Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File:                     VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier:          P5xsMeEUchJuoNy2KbLAYd3cSaEG83ICBLG9tSmQDFg=
Subject key identifier:   FF:14:B0:8C:01:55:22:89:27:6C:0E:47:20:BF:22:D1:07:E0:A8:AB
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer:       /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial:       01962F74E882C996764D0C3BE87B97D035F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number:          06C4
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: 49ahdQ7SqYhemh/76uYUwtULXFuEYIQrl4jcJy+JxaU=)
                          2: b9l5sinWdqskbev4cuOxwSEYd68.roa (hash: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e8:82:c9:96:76:4d:0c:3b:e8:7b:97:d0:35:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=ff14b08c01552289276c0e4720bf22d107e0a8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:71:a5:97:d8:f9:57:34:96:f3:95:3a:a6:
                    f3:4c:c7:c1:6a:7d:3d:9f:de:8a:d7:49:b9:96:15:
                    d3:d3:de:5d:af:f6:45:d5:e1:c9:9c:f4:04:3e:33:
                    ac:13:29:a3:3c:06:a9:e3:a5:6b:ba:44:2c:13:63:
                    2a:bd:79:51:c7:1c:3d:96:0b:b1:57:37:ec:dc:2f:
                    9d:10:11:bc:64:00:8d:87:ed:f2:0a:29:6f:83:38:
                    5f:b1:a2:32:25:63:de:51:62:ee:43:5d:38:4f:22:
                    0d:c6:01:2d:7b:fc:6b:f7:dd:9b:51:1f:66:b1:cb:
                    29:66:21:e4:ee:01:0f:33:14:6f:d2:26:b2:2d:bc:
                    ee:3e:17:15:5f:f6:61:c5:6f:b2:26:e0:ab:c4:0b:
                    23:07:18:fd:88:64:89:16:64:39:11:b2:8a:82:db:
                    f7:c0:00:30:11:38:e1:3b:ae:80:1f:18:ce:68:8f:
                    5c:eb:64:51:89:8c:03:56:ab:bd:46:ff:93:34:86:
                    d0:7c:f4:4a:63:41:ea:55:1c:4c:62:a1:4a:e1:43:
                    f6:8e:98:af:7e:f0:22:30:e2:e1:41:12:89:96:da:
                    60:60:dd:98:b4:94:3b:93:ac:dd:01:47:71:81:21:
                    34:4d:72:fb:8b:96:1e:1c:5f:97:03:23:ce:4e:8e:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:B0:8C:01:55:22:89:27:6C:0E:47:20:BF:22:D1:07:E0:A8:AB
            X509v3 Authority Key Identifier:
                keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:78:97:4e:fd:c7:52:a4:22:bc:e5:a9:26:2e:a1:ac:72:
         a0:2c:83:6a:ad:62:2e:f2:15:f6:c0:f5:da:1e:fe:17:67:b6:
         ff:9c:06:70:e7:0b:d0:03:e0:31:0a:d0:4b:35:da:64:54:af:
         74:b6:eb:d1:4a:8d:6e:49:fa:f1:a8:05:8b:4b:a6:7a:81:be:
         23:d3:5c:28:2c:32:87:07:e1:06:35:af:53:d4:e0:62:0f:e0:
         bd:90:8b:19:2c:10:b0:4e:5c:a5:6e:4d:29:0a:ce:6d:f7:c1:
         78:87:d3:ff:c9:57:62:9d:fe:b0:b0:4a:08:73:59:8b:84:cb:
         93:d5:91:f0:2f:6c:d1:ef:5a:5d:10:23:4e:d0:ca:55:a3:ed:
         c7:fc:f9:52:a8:b5:c0:e5:e6:1c:4c:ec:52:ad:44:37:bd:81:
         b3:08:7f:57:28:f4:80:39:b9:5e:3f:05:40:02:54:02:4c:14:
         b1:2d:c0:c1:dd:27:73:b4:32:6c:b7:30:98:85:6c:66:54:ce:
         05:18:d2:0a:06:aa:4e:c4:bb:00:2b:bf:f4:ca:d8:62:5f:2c:
         0d:24:aa:d6:2f:8b:26:01:28:b2:c7:1b:6f:c1:5a:4c:5b:e5:
         69:a8:c7:ef:5f:00:cd:55:b3:5b:89:f0:d2:8f:b5:14:4e:59:
         4b:54:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----