Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File:                     VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier:          z1E4i/3B+E1DcJWSQxZjuS7fmL4xvgDyYuoLYPM88+g=
Subject key identifier:   AE:10:CB:F0:3D:D9:B6:81:4F:50:BC:B3:6F:EC:9C:59:82:66:2B:F9
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer:       /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial:       01962DF3BE825618F0D8880FDD451474F1E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number:          1A
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: 9VNYT4nZ5PbU3I+n6YcFNWyshdUYc1Bt3v50E/Wg8Wo=)
                          2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:be:82:56:18:f0:d8:88:0f:dd:45:14:74:f1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=ae10cbf03dd9b6814f50bcb36fec9c5982662bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:7c:2d:ff:b2:6b:63:66:d3:03:c6:90:a3:
                    ef:8a:52:8d:3e:4f:1f:4f:3a:a0:dd:58:22:10:a1:
                    75:9c:9a:ca:6a:da:c3:9e:d4:1a:b4:6f:38:59:07:
                    77:85:77:fd:96:e2:37:18:29:41:36:b9:cc:b6:43:
                    c2:af:19:c7:34:44:fa:6e:54:c2:dd:4c:fa:f5:f3:
                    c0:e1:ec:a8:05:4a:b8:cd:20:a4:12:cc:ab:9f:62:
                    af:c4:d1:5f:69:44:e1:e6:89:53:36:02:33:fd:d6:
                    06:51:61:43:51:b7:31:ca:c4:ad:dd:13:73:40:77:
                    01:8e:d2:e8:bb:b9:ed:c1:90:ab:a3:24:dd:62:9c:
                    b7:f2:5e:9c:ac:52:58:c8:aa:82:b4:48:74:0b:28:
                    6e:5c:3e:b9:49:a8:72:7f:3a:57:c0:27:70:3b:25:
                    8f:c9:69:8e:71:7c:1a:53:e6:4e:7c:b1:10:1d:6f:
                    e5:f2:af:12:ba:eb:f4:01:f5:3a:ff:e1:c3:0b:7b:
                    37:87:5b:5e:16:8c:cc:1d:de:91:2a:d0:29:71:c1:
                    b9:27:8c:31:28:10:13:8c:6e:a4:d4:d2:c0:ea:ea:
                    04:b1:87:7a:f0:52:bd:0d:e6:a0:7f:09:f1:11:12:
                    bf:63:12:1c:02:57:69:f4:73:20:8c:c0:32:ea:3d:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:CB:F0:3D:D9:B6:81:4F:50:BC:B3:6F:EC:9C:59:82:66:2B:F9
            X509v3 Authority Key Identifier:
                keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:7e:69:47:22:f8:3a:d6:17:8f:4c:71:9a:1e:d7:7f:15:
         ef:7f:3d:26:d6:e3:4e:9e:cb:fb:7b:97:74:4b:46:82:01:d3:
         0a:4d:a8:46:1b:17:e1:53:d4:95:75:cb:8c:16:18:6b:46:0f:
         e4:f4:f2:6a:a7:62:52:a9:ae:30:19:fc:be:62:c8:ff:14:39:
         8b:70:70:23:74:e0:dc:a0:12:58:7c:8f:2f:09:11:40:6c:00:
         ad:7e:d5:a1:a6:99:92:29:b9:7d:f4:1e:0b:be:95:61:76:56:
         a3:cd:a7:19:c9:dd:1e:4c:94:6b:3c:1e:36:e6:4a:ea:72:8a:
         55:13:89:1a:b6:7b:a9:75:49:97:70:28:51:b4:dc:a8:81:32:
         26:56:be:0d:e1:27:9a:a2:ec:fc:3f:91:94:a4:86:bf:06:08:
         4d:3f:61:fa:b3:1f:52:fe:d4:0b:3b:22:cb:73:a2:7f:2e:ef:
         b7:68:af:8f:5c:28:91:55:37:8d:6e:2a:13:7c:f2:e1:6b:cc:
         0f:6d:b0:67:ce:5c:91:f8:a2:5a:8a:88:d3:5c:dc:e8:d2:8d:
         7f:58:7f:e3:7a:2a:db:fa:c0:71:a1:60:0d:09:70:49:de:80:
         92:2d:3f:10:e1:5c:31:0c:1c:12:6c:46:e3:58:4f:3f:f2:7e:
         ea:ca:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----