Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          kSjNtJwgUnJahqVALUH5xbEoVh/EK+rT/4uYfBDBAkQ=
Subject key identifier:   F6:0F:79:F4:22:F0:DD:A7:80:82:D9:46:7C:E4:BD:D6:38:4D:AC:68
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       01962F3D43360883EA609BB60548AD55329F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          150C
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa (hash: vxmQtZUHn1LwTNriAv3j4ShxEdo7N4X3YYjeuIozTsM=)
                          2: 3KoZ08OudAS6KvuG2FZSnsO2BFI.roa (hash: z6ErD5vxdSmYriXdS8fafTnvSaT8pzzMa8namzSoffg=)
                          3: 4daKJ5wl_E7CwSbo_whtnRnTFVU.roa (hash: tCaiPwYCYtRImT1Ubv2hdBn9CkbxAY//n5k2G92v2oI=)
                          4: 7f2z3Xn8S-DvfoObW3dEJfDj3hw.roa (hash: yWmEvhW970ZV11OFBtarFo2cjEH+EORNq92vuqhI/h8=)
                          5: 85q_6q9moNKBoQwQluN7MeG0uIs.roa (hash: z8wvSS8sEMz0XUJ7f1T1Shqke2Dv9kanZ9axqRjtpuQ=)
                          6: GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa (hash: w6k3BagHuzed7pMgFqXDwDrZFogGz/AtgIn1sQdxfok=)
                          7: J3RZHsItQfisBeZoOPgjscH5ErU.roa (hash: jqIjaGXvwmcB7EhN70ev8p+L/YzF67U+uNj8PYmCrSk=)
                          8: MB5X3jwgPK45EdK2Y1nlAV9RCo0.roa (hash: ATGZdB+IK8QSAEJVHUskknnzb6Y7ykVg4VF4GTfN8js=)
                          9: QlJocn28wvFEXminw23W_RvYg-Q.roa (hash: TuI6P0C1sWDSjYEm5lKEkV0hVZxnOrv4ZLbM/9hY/g0=)
                          10: S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa (hash: sP1S9bFSYWIeTZJsrynmiiCmGNEVCPLgMZJ0LWPL0DQ=)
                          11: Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa (hash: s1GZLf7plSCgtr1IS112uCKjESCTLhOVLDfOPf7Q6wA=)
                          12: UjbV3lGHl1NABirOrXCDlpa2IjI.roa (hash: rr4Fn3/DO7NK9RiKm+oGJrtYMgwIJPO3y7RWl8FMLw8=)
                          13: YRuBMhFMdDAgDmUrmflneguRVhA.roa (hash: AJ8QQBClv/9OdMiZAgSoRxg94GkZL6Fy0Aw0Tfv/MWI=)
                          14: ZaDqc_0TrJFdc0RcFG7yl2ai7QY.roa (hash: 1d+OdKCY8+hZg9LHrOFXWt2cShXAAKGX+jfmOnROX3w=)
                          15: dTnLOVxGDlmwLoq4gBTICx-ugUU.roa (hash: G/+PXPgZlwlpC612pLgBHD975kAHmjCkopFZdUC0qHk=)
                          16: gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa (hash: 8u/Ojowmbeh2NJJrlt+cpAfuaPDNBJguGalS5XBICGg=)
                          17: kBFtrsJPrM_jo-p7iRZbBINVjA0.roa (hash: mJ1KicTl/vvOlA9osD4D6kVHttKTQWza7HFTFyqDuBU=)
                          18: o0yqbcUGmuXiLS-K2hUnWBovg7k.roa (hash: uQlsB1ZpKLfh7MiBG0QLqlWeEhVfwTmSH778FQW6DwE=)
                          19: oMVZrnPoAXYW477f8Ut5F92C5Hg.roa (hash: EiJjRzfI4G9nFesuvyvycnPoMO50/InOe562/vYFUqY=)
                          20: pMnjJvihHzd-giv1SzFYxia6XA0.roa (hash: Rj6NRjW0ZMGK5T4yAL/0Un3Waby5+s7V1nP7lwfSeCA=)
                          21: uSJCC3kYWjg7i4fxLtygovLThwU.roa (hash: YIJsbHaRjQVvABrjQc39hlyffm/xi8unzp8VNRhOFjg=)
