Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File:                     VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier:          dj+SvzP12pqpGEI8+v63chraNymfUqkyOm3tPrHIhTY=
Subject key identifier:   B2:4F:79:97:D7:A8:A5:F9:03:90:8C:70:10:05:3C:09:06:51:88:6F
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer:       /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial:       01962F070479A271BFC31F208F08ECB70A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number:          06E6
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: ykrQZmH4eCxOTv3yC0VsHp3yiCDtxCrhzzftQfq8kDg=)
                          2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:04:79:a2:71:bf:c3:1f:20:8f:08:ec:b7:0a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=b24f7997d7a8a5f903908c7010053c090651886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:75:6d:c1:c9:e4:94:7f:76:74:64:ad:6e:
                    3e:f5:c0:c9:18:da:b2:ef:44:9c:20:16:57:73:16:
                    c0:cb:20:0f:88:24:77:81:d6:8e:80:a2:93:73:39:
                    ad:9f:50:ed:91:8f:a1:13:c7:f9:fc:13:57:78:e3:
                    7f:db:14:79:32:85:b6:5d:e5:2c:97:b0:da:62:be:
                    d9:7d:e7:5c:53:30:29:24:67:58:4d:0c:a7:49:b2:
                    1a:e7:5b:ea:72:ba:de:39:eb:ac:63:2b:33:9f:f4:
                    ee:19:d2:82:5e:82:81:e9:3c:a4:3e:2d:fc:56:f6:
                    c3:72:fe:37:7c:29:5d:17:d2:23:6b:1d:9b:23:55:
                    ef:53:d2:8b:fd:d0:6d:3b:93:f7:62:33:18:5b:49:
                    98:14:c0:61:75:a2:ad:ec:86:cd:7c:3d:d2:8c:34:
                    59:05:d2:a6:97:67:3f:6a:4f:6f:67:f5:93:13:aa:
                    3d:fe:da:e8:a1:83:da:bc:ad:02:c2:42:06:31:f5:
                    7b:8e:20:9c:20:48:9d:e3:1c:cf:92:fe:a8:3d:ac:
                    51:10:46:59:8e:b8:be:9c:6c:03:31:0c:df:09:23:
                    60:7d:9b:e7:ef:fc:b1:1b:02:37:bb:50:95:f2:8e:
                    1d:78:2c:f0:bb:4a:58:5e:30:66:7e:07:66:8d:4e:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:79:97:D7:A8:A5:F9:03:90:8C:70:10:05:3C:09:06:51:88:6F
            X509v3 Authority Key Identifier:
                keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2a:0b:b0:50:c4:17:71:bf:0b:99:6e:c6:e7:ca:f4:38:a3:
         df:8b:c4:9b:5f:1e:22:87:41:18:b6:a1:78:38:2f:f0:a3:99:
         ae:b7:86:e2:6f:8c:64:39:e9:88:76:26:14:ef:90:45:cf:32:
         f4:c5:d0:22:6e:e8:d6:23:77:8d:81:8c:62:33:f7:16:fb:cd:
         bd:09:84:85:b5:2b:f6:92:6f:1d:f8:17:c0:8a:1d:6b:36:d5:
         20:43:33:19:0d:f0:64:c4:24:a1:a3:f2:90:44:77:e0:0e:86:
         04:2f:5a:4e:bc:7a:d6:a1:8f:b0:c7:3a:4a:47:11:44:17:97:
         28:47:f7:4d:43:8f:34:86:bd:39:75:65:9c:cf:12:ee:f4:85:
         9f:29:49:da:d0:6c:b6:ca:10:1a:e0:dc:c2:39:48:06:8e:0a:
         5b:4b:5b:4b:00:5b:4b:47:bd:67:07:9c:5e:85:9c:18:7f:a2:
         eb:22:fa:0f:2c:0a:1d:96:d8:03:ca:01:4f:b9:44:bb:32:a8:
         7c:58:b8:6a:1b:c9:91:32:60:ee:54:c6:1f:81:a8:01:9c:7b:
         79:33:0f:7b:78:db:9a:c6:ff:74:20:1e:50:11:58:c3:07:4c:
         a7:50:2c:24:22:01:15:c6:a8:0c:91:80:41:68:af:fd:21:a6:
         ca:3e:3c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----