Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
File:                     VZe006Zk2swkk01I3RiOoY6PJ8E.mft (raw, json)
Hash identifier:          vvxzYPFvLEqdV4eDOtRm0SGG6//tfS8kSogDNuycBlE=
Subject key identifier:   E5:CD:01:E6:98:75:0D:D0:4B:71:99:C6:F5:41:92:01:65:A2:50:92
Authority key identifier: 55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
Certificate issuer:       /CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Certificate serial:       01962E98C8CF5563DB763D487D90EBC22164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: 8kfnwOtBgq_5_lkL_XTWGS_DW2A.roa (hash: R1ovdHUKN/hPy17oklKDPDEJOp9Mxs/OWbcQb2xo5Ek=)
                          2: VZe006Zk2swkk01I3RiOoY6PJ8E.crl (hash: cKyt8P9exZxB4jHW6X1g205PCM/MTB/q7BmRCBEJPE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c8:cf:55:63:db:76:3d:48:7d:90:eb:c2:21:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=e5cd01e698750dd04b7199c6f541920165a25092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:8d:ab:9d:21:f3:03:a8:6a:09:bf:71:57:
                    81:87:fe:48:d8:6b:28:41:42:3a:95:35:3f:34:02:
                    c1:bb:3c:67:78:53:3d:1b:f1:3c:f3:f0:e9:30:cb:
                    bd:74:34:47:cd:c6:c2:b2:a4:2e:b6:ec:13:82:11:
                    4e:51:1e:68:01:92:a6:4e:9c:06:2a:0f:50:ec:a8:
                    1f:a1:dd:c1:43:9c:45:60:9b:9e:94:86:c1:c5:57:
                    d4:08:21:ae:43:18:8c:f7:91:7c:4a:a1:33:08:5d:
                    8a:f6:72:1a:37:59:26:be:e1:99:5e:62:3a:0e:7d:
                    31:cf:ee:b9:07:93:59:91:7b:88:d5:b1:0c:3c:bf:
                    50:55:14:78:79:2c:15:df:cf:d5:65:e6:ec:9d:53:
                    53:a9:f7:f8:eb:86:7c:bb:ef:1c:4b:0d:3f:40:66:
                    a3:af:7f:39:25:73:d4:cc:55:bd:eb:bd:e6:21:49:
                    f0:db:42:63:3f:5d:1a:5e:31:ed:b9:63:d2:d6:1d:
                    66:27:76:9a:95:61:79:6a:e5:4f:75:c0:b8:67:7a:
                    c3:1b:53:70:31:48:4b:c5:bb:81:4a:16:72:6f:33:
                    aa:da:15:fc:a9:39:e3:15:76:4a:40:ab:da:29:8f:
                    61:1c:b2:ec:54:80:ab:c6:f4:71:ca:0c:10:8e:86:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CD:01:E6:98:75:0D:D0:4B:71:99:C6:F5:41:92:01:65:A2:50:92
            X509v3 Authority Key Identifier:
                keyid:55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:17:15:e7:93:c9:39:6f:a2:ee:01:d2:d2:ed:95:d3:73:
         8a:f8:50:b4:b3:a7:2d:13:15:67:ce:0c:8e:b4:83:5d:b5:a2:
         37:5f:8c:7a:c5:6f:cf:66:85:5d:13:ad:c0:f1:c1:fc:4d:74:
         85:eb:43:88:4f:ff:ff:8e:d8:75:de:bb:c5:fa:5d:34:b8:51:
         8e:f9:7a:8f:8a:af:fe:7d:05:45:c4:d4:35:3a:33:4b:21:00:
         e5:2b:1c:13:ab:09:1d:84:0e:20:7b:39:ef:83:65:e1:c2:2c:
         32:1f:c6:ad:e2:23:74:52:c3:50:f0:82:01:1e:a6:b2:85:69:
         35:7d:fb:1c:32:4e:00:0a:dc:18:5b:c8:34:6e:5f:c5:22:0e:
         93:07:50:ab:b2:6e:0b:ac:72:c7:6c:c4:e3:85:3d:65:27:8a:
         f5:dd:7a:79:0f:1b:24:9f:a7:61:db:4b:1e:84:7d:f6:80:3a:
         37:1e:74:a9:7d:eb:a8:6f:89:6e:1c:62:97:24:28:b2:8d:96:
         a5:53:6e:e9:ad:08:ca:00:5c:be:dc:8d:b7:ff:4c:0d:65:0e:
         bd:7e:1c:7b:cb:83:bc:6e:7f:ff:90:e6:bc:69:3c:7c:94:b7:
         0c:3e:26:71:e2:20:99:f5:21:0f:74:c5:08:70:fa:bb:17:f0:
         db:e9:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----