                          22: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: t9BKFOC7VGE55KQLmgrMWzZUdbCCIn4RBsT6p31ed7o=)
                          23: w_62FGoWXxTvmN6szlTNF_DQpao.roa (hash: NjQclTg1xG4LTO5Tb/wO9qc+h/JEwYbvWlRZCWLo2Js=)
                          24: yg5JITAUr9nYSKxGfOS5IGqhNV0.roa (hash: Ta/DrxDPmqUacodIAElBSd+T7Dc3Eohj2jJFl8vQFY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:36:08:83:ea:60:9b:b6:05:48:ad:55:32:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=f60f79f422f0dda78082d9467ce4bdd6384dac68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ac:c9:1f:2b:87:cc:98:14:b2:7f:c2:8c:a4:
                    aa:28:ba:aa:0d:e1:14:31:2d:e1:ec:01:dd:80:fc:
                    67:18:22:b6:82:f1:b3:39:89:9f:3c:86:a0:5d:70:
                    87:a4:45:0a:9a:88:77:57:a3:67:17:ca:81:f4:a0:
                    8d:f2:53:22:ff:78:e7:c1:00:a3:53:dd:3a:af:f7:
                    4f:31:b9:7a:6d:ce:3c:68:61:3e:d8:eb:a7:a9:ce:
                    53:30:70:44:97:7a:22:d7:a8:50:ab:16:57:91:cc:
                    72:f8:d8:31:2a:af:6c:aa:8c:81:54:7d:59:30:96:
                    86:6b:02:69:8b:d7:9d:45:bd:da:3b:66:d7:7e:60:
                    c6:5f:7d:82:33:2e:db:07:2f:b7:41:bf:49:64:d1:
                    24:41:d1:76:e4:c9:01:40:5f:fb:a1:95:1c:4d:79:
                    11:ad:4b:9f:fa:6d:56:1e:f6:c7:4d:94:97:86:27:
                    ab:5d:3b:c6:d2:5b:27:86:9c:33:9d:5f:a3:65:01:
                    9d:42:98:1d:12:71:6e:c1:87:93:15:30:da:96:ed:
                    6c:a1:25:20:91:59:e4:49:90:bb:01:25:ff:7b:2c:
                    37:59:9f:27:c8:9e:e7:e3:aa:5c:38:a2:54:db:6e:
                    68:c4:80:3c:4f:cd:64:8e:36:b0:57:0c:d6:c4:10:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:79:F4:22:F0:DD:A7:80:82:D9:46:7C:E4:BD:D6:38:4D:AC:68
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:8a:3d:f4:61:0d:c7:cf:e1:aa:f2:d5:d5:90:49:c2:a1:
         96:62:06:6f:c0:e2:7b:42:3c:3e:80:fd:b4:24:92:5c:0a:9d:
         8b:2c:8e:e2:bd:11:08:a6:94:68:06:9c:9d:b7:bd:c6:b1:03:
         f9:dc:e9:e0:07:bb:21:7f:68:53:6e:a6:29:b0:33:b5:1f:88:
         3a:2d:52:9b:81:c1:a2:2b:0d:70:4c:8c:a3:da:15:ed:89:7f:
         b5:aa:67:45:48:7c:48:3d:8d:f3:9b:23:75:d7:fc:7e:e8:d3:
         f9:7b:04:fe:02:f7:02:3c:22:11:54:9f:d3:c2:a1:7d:d0:1e:
         ed:33:35:10:4f:80:85:13:4b:06:4c:0b:5a:05:d2:52:36:d1:
         45:85:a3:91:08:f4:07:9a:43:cb:4f:b6:77:06:ed:60:8d:a4:
         db:f8:e4:8e:05:07:f1:2a:db:95:64:fe:33:28:19:c6:90:2c:
         f0:e8:f3:4d:49:31:5c:a9:5d:f3:6d:12:4e:2b:3c:40:58:1d:
         b4:81:47:79:18:88:1a:6a:e8:4d:2d:40:bf:08:6d:2a:21:58:
         98:47:54:c6:30:91:51:e1:6d:24:65:f1:eb:9c:f2:b6:63:b1:
         17:77:d1:67:b4:38:f4:55:43:cc:1f:a8:04:34:37:47:83:a8:
         8e:18:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----