Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File:                     VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier:          AX4kuBmLyG5FifPBHmgZP3iWZjmW7GQiXfP+kSbgexU=
Subject key identifier:   DC:1A:93:BA:F0:0D:1A:43:2A:29:C9:A3:9F:F3:07:21:C6:85:C8:D4
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer:       /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial:       01962FAB3B58D32590A9C11B2FF9F9EB75A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number:          0499
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: MeVZOtqNt3JW5yw4ZXWY1mEC3c4.roa (hash: aT7Qdf0+N9/MSDlSTyJ9aA4YP0o287rEoQwXL6tiMCM=)
                          2: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: Z3EzunH6k8c0OuXFb4T5tUbIPsOoKeElN+0gjtflbag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:58:d3:25:90:a9:c1:1b:2f:f9:f9:eb:75:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=dc1a93baf00d1a432a29c9a39ff30721c685c8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:21:15:4c:60:83:fd:fe:44:ec:e1:9b:76:
                    7c:54:50:83:c3:df:a7:f4:b7:e1:54:7b:ae:1e:da:
                    b0:83:93:7a:8c:15:c5:36:5b:fc:93:3f:bb:c3:41:
                    b7:75:c0:26:b1:b7:6f:95:c0:3b:38:a2:7d:45:56:
                    97:b7:39:51:68:2b:8a:f0:3c:3e:32:b0:78:fd:44:
                    2d:fc:c2:bb:b7:5e:cc:6b:4b:cc:ea:98:e3:27:af:
                    27:a9:09:c2:79:2a:63:2f:36:ac:3c:e8:b5:05:d2:
                    ca:53:85:37:ff:96:0a:69:98:65:5d:0f:01:76:c9:
                    1c:76:82:1f:e3:4b:89:6b:aa:8b:ff:08:20:e0:7b:
                    9f:37:7c:86:3a:ac:a5:0c:0c:72:4f:40:52:71:bd:
                    cf:0c:e2:fa:45:4c:57:f4:97:de:61:1f:d2:51:2a:
                    6a:bd:dc:d3:39:15:22:7a:c5:2c:e6:84:3d:32:8e:
                    44:d8:e1:7f:c4:20:71:08:a5:47:40:97:3c:25:39:
                    ec:89:55:13:14:cf:9b:79:39:63:30:92:67:0a:7c:
                    e7:82:6f:62:b0:71:9a:91:30:cb:0a:50:9e:f3:84:
                    86:b1:81:27:99:1f:4e:1f:95:a4:89:10:28:2b:0d:
                    39:1e:23:74:01:b6:7d:40:5c:de:03:fe:48:77:8a:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1A:93:BA:F0:0D:1A:43:2A:29:C9:A3:9F:F3:07:21:C6:85:C8:D4
            X509v3 Authority Key Identifier:
                keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:68:1b:8a:0f:ae:a7:dd:93:27:28:59:7a:59:38:24:d4:e6:
         39:b1:91:fa:13:b6:81:7f:0d:22:4f:f1:dd:ee:7f:50:ee:e6:
         ff:9b:44:2b:42:ac:cf:d2:ad:8c:09:e1:b5:d5:2b:4f:b6:29:
         2a:a6:9c:41:7c:60:89:85:fd:7e:bb:35:34:36:c3:cd:f2:0c:
         c2:5f:53:9e:a2:c6:03:d5:9b:69:c7:55:56:37:ff:eb:45:d9:
         86:f8:bd:1f:31:28:51:8a:83:eb:20:d6:9c:4f:87:27:fd:cb:
         ff:d2:ce:52:2d:9d:44:85:24:23:e3:78:7a:bb:57:f7:3e:7e:
         c8:84:ca:90:33:91:e5:4d:65:24:f9:7e:17:79:6f:76:d2:1e:
         2d:21:de:79:85:0b:d1:5d:99:14:0f:bf:37:04:18:9f:30:be:
         58:3c:95:11:ca:ef:44:0c:aa:a4:55:d4:dd:56:28:f4:4c:25:
         aa:42:dc:6b:c1:84:d2:b3:be:ee:5a:ef:6f:98:db:cf:85:c4:
         33:f0:df:a4:82:4d:ca:3b:c1:78:95:72:4e:ea:99:e4:24:a3:
         99:59:25:fd:75:fa:f8:30:34:56:53:b6:23:94:f4:7c:df:8d:
         1c:0d:3e:55:4a:61:61:17:4a:25:79:a7:16:0d:94:92:8f:0b:
         49:1e:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----