Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File:                     vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier:          oQwqKZoO+3wfuUK0zOnIEoFX0P8UWy04JxGdj4Zhj7g=
Subject key identifier:   3E:13:12:7B:CB:EB:5C:86:EA:6C:08:2A:C3:EF:5C:B8:2A:14:68:DD
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer:       /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial:       01962E99B5205AB3902965D0F039FF202762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number:          05D3
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: R2EJkhjWYKJyvjAGQuVDKHAMTiT852Rue9cdkra/aG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b5:20:5a:b3:90:29:65:d0:f0:39:ff:20:27:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=3e13127bcbeb5c86ea6c082ac3ef5cb82a1468dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:24:12:ad:fc:ee:eb:c8:32:9c:72:71:8e:
                    2f:77:9f:f8:08:28:be:2b:bc:43:0d:c8:1c:ac:95:
                    18:56:0d:38:06:ab:c9:1a:f3:7c:6c:fc:9e:71:f3:
                    41:f4:a8:2a:13:26:4b:ad:35:d4:26:01:9d:41:89:
                    9a:62:cb:6c:e6:b2:3b:42:5e:93:2e:27:50:a2:1d:
                    35:0b:ed:d8:da:90:fe:59:ce:70:63:ca:b7:47:e5:
                    3f:18:25:13:ea:e1:6c:bd:24:57:2f:84:03:58:e4:
                    87:d5:b2:d4:a4:60:9c:d3:5e:b5:55:32:42:b2:0e:
                    a0:f0:2a:3e:39:04:68:20:22:02:b1:5d:8d:bc:22:
                    46:1f:59:2e:2e:e1:d4:46:6c:82:a6:47:59:57:6f:
                    17:12:94:d5:6f:f7:aa:03:5d:f3:8e:7e:ad:e9:ec:
                    dd:9b:98:31:5c:a9:f9:d2:d2:92:a6:d6:1e:0b:3b:
                    3d:77:57:cf:15:5d:15:55:5e:5d:dc:18:96:b9:df:
                    f4:5d:2d:50:cb:ee:66:8d:24:92:91:62:15:0a:8f:
                    8f:8b:e4:70:56:e7:ce:a8:39:58:cd:f9:15:40:c1:
                    86:78:33:ab:a0:fb:19:e0:7c:cd:23:77:77:33:40:
                    3e:74:1d:a7:43:c6:53:7f:56:e9:66:8f:43:0c:40:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:13:12:7B:CB:EB:5C:86:EA:6C:08:2A:C3:EF:5C:B8:2A:14:68:DD
            X509v3 Authority Key Identifier:
                keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:27:94:52:62:95:5d:1e:39:45:b6:de:37:e0:89:40:34:
         ad:5e:ab:3d:90:42:53:c9:49:45:90:ee:9b:53:e7:46:3e:5a:
         b0:5d:9d:08:9d:4b:86:35:60:b4:95:d6:bc:48:8f:fe:f1:a1:
         a7:cc:c5:13:4f:52:ca:fb:6c:e4:cb:4f:cc:6b:a6:fc:61:84:
         1d:0b:ba:22:ae:ab:15:01:57:fb:15:11:f9:93:95:c7:a5:ee:
         2c:6f:2d:2d:da:00:c7:d4:16:4b:a4:bd:d0:e9:6f:6e:f5:a4:
         a8:52:c7:c2:ae:9f:98:fc:a5:07:03:a7:f9:02:04:b7:06:cd:
         ea:89:d9:1e:fd:1f:3a:3b:38:0e:1c:c9:08:6b:99:dd:e1:48:
         4d:dc:1f:aa:42:c5:a9:c9:7a:6e:23:84:fe:20:59:8a:5b:dc:
         a7:50:2b:1b:6d:9c:b1:01:f7:a2:13:40:8a:6d:7e:84:ca:17:
         a3:27:99:4b:cc:74:c3:58:d8:76:f9:b4:e0:0d:38:a7:aa:02:
         51:65:75:02:a1:ee:13:36:b2:80:07:d8:be:cf:f0:5a:34:b5:
         75:4d:66:e4:01:22:f8:d8:a0:04:c6:e0:aa:f1:be:be:9c:62:
         e6:f1:c8:84:a0:9c:82:fb:98:29:62:52:3a:d1:83:ac:6e:6c:
         b3:1f:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----