Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          s8dJJfOc0n0Jxhh89HV3HnvOFSHwBppk/ZHnCsDPAYE=
Subject key identifier:   28:AE:FB:0A:C4:22:D0:84:9F:50:58:42:E8:60:86:34:42:CA:C0:8C
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       01962FAB797D69F013D71A9336F508E6FA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          1083
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (hash: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=)
                          2: mY0BBoyvYX1zorx6Y5fLdEd0tCk.roa (hash: 9FO5ETPVAJGxL50DKTbOEEcsQnQAs0IphL/Zj67O7Wg=)
                          3: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (hash: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=)
                          4: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: LO5+etgfHQAXiDIQV7CHvb8F1Hod4mf5hRDcJCV3YAI=)
                          5: ytBPPn31Mvouzht94_-1MzPeRlc.roa (hash: g/RoKeMhShlj3ifkf1JZfkpGbYRq1G/ecz/JNNRxoKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:79:7d:69:f0:13:d7:1a:93:36:f5:08:e6:fa:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=28aefb0ac422d0849f505842e860863442cac08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e4:b7:e4:97:ae:f3:93:16:d8:a7:ca:cb:cc:
                    b1:95:e5:bd:02:4e:15:8d:4f:c2:ae:05:29:f7:8c:
                    0d:55:96:7c:2f:a5:54:dd:e7:74:1f:32:32:c0:2f:
                    e2:6e:35:7e:07:8f:55:b3:d5:9a:c0:eb:a8:5d:66:
                    1f:13:54:87:84:a1:4c:e4:d1:20:07:ba:c2:ff:7a:
                    92:12:eb:7d:c0:f7:8c:a4:4f:72:58:ed:b0:dd:87:
                    63:09:90:26:a0:73:98:5c:77:b3:d2:12:9e:96:d1:
                    4e:40:d9:66:2c:b2:48:10:f0:7e:ac:43:f2:97:d0:
                    00:f5:a3:97:ca:75:8f:8e:50:a1:7e:bb:f6:7c:0b:
                    16:61:a2:77:8b:22:4f:84:ad:4f:88:b9:e4:c9:0b:
                    f8:16:0b:51:0c:a9:b9:54:33:c6:b4:98:e6:08:d5:
                    1d:22:46:72:1b:90:df:22:69:39:00:af:42:28:b3:
                    e4:a2:f8:82:7f:2b:97:a1:ae:dd:61:20:2c:f5:61:
                    7b:e8:43:55:f7:34:70:48:68:1f:92:83:32:81:69:
                    23:e7:b2:ad:23:e0:f6:fc:bc:2a:08:ed:3a:5a:df:
                    2b:8c:5a:8a:9b:e3:ea:77:aa:5d:7b:d9:ca:b0:46:
                    bc:17:d1:8a:c1:b0:1b:9c:c7:95:74:e6:8a:0a:69:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:FB:0A:C4:22:D0:84:9F:50:58:42:E8:60:86:34:42:CA:C0:8C
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:38:a4:05:fe:0b:8f:93:32:74:b4:e2:e4:2a:c2:ae:b7:
         23:60:f8:59:24:e0:6a:c8:7b:5c:42:f8:f9:af:85:9e:4d:ed:
         b8:d7:a7:0a:a4:32:c5:43:f7:5a:a6:b8:db:a9:73:60:29:87:
         4a:9a:5a:12:fe:05:96:a2:fd:56:85:cc:91:9f:7f:55:8e:f6:
         18:af:2b:58:b2:c9:28:d7:af:1a:7f:a5:33:bc:21:dd:d8:97:
         3e:c8:e9:69:26:6d:ad:49:26:15:e0:13:07:54:ba:22:17:5e:
         c1:04:16:d5:fa:d5:ff:f7:06:b1:59:90:59:a8:79:3f:db:e5:
         df:ae:e5:2a:e2:4b:29:61:79:55:67:d0:8d:63:91:df:29:86:
         0e:ff:41:ad:e3:fb:15:07:87:b2:10:b5:93:09:92:08:dd:94:
         01:ff:8c:6d:60:0f:1c:9a:e6:23:a0:f4:35:ef:59:af:9f:21:
         6f:79:71:0b:ea:88:94:a2:d0:58:c9:46:5f:c6:0f:d6:d5:33:
         53:81:66:82:a0:cb:cb:67:f5:c7:6e:0e:3a:2a:22:c1:74:f0:
         61:6a:75:80:c3:e7:e5:27:b0:87:8f:cd:89:e4:09:a9:07:31:
         29:34:0c:cb:25:eb:0e:9d:a2:26:b1:de:b8:65:71:43:4d:51:
         58:76:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----