Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File:                     riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier:          RnkcIxwjAtRjPLiBPU0RBH+2yYS+r6ZtugWzABp2fYI=
Subject key identifier:   87:11:80:26:9F:74:F2:8C:F2:53:0C:52:04:75:21:A2:24:14:81:F7
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer:       /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial:       01962E61F0DFFC3246059221EB9570B308AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number:          02E7
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: YLMlluYLr6JfK-y1U7Gu2bMProM.roa (hash: dLTxCUQo6hqFLyHwLbKwrnQtAYSoW8dcHWFQbKuVfyk=)
                          2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: k/qT/iRTO0kvb1fU45PlSQ0JwNMay7lc8zAlYPyNq+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f0:df:fc:32:46:05:92:21:eb:95:70:b3:08:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=871180269f74f28cf2530c52047521a2241481f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:2e:86:79:dc:d4:7a:5b:22:85:66:95:94:
                    99:c4:49:aa:95:60:5e:77:ac:91:86:d9:74:d3:b9:
                    66:a9:36:cf:13:93:24:59:7f:be:16:eb:df:7a:67:
                    cb:ac:7d:ac:bf:80:2c:2f:b6:6d:54:83:c0:2c:9e:
                    fc:2b:3c:85:ce:0b:0e:1d:dc:b2:fd:6e:3e:a0:1c:
                    8f:31:a2:85:e9:14:97:e8:60:3e:53:d5:bf:b1:fe:
                    31:fe:11:e4:9b:90:a9:e5:f4:4e:0f:c8:f9:1b:16:
                    86:03:16:e2:24:51:6b:b0:59:93:e0:59:5b:08:c6:
                    e0:10:18:9b:38:1d:88:54:41:83:19:b1:68:f0:fc:
                    ac:5a:94:52:93:84:ac:6b:8c:e9:30:62:de:2c:bf:
                    c5:79:da:19:c1:ac:e1:2f:6b:e5:65:2f:29:71:16:
                    86:c1:f0:82:8f:38:6d:87:c7:ab:cc:1a:8c:67:72:
                    9b:06:a9:31:35:4e:a8:35:28:88:cd:08:ed:56:c0:
                    75:d4:24:b4:d4:5d:9e:ab:2d:4c:55:82:d3:6e:ec:
                    e9:69:23:0f:04:70:67:4f:22:55:dc:81:f7:b6:97:
                    0a:de:ad:80:0c:0b:17:eb:29:a8:99:98:f0:9a:fd:
                    b6:b8:c6:6e:d7:94:49:8e:ee:7f:ab:be:0e:e2:f3:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:11:80:26:9F:74:F2:8C:F2:53:0C:52:04:75:21:A2:24:14:81:F7
            X509v3 Authority Key Identifier:
                keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:9e:99:a3:c6:f4:15:e6:cc:85:38:9b:ef:f4:0a:26:fd:
         0e:1c:88:dd:99:a8:a1:d4:49:63:d1:78:ab:e5:9b:2e:d5:7a:
         70:24:91:0a:f1:14:11:56:9d:57:cf:16:03:f4:f6:eb:64:44:
         a9:97:c1:ba:b1:3e:d5:3d:a2:eb:d8:31:ae:6a:ed:94:d8:9b:
         8c:c2:1c:df:02:f5:90:7c:8e:17:e9:b0:09:74:7d:ed:68:f1:
         f4:6c:16:dd:7c:e8:30:d7:8c:74:e4:fc:c1:76:bd:e0:b3:52:
         52:57:a5:f2:8c:8a:14:74:c3:db:c1:d0:9d:43:1c:99:85:99:
         fd:82:5a:1b:71:c7:92:f9:fa:7f:e4:a6:18:b0:ba:ff:b3:79:
         05:a9:88:79:20:eb:76:93:79:e7:5a:0e:54:07:9c:04:a5:4a:
         b4:b1:ba:0c:54:b8:e4:c4:e8:67:eb:c4:4b:0c:90:57:b6:12:
         ed:18:34:be:f9:20:8d:52:d3:02:b5:c0:15:7e:e9:b8:d0:03:
         e2:04:06:a1:5a:49:52:08:3f:d6:bf:b8:ae:f5:64:7e:61:bf:
         07:98:9f:22:7a:ee:08:6f:4c:5a:61:fd:7b:4f:9a:85:d9:a7:
         c2:05:48:db:6c:84:40:e4:17:19:fc:0a:b7:84:a2:e0:16:98:
         ae:50:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----