:cd:f8:3a:dc:64:aa:9a:19:52:f6:c4:e6:45:09:4e:
         f1:6e:f2:d7:b2:b1:23:10:27:0b:b4:42:27:1e:99:c1:ac:c7:
         6e:73:18:63:1b:80:24:57:48:67:f9:45:c1:d0:64:79:7f:8d:
         18:aa:ae:6d:3d:44:da:3e:81:c7:8c:74:59:c9:f6:54:6a:15:
         54:4c:7c:87:96:c5:2d:eb:2b:8b:fa:55:74:35:2d:ac:b7:1e:
         f8:84:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----