Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
File:                     VV10LVJ_lwDMAEfX1hv9gih42x8.mft (raw, json)
Hash identifier:          JGMwsgyJYvUNyt6Mjxc3JmFaCrcC8HY/zjEri7hYaxk=
Subject key identifier:   EE:EA:60:10:9A:0F:C1:29:79:DD:1E:29:A2:FB:6A:4D:54:D6:CB:4E
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Certificate issuer:       /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial:       01962F0733A496401065B1116E822280DED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
Manifest number:          14C3
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: DYecUh-DxqkXQO2e7g2xu3pUfow.roa (hash: YUWrnAO2Gq94plJUaewAQTbWDDY7NY6O0vRYXx6edu0=)
                          2: VV10LVJ_lwDMAEfX1hv9gih42x8.crl (hash: aj9dXjiwTkSBb/VojbtmEagAMeuyJKdrY9hrWMy49kI=)
                          3: hNRdZItPl-_x1hY3C3RjmRZbjnY.roa (hash: RX1AwwjMh7GoVfAGeesdzdmROnn3H+S+x/ans2oUFUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:33:a4:96:40:10:65:b1:11:6e:82:22:80:de:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=eeea60109a0fc12979dd1e29a2fb6a4d54d6cb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:71:6d:3f:54:e9:1d:24:28:49:73:b0:33:
                    4d:fc:ab:51:88:1b:2a:7e:40:83:eb:45:bd:2c:be:
                    36:db:da:4b:7c:51:50:db:6f:ff:2d:bc:6b:c8:91:
                    79:ed:cb:0e:01:fc:75:dd:1f:80:b5:39:19:c0:1c:
                    1b:5e:3a:dc:f4:aa:54:14:4c:5d:d6:2a:86:98:0d:
                    74:6f:8d:35:8c:fc:d3:a2:19:b3:28:8a:74:ed:21:
                    85:6d:21:72:e7:fc:ed:67:10:2e:89:47:f7:bb:a5:
                    1d:a9:7c:e9:1d:d4:3c:18:5d:e1:db:05:7b:5a:fc:
                    bf:83:35:26:b0:2a:75:c7:36:73:25:c7:77:28:0d:
                    6b:62:ec:d9:ff:52:d0:a8:2d:5e:f8:ba:0f:fe:8f:
                    72:67:c7:ba:a2:47:57:4a:24:62:af:a6:28:ce:34:
                    d0:9b:a7:b7:81:db:8f:0d:5d:c4:65:98:64:5a:98:
                    76:a5:ca:8d:a3:3f:4b:0f:53:84:1b:74:43:72:71:
                    92:c8:94:f2:9b:d4:09:99:31:65:ae:fa:67:a7:7c:
                    8d:80:af:e1:6e:4c:8d:1a:d9:42:a2:90:78:ed:69:
                    2e:70:ee:1d:03:46:99:08:d2:07:50:92:43:be:9d:
                    90:4b:7e:2e:5d:99:98:2d:76:e5:4a:e5:1d:88:fb:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EA:60:10:9A:0F:C1:29:79:DD:1E:29:A2:FB:6A:4D:54:D6:CB:4E
            X509v3 Authority Key Identifier:
                keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:d3:2e:4e:35:d1:61:77:41:1e:bb:1b:01:01:0b:49:91:
         5d:56:2f:36:cd:05:3a:57:bf:03:54:61:39:cc:75:bf:6b:ab:
         8e:95:da:70:d2:d5:59:67:c6:f6:94:ed:3f:b6:5c:61:be:d6:
         89:c3:09:29:e2:cd:ae:ea:a5:c2:1e:fe:cc:e3:d7:af:fd:92:
         31:2c:8f:7c:41:94:af:8f:e4:3e:15:73:cc:5c:dc:ed:10:40:
         b4:a8:25:cb:06:bd:d0:e3:fa:d8:23:d6:36:78:5b:5c:cd:e5:
         08:96:66:f8:32:a9:4a:74:19:84:6b:f0:b9:de:31:df:5c:23:
         08:0b:ea:ea:3f:8d:bc:c3:91:19:66:e0:41:b2:89:c9:13:21:
         0f:f7:4b:e4:98:00:4d:4b:f7:8c:5d:9c:ae:7b:5e:e6:dd:11:
         ad:2f:ef:4a:e3:bd:f1:05:b4:61:dd:11:78:dc:59:e9:c5:dc:
         a6:7b:ec:b4:92:6a:85:78:5c:b0:7e:6d:02:ad:ff:b9:ca:de:
         03:c1:5f:09:1b:96:30:7e:9e:8b:e1:27:b2:1c:cb:62:16:6d:
         da:6c:e9:2b:87:5a:04:44:af:5c:10:dc:d8:08:b3:52:47:59:
         56:0f:d7:2f:ef:0a:20:d2:6d:ab:2e:ca:2e:4b:e8:ab:4b:29:
         73:81:c3:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzOklkAQZbERboIigN7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWQ3NDJkNTI3Zjk3MDBjYzAwNDdkN2Q2MWJmZDgyMjg3
OGRiMWYwHhcNMjUwNDEzMTIwMjAzWhcNMjUwNDE0MTIwMjAzWjAzMTEwLwYDVQQD
EyhlZWVhNjAxMDlhMGZjMTI5NzlkZDFlMjlhMmZiNmE0ZDU0ZDZjYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo1xbT9U6R0kKElzsDNN/KtRiBsq
fkCD60W9LL4229pLfFFQ22//LbxryJF57csOAfx13R+AtTkZwBwbXjrc9KpUFExd
1iqGmA10b401jPzTohmzKIp07SGFbSFy5/ztZxAuiUf3u6UdqXzpHdQ8GF3h2wV7
Wvy/gzUmsCp1xzZzJcd3KA1rYuzZ/1LQqC1e+LoP/o9yZ8e6okdXSiRir6YozjTQ
m6e3gduPDV3EZZhkWph2pcqNoz9LD1OEG3RDcnGSyJTym9QJmTFlrvpnp3yNgK/h
bkyNGtlCopB47WkucO4dA0aZCNIHUJJDvp2QS34uXZmYLXblSuUdiPtBDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7qYBCaD8Eped0eKaL7ak1U1stOMB8GA1UdIwQY
MBaAFFVddC1Sf5cAzABH19Yb/YIoeNsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQt
ZDVkZDQ2YWFhNDAxLzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQtZDVkZDQ2YWFhNDAx
LzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI7TLk41
0WF3QR67GwEBC0mRXVYvNs0FOle/A1RhOcx1v2urjpXacNLVWWfG9pTtP7ZcYb7W
icMJKeLNruqlwh7+zOPXr/2SMSyPfEGUr4/kPhVzzFzc7RBAtKglywa90OP62CPW
NnhbXM3lCJZm+DKpSnQZhGvwud4x31wjCAvq6j+NvMORGWbgQbKJyRMhD/dL5JgA
TUv3jF2crnte5t0RrS/vSuO98QW0Yd0ReNxZ6cXcpnvstJJqhXhcsH5tAq3/ucre
A8FfCRuWMH6ei+EnshzLYhZt2mzpK4daBESvXBDc2AizUkdZVg/XL+8KINJtqy7K
Lkvoq0spc4HDnQ==
-----END CERTIFICATE-----