Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
File:                     VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft (raw, json)
Hash identifier:          gx59tgf6sNgkmLubY4uio5BqX/cGXYlU8AQGBq26NTY=
Subject key identifier:   79:31:58:F5:FB:B6:0C:A0:DE:57:2E:D4:45:83:22:C7:31:10:34:04
Authority key identifier: 55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1
Certificate issuer:       /CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
Certificate serial:       01962ECFBF4FD01464F6BC096BD94BEF982B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
Manifest number:          0FD0
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl (hash: AVronTLdZFHy117S1uw3OmPyVLN3nAh/lzLOcUMtHZ4=)
                          2: y1unGvVewluXyGeDL5LFoMVtcdw.roa (hash: /h17T8UK70DqWL88fo4si+DcDqq+rRewkenDmJ5Ct8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bf:4f:d0:14:64:f6:bc:09:6b:d9:4b:ef:98:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=793158f5fbb60ca0de572ed4458322c731103404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:9c:cb:ac:ff:8f:f6:48:2f:5f:a3:47:ed:
                    91:58:57:29:f0:f9:af:b3:32:9c:35:c7:1e:84:fa:
                    ba:b8:a9:e3:d3:8e:2a:c0:0c:24:7b:96:11:f2:d6:
                    fb:cc:c9:31:75:36:9e:59:e7:00:60:3c:fe:48:94:
                    4f:a2:11:af:c1:41:f4:ff:a4:f5:b9:19:e7:60:a2:
                    92:30:4f:3d:51:73:09:3d:f7:7c:0e:1c:51:9d:a8:
                    a7:fa:91:63:c9:40:c9:af:df:ac:17:52:94:78:0a:
                    41:2a:07:14:b7:09:e7:7b:ca:3e:10:98:84:73:b2:
                    2d:d7:53:63:a7:1c:f4:ee:e2:79:16:74:ce:4f:c8:
                    7e:30:60:93:89:98:0e:a2:88:f4:06:7b:6d:38:73:
                    8e:6a:75:03:4c:68:62:34:ee:2e:a3:79:79:e7:5b:
                    89:81:a0:c7:4d:32:30:33:76:c8:ec:54:3f:c2:82:
                    8b:d3:22:2a:f0:50:ad:c0:9e:c5:7b:8c:b2:d6:4a:
                    3a:d5:dc:7c:fb:64:47:30:f8:06:3a:98:ef:41:64:
                    d2:fd:39:d8:c6:17:6f:2d:36:9a:be:d2:61:bc:44:
                    59:e2:19:f1:c1:56:02:bd:24:71:18:91:1b:76:eb:
                    9a:bd:d9:b8:37:8a:e3:59:e4:5f:7a:f5:cc:a6:ae:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:31:58:F5:FB:B6:0C:A0:DE:57:2E:D4:45:83:22:C7:31:10:34:04
            X509v3 Authority Key Identifier:
                keyid:55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:10:1e:bb:a0:c0:28:ae:ae:d8:83:e8:a3:92:f8:c1:36:51:
         82:ed:16:f5:54:27:8d:75:2f:3e:30:ac:33:d4:82:87:37:69:
         48:99:c7:63:1a:42:72:ae:36:64:30:dd:ba:23:89:79:5f:60:
         aa:f2:06:33:77:f4:4d:e8:9c:0e:b8:04:aa:a7:38:b6:e6:61:
         bb:17:c9:7a:62:19:9f:ab:71:f6:fb:02:cd:03:2e:2c:7f:f9:
         48:8a:95:62:bb:81:9a:08:84:78:58:1d:2a:d4:ba:b4:1d:aa:
         7a:6e:75:e0:0b:0f:77:ec:72:df:12:81:12:6d:46:41:d5:89:
         24:ed:e1:53:ce:f5:11:0b:35:a3:2a:14:ee:0c:7a:74:19:e9:
         e3:5c:83:ab:9c:af:96:2e:30:af:80:7f:7c:77:a8:68:21:11:
         1a:85:b9:f7:fe:ef:8a:07:41:d5:a8:71:18:21:d6:c7:7c:c1:
         39:a1:b0:b3:59:f4:06:c3:2a:dc:8a:8e:3c:ec:f8:48:80:0d:
         63:e4:50:0b:72:3f:25:23:65:ab:d9:d9:6a:14:63:4f:7f:89:
         64:c9:32:02:ec:44:3a:60:f7:c6:8f:b6:18:bb:de:3e:82:cd:
         8e:b9:df:eb:f8:76:47:99:40:b3:0b:d0:cf:d3:e8:5f:68:cd:
         f2:e7:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----