Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File:                     vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier:          c6eD9UYBjbpMhVRZGuYddGu3vO7VmR2bCWl74qyg8xA=
Subject key identifier:   05:68:A7:5D:1B:B3:CA:3A:E6:BE:CD:DC:20:BA:61:8D:AA:4F:EC:4B
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer:       /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial:       01962FABA0702D74A5EB53E94B1A6C402554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: b6NjfbPhaNhgb-BW4tqnY3lmaqA.roa (hash: pqBGjfGCyQz5ophzP0TT0DFUBi4mqZdJUqu+xhB6npw=)
                          2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: 99MPRA8vVPY53zb1bpGZPpP/BZFhKUgdq3y9p50q0kk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a0:70:2d:74:a5:eb:53:e9:4b:1a:6c:40:25:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=0568a75d1bb3ca3ae6becddc20ba618daa4fec4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:ca:b2:10:51:20:b3:92:1e:89:56:81:c6:
                    61:2f:ac:03:23:05:24:ea:98:8c:c9:48:b1:18:7a:
                    42:16:49:55:0a:a8:be:c5:fa:86:d5:55:36:f2:1f:
                    97:82:ff:14:1e:50:84:c3:e7:f8:13:f2:5c:eb:28:
                    06:f8:de:1c:6c:73:cc:a7:e2:a0:ce:59:cd:33:9d:
                    64:9d:cc:32:7c:92:92:9b:15:36:e4:21:3c:39:3f:
                    9e:d1:e6:5d:6c:70:1b:cf:0a:ce:b6:91:c0:6f:a1:
                    5e:ff:b4:97:06:4e:85:fc:c9:f0:2a:7e:f7:72:bb:
                    61:87:c7:7d:02:d3:30:01:d0:e8:8b:2e:7a:73:1b:
                    67:d9:84:7d:c8:be:06:ad:22:85:3d:af:7c:a9:8e:
                    fa:06:e2:86:cc:19:14:2a:f7:f0:af:4d:4f:01:66:
                    01:f4:8b:5a:5a:a9:47:10:4b:87:cd:31:18:26:0f:
                    92:1d:9d:7b:28:74:ec:3e:f0:9f:7c:4a:b5:93:c8:
                    d7:1e:c1:ef:27:10:75:a1:96:ea:86:b0:0b:f2:46:
                    00:a3:fa:98:09:bd:ad:e5:a8:cb:97:bb:65:e1:f2:
                    ba:1c:f9:e0:73:60:7c:a5:b1:15:bc:ea:dd:86:82:
                    05:b1:81:41:a4:5d:ad:65:b5:6c:83:44:d8:d9:68:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:A7:5D:1B:B3:CA:3A:E6:BE:CD:DC:20:BA:61:8D:AA:4F:EC:4B
            X509v3 Authority Key Identifier:
                keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:46:89:5a:51:98:a3:0c:af:8f:55:69:a5:1d:97:f7:8b:9a:
         a3:f7:93:03:54:74:4a:8e:ed:fc:fb:b3:37:5c:3c:02:24:81:
         a1:a3:fe:73:eb:3f:a9:74:60:ba:1b:3d:07:4c:d5:a2:36:da:
         8c:d5:45:6e:86:d0:21:19:dc:84:09:47:48:4b:f7:53:2d:a3:
         04:d7:b3:3e:cf:1d:13:d1:ac:e5:a0:bf:d5:3e:d3:ff:01:94:
         1d:68:a8:b7:e2:55:e9:87:3b:ee:57:55:72:32:a6:5b:e8:fd:
         a0:f2:0e:e2:86:91:7e:52:56:75:52:cf:6e:51:29:f0:59:76:
         01:b8:76:2c:d1:d7:3c:fb:3f:19:c6:e3:61:96:db:85:a3:c7:
         d8:10:ab:ae:a2:fc:08:96:e1:1c:5a:04:79:b4:ea:02:c5:a5:
         4d:cf:e5:ba:6c:a3:f8:ea:2b:d6:93:93:85:e9:e6:8c:be:e7:
         3d:b8:9b:ce:d3:e5:61:f0:72:61:56:5c:6c:ab:b9:5c:fd:8b:
         e6:94:34:0c:be:b7:63:ba:62:12:4a:4d:43:87:93:ca:d1:30:
         8d:9a:63:dd:ad:06:c4:aa:81:d0:f2:a0:5a:71:91:d2:a9:90:
         83:67:87:4b:0d:27:23:da:21:fe:5c:cc:a5:7d:02:d9:de:29:
         85:bf:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----