Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File:                     VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier:          34UNL367rVs9C1VgVzJ7WQRICh/8RuRWDZY6ufGHtF8=
Subject key identifier:   5F:40:9C:CF:4B:6F:D2:55:C8:F2:3D:4D:49:8C:02:88:34:F8:1D:5B
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer:       /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial:       01962F06F4A1F60788E2CBB69B192833B5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
                          2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
                          3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: 0dWjX04KCUkqYmrniBNTGEAfYsRmn0H0df6FI7sUpVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:a1:f6:07:88:e2:cb:b6:9b:19:28:33:b5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=5f409ccf4b6fd255c8f23d4d498c028834f81d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:c8:61:5f:ea:66:21:dd:5d:27:be:24:47:
                    eb:a6:ca:f9:93:82:f4:8f:1a:55:db:3a:f7:02:08:
                    14:4d:19:27:3f:17:c3:b0:7a:29:8e:a4:ee:20:9d:
                    49:e1:cf:6c:52:24:0a:29:66:3e:0f:d1:47:e3:1e:
                    d0:f0:d3:79:f2:a0:c3:61:1a:47:c7:3d:3e:5a:b4:
                    38:86:38:7b:b5:4c:2e:59:08:fb:c9:48:76:8c:2a:
                    13:7f:86:4e:a8:5b:a6:80:ae:f8:c1:aa:7c:a1:41:
                    d9:60:40:45:6d:91:8f:11:87:49:f8:71:b1:17:f9:
                    cd:d9:93:ca:ae:d4:52:44:e4:8d:f9:9a:b4:73:f8:
                    24:45:18:3b:11:81:f6:3c:0b:b3:c6:b6:f4:cb:63:
                    4b:15:d3:18:1e:16:ba:b8:fb:a7:c7:52:76:62:f4:
                    06:57:4b:e7:59:71:02:56:5d:92:94:fb:27:d3:a1:
                    1f:e9:12:5a:51:1c:0e:f6:53:60:4e:8c:b0:18:82:
                    24:21:f2:42:f6:7e:d8:c2:83:16:1b:d7:0e:f4:6c:
                    88:19:d7:c1:9d:ea:ae:7e:27:68:ac:e1:2a:5d:fd:
                    4b:65:aa:e5:ab:4c:33:6e:3d:d4:52:ac:0c:7c:77:
                    25:1a:0a:a2:5b:f6:f4:3b:d5:b6:e2:bf:cf:20:69:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:9C:CF:4B:6F:D2:55:C8:F2:3D:4D:49:8C:02:88:34:F8:1D:5B
            X509v3 Authority Key Identifier:
                keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:c7:32:8e:bd:f6:7d:70:6e:60:63:ee:67:6c:89:50:11:
         36:b7:31:6c:a5:0c:f4:2e:1e:d9:5c:90:29:a6:d4:ce:53:03:
         e4:55:6c:50:de:1c:9a:ee:6c:46:38:55:8f:bd:9b:5d:e6:71:
         3b:1b:a2:3f:89:fc:f2:c3:39:ba:66:82:9d:a8:3b:cb:35:81:
         c0:52:13:bb:59:35:b5:40:df:79:87:24:c0:a2:70:be:14:7d:
         db:73:72:29:88:17:02:e9:cc:91:b3:ac:04:26:3a:e6:38:76:
         5c:72:57:9f:3c:ce:6a:a0:a0:08:e8:b4:c6:74:a6:13:43:bc:
         81:42:04:fc:0b:8b:e9:a3:5e:f4:f8:e7:46:d9:3e:a8:73:be:
         ae:1b:98:78:f4:b0:7e:98:2b:6c:75:5d:71:c2:5a:64:61:cc:
         63:62:35:49:df:09:6f:cb:f6:5b:a8:c2:d9:a7:d2:42:f1:7b:
         40:3d:b7:78:41:b1:e7:57:ca:45:c7:19:75:18:10:b0:56:d6:
         38:f1:8f:a3:b4:84:6b:5e:bf:55:6d:9a:19:14:fb:08:19:55:
         33:c7:6f:17:cb:ef:d3:3d:41:09:7e:a6:44:45:2d:c1:de:7f:
         6b:36:53:d1:44:5e:e7:8e:02:87:5a:1b:02:0e:eb:88:83:e1:
         bf:bc:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----