Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File:                     vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier:          86B0LBoOG2FHToj8MJjaVBs9hVjs+pN2m5UsR3jGufg=
Subject key identifier:   FF:19:AD:BB:8D:05:D0:25:7A:01:DB:A7:15:C2:F8:B9:97:AE:88:5C
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       01962E61A2F419132C74F2C7100A16D608C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number:          0D03
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
                          2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
                          3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: sWLiaVYiAGwRmzeN4S2oqv4vJsO/7k4Leu+wENGYmcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a2:f4:19:13:2c:74:f2:c7:10:0a:16:d6:08:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=ff19adbb8d05d0257a01dba715c2f8b997ae885c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:cb:90:a7:6d:b2:5e:fa:3d:96:cc:72:dd:
                    85:1c:04:25:97:ee:20:35:38:8c:f7:90:10:f3:66:
                    b4:78:0e:3c:be:53:24:41:7c:e5:ed:0e:f0:84:c7:
                    0e:89:d1:d2:a0:e9:4a:35:68:4f:cd:33:ba:78:51:
                    01:74:b4:fd:79:60:95:0c:d4:73:5d:b1:a0:0f:2c:
                    4f:dc:17:63:f6:48:7d:de:b3:97:99:ec:69:4d:d1:
                    5a:f2:df:7a:d4:6a:6b:5d:6a:69:a6:1a:85:4d:8c:
                    e9:47:a9:9f:20:3d:42:a4:98:e2:c8:5d:31:c1:f0:
                    10:44:ea:0b:ea:a7:6e:42:a3:fb:82:4b:12:e6:25:
                    54:f7:dd:2b:21:c0:0d:37:30:b2:01:1e:32:a2:9a:
                    c7:57:17:ed:ef:75:e3:83:f6:ac:cb:c2:05:f5:dd:
                    55:79:e7:7f:80:2c:ce:30:53:99:a9:72:6b:a2:11:
                    9c:28:4b:75:42:55:5c:9a:00:12:6c:8c:c5:42:27:
                    d8:65:a3:af:83:9c:94:96:2f:f6:73:6a:ca:9b:51:
                    f7:22:b8:e5:bf:36:93:e5:da:00:e5:eb:54:ce:96:
                    09:8d:e6:4c:c9:2f:72:7d:8d:25:62:f5:0b:93:f3:
                    69:a1:c9:a4:07:27:5a:56:7a:74:3c:7f:3c:ac:b4:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:AD:BB:8D:05:D0:25:7A:01:DB:A7:15:C2:F8:B9:97:AE:88:5C
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:92:bf:71:f5:bf:1c:14:4b:45:3a:99:85:c4:c5:ca:ea:
         aa:1a:68:6e:e9:df:c5:d2:80:8d:08:1f:cc:40:05:b4:75:4e:
         94:fc:d6:73:97:80:52:6d:63:31:84:34:ee:6c:0e:bf:dd:3e:
         6c:54:8c:de:d9:ca:68:2c:2c:e7:7d:a8:67:49:db:75:b3:dc:
         2e:05:47:e6:6a:9a:1b:c0:9d:b0:af:53:fe:50:61:3a:4a:85:
         6e:6f:2d:65:87:9c:82:2f:e1:50:3e:0b:e8:b3:a1:81:03:ca:
         33:d5:83:7b:1b:b6:5b:7c:17:39:8d:c1:f9:14:a8:ff:8d:0f:
         c1:ed:12:d0:cf:e8:c7:c0:c3:dd:6f:cb:2d:38:51:a7:b7:ad:
         59:6c:ed:aa:58:80:6a:23:a4:37:86:02:2b:4a:0d:b7:50:cc:
         99:9b:77:93:ec:3b:45:ae:18:e0:2a:a1:4f:86:f9:09:fd:9f:
         06:7a:08:e6:76:1b:23:95:50:2d:99:7c:86:8e:2b:f6:4e:c5:
         aa:ce:a6:be:94:51:dc:64:70:a6:d0:a4:38:c0:60:15:4e:f8:
         f5:a4:56:4e:5a:31:12:77:fc:a2:6b:57:4d:f8:f6:8b:e4:d3:
         a5:f7:c6:98:68:c9:59:28:12:26:21:cc:16:08:25:d4:28:4c:
         da:01:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----