Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File:                     VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier:          Mja2y5u2T4qunZ/U1cb8Lw1vFoTYKwhRGXVmVoPLHXs=
Subject key identifier:   16:51:C9:4C:8C:EA:AE:D5:DD:E5:34:7B:E9:CE:CB:98:32:9F:C6:4F
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer:       /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial:       01962E98DB7063511B704DFC3F225640E6B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
                          2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
                          3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: 2JhDhtwAvo4bmwJTM3n5h5tmK/K3cupRdIai+KXU17I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:db:70:63:51:1b:70:4d:fc:3f:22:56:40:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=1651c94c8ceaaed5dde5347be9cecb98329fc64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:72:68:a2:83:c2:3d:97:70:43:1a:10:0e:9b:
                    e8:71:8c:fe:e0:6f:c7:09:8e:a2:be:bb:14:2f:d6:
                    de:ff:23:8e:89:b1:32:55:fa:81:28:1b:a6:1a:f6:
                    d6:14:47:26:20:05:03:00:3f:dc:95:78:ac:eb:a1:
                    3d:39:dd:72:24:7f:42:7a:e0:ab:d5:92:57:4f:02:
                    c2:41:a9:e1:0b:cb:74:c5:26:1e:7f:4a:45:31:ea:
                    c0:de:7f:6e:a2:1e:fd:03:b3:0c:6b:a3:ed:a3:97:
                    60:26:c1:d9:66:bf:f4:a3:85:8a:40:67:3e:a6:6d:
                    c2:37:86:fb:53:7e:34:3e:2c:6d:97:b0:53:00:65:
                    b6:39:05:73:ff:9f:52:03:96:15:a4:b5:82:67:d5:
                    35:77:16:11:e7:ca:e5:8e:63:29:cc:1b:e7:c1:63:
                    62:a8:e0:7c:0f:32:0b:99:49:81:71:02:3b:5c:18:
                    81:97:92:7b:89:7c:93:04:71:19:a8:ca:99:03:a9:
                    d0:94:7a:1a:0b:0a:6b:08:d1:8d:c5:11:6c:60:17:
                    eb:3b:ac:5e:92:d3:79:83:d5:cc:0f:5b:88:bb:0c:
                    aa:b1:c9:05:05:3b:8d:44:14:ca:df:5a:69:93:b5:
                    d5:49:7b:4d:9f:57:43:df:b4:5d:bb:8b:79:fe:53:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:51:C9:4C:8C:EA:AE:D5:DD:E5:34:7B:E9:CE:CB:98:32:9F:C6:4F
            X509v3 Authority Key Identifier:
                keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:35:14:87:51:59:64:4a:0f:d5:c3:bc:4c:4a:aa:32:5f:
         f9:66:c0:c9:fe:e5:0f:a3:01:17:c0:97:65:60:74:27:d1:69:
         ca:18:60:1a:84:e9:f7:af:8c:35:57:6c:91:ac:5c:76:e8:1b:
         61:fd:b2:80:74:02:2d:2b:88:77:15:ce:cd:26:8d:35:dc:b7:
         e4:df:ab:74:26:05:cc:e6:7a:91:8f:d6:71:19:e7:3a:9d:4f:
         c3:c9:98:55:eb:df:93:64:4c:77:9a:d0:9b:3f:03:c1:6e:62:
         21:e5:71:95:39:3a:e9:8f:6b:da:99:49:4e:5e:cf:94:fa:c8:
         a0:53:a5:9c:cb:b9:59:20:84:10:a7:90:c4:19:9c:bd:c4:3b:
         42:4e:44:b3:79:d4:f5:c4:59:3f:4c:6d:84:b2:77:42:53:3a:
         41:5a:40:dc:0a:90:16:70:a2:ad:a9:c0:8f:3c:d2:76:7b:ff:
         7b:7d:6c:b9:b4:9d:7b:51:ce:5f:04:6b:7f:3c:e9:f0:f4:86:
         1f:19:ce:f0:32:19:aa:d0:d7:2b:05:30:71:29:06:c3:24:06:
         2e:0c:16:08:2b:b7:96:a6:c2:65:4b:f5:76:57:36:e2:14:37:
         ca:8f:36:ff:09:0a:f3:d8:a6:d1:50:7f:a3:cf:58:16:8d:45:
         de:58:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----