Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File:                     VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier:          FBmVeUeddoXXgHVWvCUAca3L37uAcQD4DYcC8R+KKSA=
Subject key identifier:   55:82:7A:5C:75:31:51:02:84:C7:F2:E8:BD:B0:B7:04:3C:B7:4C:FD
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer:       /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial:       01962F06DE0237D4F6758F3DAAF12416CD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number:          139E
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
                          2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: rTPXyHkPsgOMHbkNDiV7QVumUqIqoZeTp4dkOyVDJWU=)
                          3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:02:37:d4:f6:75:8f:3d:aa:f1:24:16:cd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=55827a5c7531510284c7f2e8bdb0b7043cb74cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:14:02:b8:ff:15:78:1e:14:a8:6b:2e:a8:
                    44:6d:27:70:3c:2a:5a:70:1d:ef:9a:4a:c6:56:0a:
                    b3:f5:b7:eb:4f:60:59:85:c3:98:73:8b:45:af:da:
                    25:5f:df:94:4f:7c:44:a3:ec:ce:6a:3c:03:47:da:
                    b8:96:f3:63:b2:37:ab:e1:aa:55:e6:e4:b5:eb:0e:
                    b2:98:0b:d3:d4:94:25:38:1b:c8:86:5e:e9:9d:97:
                    d2:12:bf:08:bf:3d:a2:17:f6:49:09:22:49:71:f9:
                    eb:62:3c:9b:f0:82:6a:4e:da:46:0d:2b:6d:b5:12:
                    02:3f:ca:95:6a:2c:9a:25:0c:a0:4b:9d:86:ad:09:
                    83:34:1c:c0:a9:5e:c6:a3:95:c3:cb:0f:ae:b9:98:
                    e6:93:7e:fb:b1:19:d7:7d:54:8d:eb:cb:c6:98:17:
                    a3:f0:c4:20:b7:e8:fd:43:3f:f6:4f:9c:30:ee:7f:
                    cb:ea:30:ec:1c:4d:a2:87:f5:36:3a:35:19:a5:38:
                    69:67:28:e7:07:dd:83:92:74:92:6b:1d:5b:4d:91:
                    33:61:a0:94:ed:67:ab:a9:ba:3c:10:41:bb:4b:68:
                    67:f3:b5:c2:ce:13:3c:0e:b2:c1:16:b4:cf:93:f4:
                    12:89:9a:93:cc:87:de:57:2a:ad:41:00:80:5c:5e:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:82:7A:5C:75:31:51:02:84:C7:F2:E8:BD:B0:B7:04:3C:B7:4C:FD
            X509v3 Authority Key Identifier:
                keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:4d:45:30:dc:12:e9:f6:2d:6f:c7:d4:cd:c7:b4:6e:0f:
         0b:f0:35:ae:53:fe:6c:57:90:5e:78:1f:d0:0f:10:c4:3e:5f:
         45:d6:55:99:ec:92:71:ba:be:6d:ce:9f:f1:e8:e3:ad:43:5a:
         b8:19:f5:94:8f:c2:9c:d6:66:a1:14:29:4f:c8:ff:4d:6a:34:
         06:66:c6:a2:55:7d:09:34:a5:4d:d3:5d:1a:8d:cf:fc:b1:30:
         a8:2b:e2:ea:32:ce:6d:f8:9a:1f:dc:99:1b:f1:4e:c7:cf:6c:
         42:aa:64:11:0e:31:9d:87:f8:3c:ed:d5:0a:c5:bb:a2:a5:4f:
         68:b2:c8:20:0c:e2:ed:57:b0:6c:b1:8d:4d:25:b7:44:03:c0:
         08:a8:86:4a:a4:50:29:1e:a4:2a:24:64:b2:d9:df:7f:02:56:
         1e:6f:ed:55:a0:57:cb:38:aa:29:e4:6e:f8:c0:0b:42:11:ee:
         1e:8c:38:69:cf:2d:6c:9e:cc:84:7c:47:37:f8:7a:9c:ae:f3:
         22:5e:8d:9f:74:cb:7b:c9:7f:85:8a:94:43:e8:81:ea:c8:c6:
         22:19:2f:2f:2b:09:7c:cd:61:d3:da:96:30:98:1c:79:74:f3:
         75:56:5f:18:62:95:0a:78:22:d9:27:dc:0f:dd:7a:ef:b5:bb:
         cc:df:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----