Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File:                     v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier:          /zbDGN9RJL2ZTjATNSFFgx5zjmrNzz1B3tX7/0uaLvA=
Subject key identifier:   7D:70:B5:49:62:FC:75:07:15:5F:B4:41:6E:96:F7:8C:04:37:78:DA
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer:       /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial:       01962F3D825E0A9E8E52859465C09D8F5CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
                          2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
                          3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: s02dL7KMH9sIXQnpcP8tltF0YXipfLup0cYxu6SbbOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:82:5e:0a:9e:8e:52:85:94:65:c0:9d:8f:5c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=7d70b54962fc7507155fb4416e96f78c043778da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a0:0d:c4:80:29:1c:b3:82:55:97:e2:bc:b2:
                    e6:00:71:d3:ac:5d:0b:f4:c1:4b:a4:e5:de:6f:fb:
                    f1:ac:09:d9:45:51:ac:69:ab:75:ef:79:bf:34:d6:
                    2e:08:73:46:49:bb:5b:6d:c2:0d:24:b2:62:19:9d:
                    85:43:0c:46:ab:25:58:20:4a:8b:68:d4:92:bb:5b:
                    2d:17:4a:f0:d5:17:53:0c:97:33:e9:52:65:df:5e:
                    c8:bf:64:a7:a5:11:b2:05:3d:fd:9c:6c:76:ee:ff:
                    fd:b5:09:f7:cc:9f:f4:c6:bc:3f:de:8c:02:9b:14:
                    58:65:af:cf:36:4a:51:f7:f8:57:ff:a0:86:93:66:
                    bb:a5:d6:d4:59:7b:ea:83:44:d6:f6:34:9f:38:52:
                    cb:d2:21:f2:3f:10:ff:68:ae:df:3f:45:c1:52:37:
                    63:6a:2d:6f:96:80:a0:40:9e:9c:e6:96:3b:ce:27:
                    69:d2:45:55:67:39:cd:f2:92:1e:39:38:aa:fb:e2:
                    be:f7:6c:96:1f:7c:20:24:11:29:5d:b3:a0:91:a9:
                    f1:e8:ec:1a:91:1f:c0:b9:7a:f4:1a:c3:b7:67:6d:
                    76:e7:75:52:92:fa:4b:71:05:63:89:d3:95:eb:76:
                    e2:50:5b:a0:96:c2:73:7f:78:55:e1:8f:78:87:99:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:B5:49:62:FC:75:07:15:5F:B4:41:6E:96:F7:8C:04:37:78:DA
            X509v3 Authority Key Identifier:
                keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:60:7c:97:f8:64:a8:f7:ee:3a:72:c2:e4:84:c4:eb:01:f7:
         a7:2b:34:e8:21:b6:72:73:9f:d5:a7:13:10:a8:31:63:8c:4b:
         38:bc:ae:ff:fc:38:55:45:2a:a0:79:dc:02:8d:d9:76:26:53:
         c7:7a:5b:dc:d5:46:31:07:b5:8b:30:50:9b:8e:dd:a2:49:93:
         35:83:78:f2:22:61:09:73:9d:58:5a:17:1f:38:68:9c:2c:79:
         cb:da:ed:d7:83:ad:2e:49:19:1d:8a:f5:55:e7:81:d9:2f:7a:
         eb:dc:45:84:fb:4b:1d:61:de:24:ac:6f:8b:28:2e:b9:f5:84:
         9c:1c:1c:54:88:5a:04:18:fa:2b:da:68:f1:3a:09:13:68:ba:
         35:92:b0:81:ab:74:2d:02:3d:4e:fd:0d:cc:a1:20:e2:d7:c3:
         2b:b7:a2:81:26:8f:49:18:8c:b1:55:ea:c5:6f:d0:ba:8c:6d:
         10:0f:da:6e:4a:bc:d8:37:5e:dc:2b:62:cf:66:d0:d2:59:5b:
         58:65:56:84:14:1a:af:c1:a2:52:f7:71:c0:75:c2:02:1a:56:
         1d:b7:d9:10:ce:da:a1:18:9e:96:1c:8b:ef:23:cc:91:cf:3c:
         f2:a1:a2:9b:4e:ff:3a:ae:d6:d9:08:81:94:f6:fe:54:e0:5b:
         ac:be:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----