Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File:                     vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier:          I9yoxZzJMioJyOT55E+/+ProVK7QuFUg+rgnLn8aBvA=
Subject key identifier:   DB:D9:2C:1D:1D:8A:0C:D6:67:DC:D2:56:EB:C9:B2:53:8F:25:EF:25
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer:       /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial:       01962F3DB59FB58D5DF630A9F0896B6CD64D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number:          1440
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
                          2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: 8uvVaR7tIk5fs6gkrw6pq41gRxH+U/lXo/JE/fnG1BI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:9f:b5:8d:5d:f6:30:a9:f0:89:6b:6c:d6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=dbd92c1d1d8a0cd667dcd256ebc9b2538f25ef25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:a8:2b:a6:63:75:d5:8b:f4:8d:8e:e7:8b:
                    87:c0:fa:ae:2c:86:47:23:12:dd:88:b9:fc:80:bf:
                    66:85:a1:77:fa:98:ec:20:d7:1d:43:b7:2a:35:c1:
                    4e:be:65:c3:8e:d4:97:35:3d:b4:00:ec:90:33:a9:
                    9c:d1:1e:6b:23:45:c2:a0:0e:93:a0:bb:96:e6:11:
                    ee:e3:09:a9:20:45:9e:23:6c:b0:20:c1:cc:36:a6:
                    f7:63:74:42:80:5b:42:eb:a9:d9:58:9b:57:70:0f:
                    f3:b1:72:b7:14:fa:8c:62:9f:30:b0:4f:38:e7:20:
                    5b:0f:65:56:6b:37:db:12:c6:66:9c:88:cc:0f:a2:
                    f4:21:6d:98:6c:09:23:77:b7:59:a3:ea:e7:e7:d8:
                    19:ab:2d:f8:fa:88:5c:a6:a5:ee:e1:01:40:08:c2:
                    51:a3:23:4b:0d:5f:49:5b:bf:66:92:78:7b:68:0e:
                    02:e2:45:75:46:a7:8d:a4:9f:28:4f:67:61:c0:fc:
                    28:e3:16:32:b9:4e:ca:c0:b7:b1:12:0b:86:76:ce:
                    62:1d:e5:c6:62:83:0d:6f:7b:9b:78:9f:4c:77:f3:
                    c2:61:f8:c7:26:c1:2e:1e:d4:63:7b:8b:22:38:de:
                    8b:ce:a6:84:74:b7:65:7a:7a:ac:4b:24:14:c1:6a:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:2C:1D:1D:8A:0C:D6:67:DC:D2:56:EB:C9:B2:53:8F:25:EF:25
            X509v3 Authority Key Identifier:
                keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:87:7a:98:a7:79:1c:8d:b5:2a:bb:f5:d8:70:f3:35:ce:
         54:33:4e:e4:82:6d:29:aa:ec:b1:4b:91:01:b4:2e:c2:8f:f0:
         ee:3a:5d:86:3d:58:4b:a6:bb:07:17:42:a2:54:f3:5c:d1:f9:
         14:18:56:d8:d9:16:8b:90:9e:f6:74:79:fc:bb:65:f4:e1:3d:
         79:6b:3b:d6:8d:1e:3d:0d:a7:ec:37:6b:58:8f:b7:8b:52:41:
         50:69:96:b5:70:f5:fe:b6:99:39:be:53:e5:2e:87:a8:30:3b:
         9c:5c:d5:0e:dc:73:83:c6:d3:48:db:f0:5e:57:30:bb:20:50:
         5f:25:9f:96:7c:24:8f:79:70:2f:d9:29:7f:ad:41:4c:ce:45:
         85:fd:77:b8:c8:07:c4:ef:92:a7:3f:4a:ef:ca:66:96:50:b2:
         8a:cd:6f:92:46:be:93:c2:45:d2:86:90:cd:4a:a9:e2:44:9f:
         ce:95:7a:3e:f2:6e:81:e8:1e:40:a4:51:2d:48:28:e4:7b:62:
         5c:8f:e8:ba:6d:e6:16:54:be:90:b9:fb:c8:6f:b7:12:52:29:
         05:97:74:a7:f9:06:70:cb:69:cd:7c:34:7f:8a:e8:58:ec:49:
         1d:63:e3:da:4d:00:4b:54:35:b5:bc:15:b5:26:df:8b:0d:23:
         46:c7:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----