Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File:                     VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier:          sv0BCIptqgJKigcurokGLmcG0blBd2zaxuaLTJRphJo=
Subject key identifier:   4D:EE:2A:BA:84:0F:AF:45:EC:69:CB:0F:6C:3B:D1:90:67:9C:F2:4F
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer:       /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial:       01962E2B11071F840B34B232C971185883DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number:          101C
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
                          2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: gMDroV/E2Fyx0Oh+IRl0nB5Nztp0banz6p8rSW2X31w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:11:07:1f:84:0b:34:b2:32:c9:71:18:58:83:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=4dee2aba840faf45ec69cb0f6c3bd190679cf24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:fe:34:fe:a8:3a:37:3a:54:69:3b:d9:93:
                    07:98:10:7f:89:82:09:10:5d:40:83:59:97:df:88:
                    9f:9a:8e:d5:ac:97:2e:a9:ad:07:d0:a0:dd:14:21:
                    a2:af:cf:7f:75:8d:c6:e8:85:95:43:eb:d0:03:82:
                    0f:71:bd:e9:a4:96:a7:d0:b1:cb:76:ac:b0:26:b9:
                    89:2a:11:38:91:a0:b7:e3:5f:e0:b7:7f:c5:6a:f8:
                    24:4b:ea:0d:ae:81:39:76:58:f6:45:ea:8d:9d:27:
                    c6:bf:b1:0a:05:76:c4:06:05:f7:2e:87:c3:ff:ca:
                    6e:cc:db:03:ce:9d:2c:74:8c:a5:63:b0:25:65:ae:
                    16:4f:e7:e1:b5:ef:0a:17:b2:34:8d:00:38:db:3d:
                    3b:ce:24:6a:72:8c:32:17:b7:82:bd:89:26:ba:56:
                    cc:19:cc:bc:27:42:76:ea:d6:5a:27:10:08:f0:d9:
                    c2:68:e4:e1:92:98:ef:e2:82:32:1a:8d:90:de:96:
                    43:cc:66:98:d0:dc:e9:bb:84:41:0c:92:95:d9:40:
                    fe:65:12:6d:db:7f:29:d9:58:0c:96:39:bd:c1:70:
                    26:eb:74:09:f6:05:c8:d5:37:1a:72:0c:3b:9f:43:
                    71:43:e9:ae:f0:61:6e:a8:7f:e6:35:47:31:54:9d:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:2A:BA:84:0F:AF:45:EC:69:CB:0F:6C:3B:D1:90:67:9C:F2:4F
            X509v3 Authority Key Identifier:
                keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:82:37:4d:38:56:0e:d0:4c:a7:f0:b3:2b:a2:6e:aa:02:1b:
         b3:42:7c:c8:78:01:0c:4e:23:69:6a:ab:5a:81:99:b6:73:7d:
         92:17:e3:74:12:50:c1:43:62:44:b6:c9:83:f0:7a:c1:b3:c8:
         fb:71:81:7b:ee:7a:db:59:60:0a:a9:07:f3:bd:7d:f1:22:40:
         4e:a2:82:75:a7:df:1e:13:35:50:47:f4:9f:9c:5d:91:97:af:
         89:35:23:75:b3:43:17:53:bb:00:0a:d4:3f:e2:b1:c0:0e:c7:
         24:07:65:f6:b0:a6:c8:c8:9f:2c:01:87:96:ce:01:32:6b:67:
         f4:bc:25:3c:bc:6d:0b:a0:d8:f2:08:9b:6d:4e:8b:38:ef:96:
         fd:01:cf:d2:2b:4a:e0:34:ae:6c:e4:92:6f:d0:3d:ef:8e:c9:
         b2:ee:4d:1b:fd:3e:02:54:8d:c9:1f:4b:ce:9a:26:45:8c:03:
         d3:ba:72:a7:e8:53:c7:23:67:7b:2b:b5:50:45:11:7f:1e:77:
         2e:a3:dc:35:b9:6c:23:83:cc:28:8c:8c:ca:89:74:af:0a:00:
         c1:eb:8b:81:1c:a5:7c:dd:2e:0c:0b:5c:b6:bc:c7:2b:90:fa:
         cd:76:1b:ba:35:3b:7e:d2:52:d9:24:24:35:cd:26:ff:a1:a7:
         17:6e:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----