Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File:                     v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier:          9lAvdMk6iEbgQ1KykIE+yoiL5qznCRKq4xViOJlceAE=
Subject key identifier:   BF:54:7C:06:B1:39:53:E5:74:94:02:D9:E4:D7:8F:75:0C:55:09:14
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer:       /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial:       01962F06C8491D8F24935649C33A5B275AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number:          13C3
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
                          2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 4JniMrWZJYf+mmsqeG27FZFLwilK8mm9V2T8Uzxmshg=)
                          3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c8:49:1d:8f:24:93:56:49:c3:3a:5b:27:5a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=bf547c06b13953e5749402d9e4d78f750c550914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:6f:fc:cd:96:9e:52:fd:11:70:1c:89:a9:
                    c1:1f:01:b9:fb:a9:7c:dd:20:7e:03:82:a1:5d:e0:
                    cb:02:56:a4:d0:25:56:8f:7d:7a:08:b6:00:21:7c:
                    2d:45:29:65:cd:bf:8f:5a:3d:d3:12:33:ac:5d:01:
                    65:c1:19:ce:66:46:dd:9f:3c:21:de:70:d6:ca:f6:
                    62:2a:e2:cc:54:06:ac:59:0c:a4:b6:ff:65:1f:b2:
                    f2:5e:0e:e7:31:b1:d7:ae:27:e0:ff:bb:5a:1f:6a:
                    36:14:2c:c3:a2:24:91:e4:69:18:d9:5d:41:9f:6c:
                    3e:a6:96:e8:05:79:1d:75:37:51:a9:39:38:3b:e8:
                    33:8b:f4:9e:b3:5d:23:2c:32:ac:33:27:cc:4a:1b:
                    0e:97:21:f1:d8:a8:24:6f:64:90:67:88:04:4d:c9:
                    26:3d:f1:0d:ff:70:3a:5f:09:60:50:e5:80:64:62:
                    b6:a6:49:42:2b:ac:c7:94:09:d8:04:06:22:b9:15:
                    5d:f6:d6:5b:88:81:c0:aa:b1:ee:89:6e:5d:3d:d5:
                    5e:01:c7:3d:65:26:87:0a:38:19:fd:4d:72:dc:40:
                    f4:6f:d4:0a:9a:4b:13:df:46:d8:54:ad:e1:87:cc:
                    1c:12:31:28:cf:7f:50:ab:2c:58:94:95:c9:c3:4f:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:54:7C:06:B1:39:53:E5:74:94:02:D9:E4:D7:8F:75:0C:55:09:14
            X509v3 Authority Key Identifier:
                keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:bd:55:28:fe:78:b2:08:66:25:7f:b9:9e:7d:df:15:ee:
         2e:9b:d7:38:b2:40:70:91:29:df:0a:73:18:cd:a2:d6:cb:36:
         61:22:d9:d8:93:0f:72:32:69:cc:af:ae:df:ac:be:9d:ab:48:
         a6:2b:31:ac:b0:74:68:66:21:e5:26:ed:dc:e9:cf:05:81:a8:
         87:73:80:3e:5b:72:22:cf:11:af:8c:a3:92:eb:9e:e0:77:4a:
         06:2e:a0:6c:eb:24:97:be:de:cd:39:f3:b1:f4:fc:10:e1:d3:
         ca:1c:56:18:0a:be:73:66:5b:ff:d5:6d:22:42:b8:d2:f9:12:
         5b:ff:01:a5:5e:c7:17:75:a3:d4:ff:49:10:c4:95:91:66:e4:
         45:0a:81:aa:36:bc:cc:80:f0:a3:41:26:dd:fc:2e:d7:7d:9c:
         64:8f:67:94:13:17:6c:73:d8:82:3b:36:fb:46:da:2e:78:a3:
         66:4c:05:02:2a:32:00:59:e2:25:9b:45:4b:7f:83:7b:99:b9:
         96:13:92:fc:4b:a6:f0:91:27:f8:75:f0:44:cb:46:49:dd:f5:
         45:50:22:df:68:f1:d6:21:fb:d2:8b:0a:ad:78:00:91:7a:d3:
         1b:5a:97:c8:0d:49:95:a4:4f:02:a3:9d:7d:b0:b5:0d:f5:23:
         19:1b:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----