Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File:                     VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier:          UOet83ww/pw1b5/p3ZjffdpNr8JuXuT1La5DAasIJl4=
Subject key identifier:   81:E6:89:78:E4:21:87:23:C3:08:33:E5:BC:92:09:1D:31:CB:DA:8E
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer:       /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial:       01962DF413C2505AF78E86B8524672B2F321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number:          08AE
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: C1sfui3_F27EORD1FFTIF_PXuck.roa (hash: L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=)
                          2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: KJLFDegKJ1sxiOs0MiiZbk6/9ohv53YDFahC6KuN89E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:c2:50:5a:f7:8e:86:b8:52:46:72:b2:f3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=81e68978e4218723c30833e5bc92091d31cbda8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fa:1b:b8:57:2d:d5:6e:2e:b8:88:86:2b:bd:
                    a5:7a:e1:53:90:49:fd:2d:89:8c:12:1d:c8:ea:f1:
                    f1:35:25:86:c0:90:dc:a3:04:33:c6:4b:33:75:a8:
                    fa:9b:0d:3c:fe:11:32:cf:2f:ed:b8:9e:ec:d8:e8:
                    4d:98:50:9a:eb:af:40:79:e3:35:fa:66:51:d8:4a:
                    7f:d8:52:e2:f1:8a:b2:65:a0:40:a4:a7:68:d2:cf:
                    51:91:4c:ac:0a:32:b4:f2:47:75:70:05:83:7e:97:
                    c1:b4:ac:de:a6:51:bb:a6:29:ec:5e:27:fa:fc:ad:
                    2f:7b:4d:70:67:0a:0c:cf:95:cc:a2:80:9c:2c:a4:
                    65:5e:a9:e5:5f:d0:6b:51:00:ee:64:ab:90:e6:ed:
                    9b:13:b4:2f:26:63:56:09:f7:36:30:9e:3b:32:77:
                    40:13:20:5b:26:3c:af:68:89:4f:09:d0:6a:72:7c:
                    98:d4:36:04:05:46:88:3a:61:50:a6:06:2e:57:06:
                    9a:3a:39:57:9a:a5:a2:7a:85:ec:41:35:c9:ce:eb:
                    83:b2:59:1c:0f:30:b7:2c:6d:51:18:11:52:90:dd:
                    95:f8:a7:8f:cd:13:fe:8b:80:cb:fe:59:ed:fc:36:
                    fd:11:b1:de:33:b2:2c:46:f7:cd:c5:04:19:ff:88:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E6:89:78:E4:21:87:23:C3:08:33:E5:BC:92:09:1D:31:CB:DA:8E
            X509v3 Authority Key Identifier:
                keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:98:c0:11:99:a0:d3:f0:43:63:53:22:35:7a:a5:f5:86:fd:
         d4:e0:1a:f8:3e:93:0d:77:62:af:be:c0:f7:58:ad:e9:c1:22:
         df:c3:dc:8f:dc:74:63:e8:1d:67:2e:2c:d7:3c:92:a0:26:a6:
         3c:fa:a3:ca:85:47:f6:b3:37:3d:7b:b9:36:56:a3:cd:7f:87:
         10:6d:21:4e:e5:c9:42:3d:ca:4c:b6:43:eb:ca:5d:ca:d4:d8:
         e0:f2:83:2f:32:1f:c5:07:9b:dd:ed:68:32:02:23:c1:ad:2e:
         e2:20:ca:60:55:93:75:44:35:f8:28:71:92:42:75:27:20:8c:
         d5:72:2e:7f:cd:10:f4:06:39:11:88:1b:91:82:9a:2b:dd:34:
         15:d4:6a:00:40:c0:79:d5:e1:49:f9:fa:11:3f:15:cd:b8:22:
         30:0c:c3:c3:07:e2:fc:d2:ae:62:61:3e:53:7f:99:c4:15:14:
         8d:97:6b:7d:6e:6a:65:71:14:f9:43:28:77:6c:c3:ec:e5:89:
         fd:db:23:d1:03:25:a9:63:05:9e:6d:97:50:73:25:eb:12:72:
         22:95:97:26:c3:e1:43:3b:cd:83:29:5c:23:b2:96:5b:cb:2c:
         7b:72:9e:3a:71:c5:d3:fb:c8:7f:d0:a3:42:aa:40:66:eb:56:
         57:50:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----