Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
File:                     Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft (raw, json)
Hash identifier:          MMrX//vKgcuiH62zaTgVe10OAVTNoJcmZ821lWZNzu8=
Subject key identifier:   38:07:86:77:58:8F:27:D4:DF:D6:E3:61:A7:C5:E1:7E:D4:8F:2B:33
Authority key identifier: 56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
Certificate issuer:       /CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
Certificate serial:       01962F3D50B866BDBEA1AA4BF1BD7EC63DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
Manifest number:          0F8D
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl (hash: ktSj+IiEkvSinrKm6hwTW38mmV5O+ti6OFJjFdDp3i8=)
                          2: oUhkxIulPtQeLWZAap9t1mlG6ec.roa (hash: ajp39CXFmDkVYsw0WCJ5aOTXiyIplQgAr9vcF3fe87o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:50:b8:66:bd:be:a1:aa:4b:f1:bd:7e:c6:3d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=38078677588f27d4dfd6e361a7c5e17ed48f2b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:7a:11:3d:16:fc:5e:bb:f6:bc:cd:d3:ed:
                    28:e3:b5:31:e8:1f:5e:ec:47:21:be:06:37:80:56:
                    0c:ce:2f:41:b1:28:5a:42:a7:67:07:a1:90:6b:ae:
                    b1:a1:a1:78:27:73:21:f7:84:56:a4:1e:25:3e:ad:
                    cd:cf:12:6a:0e:6b:8a:f6:8e:e6:7e:ef:4c:87:42:
                    d9:e0:e1:61:a9:dd:19:e9:91:42:60:3e:c3:50:5a:
                    10:79:c7:7e:c1:8d:98:9e:0c:d6:5d:43:48:59:25:
                    b2:d2:b0:31:70:64:cc:00:3f:d7:d4:0d:8e:db:bc:
                    c9:9c:de:07:83:15:3c:fe:f6:a4:9a:43:11:3f:a7:
                    1d:c9:56:6c:25:76:1e:5a:7f:5a:32:f3:84:bc:f1:
                    d3:71:54:e8:34:e5:a2:5b:82:d8:3f:83:6d:8b:49:
                    b0:bb:89:3c:dd:56:64:ab:f3:29:6f:63:e4:31:96:
                    4f:d2:22:01:b2:ff:5b:3e:0c:b3:90:09:b1:4c:39:
                    34:f1:59:c5:d0:c3:07:9f:48:5b:ae:c6:7a:35:8e:
                    b1:f9:8a:87:78:08:ba:a3:4c:4d:a8:62:b7:dc:c6:
                    b9:1b:04:04:30:dc:0f:d6:e9:19:7e:f2:52:3e:70:
                    80:ef:3d:23:3e:ee:53:50:57:8e:1a:4d:c0:d4:86:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:86:77:58:8F:27:D4:DF:D6:E3:61:A7:C5:E1:7E:D4:8F:2B:33
            X509v3 Authority Key Identifier:
                keyid:56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9d:59:9f:c6:83:54:4e:d1:24:91:1d:bc:76:a6:1e:52:df:
         f2:e1:33:4b:44:44:74:9d:2e:69:6a:cc:cc:d7:bb:f4:62:a7:
         07:ca:8a:09:17:f5:e9:44:f8:32:3e:15:44:65:06:d5:44:d1:
         9a:86:98:d3:4e:ce:fd:f6:87:11:4f:af:c9:ec:c2:e3:fc:ed:
         44:6e:0b:b5:97:76:8e:4b:c5:60:73:76:42:97:3b:bb:4d:e1:
         d9:bb:7e:2c:4b:33:33:07:01:bb:6d:73:dc:7b:e1:5b:7a:95:
         1d:a5:ca:80:6d:39:ea:6a:14:e9:e5:bd:aa:00:83:95:62:28:
         d4:e3:14:25:72:ba:f5:19:10:ba:41:53:c2:42:61:71:ea:3a:
         96:76:76:46:ec:72:fc:d9:85:9a:50:d3:c7:78:b9:d7:64:aa:
         56:ca:60:5b:e5:4e:b6:dd:24:f6:31:3f:05:b8:41:e7:24:8b:
         c1:e6:96:50:80:e8:e7:71:e0:6a:8d:9d:62:5d:4d:af:81:13:
         64:9c:a1:5e:ec:7f:ba:f8:49:19:e5:dd:ae:8c:0d:28:68:58:
         55:d1:39:55:04:4a:78:b2:7f:72:45:62:8a:fa:3c:c6:d1:d2:
         b6:e8:4c:8f:ad:e9:f4:ca:bb:bb:9b:a5:96:e9:85:cf:93:96:
         a8:59:96:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----