Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File:                     vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier:          spSFW3ozScTEzmUICzJ7KXDxrwbkrCDqeC6eE3epNIc=
Subject key identifier:   3C:C7:86:14:D2:7E:7A:0E:5D:F7:FD:FC:26:6F:B8:4F:DF:07:B5:D6
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer:       /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial:       01962ECF5608E2A87A6E3B661FFE948FCD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: fj83OICA2dXkb7sofXdOoGdjzq4.roa (hash: pOA5XIvHm6EKh1V95/EfmbQrXTJ90+bGbqMr2BZtsSk=)
                          2: pDkCQjQVPegQOP278WmolhHSrkw.roa (hash: VPjogK0/dxD5LybI2fhbuslUMxpJB7AerXcZh/G3cj4=)
                          3: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: LGQq6RTGiPhjTPyzzlWqrxZzpwhwH7ZQ0I7336wGPlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:56:08:e2:a8:7a:6e:3b:66:1f:fe:94:8f:cd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=3cc78614d27e7a0e5df7fdfc266fb84fdf07b5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:7c:03:5a:87:13:09:2d:f7:ae:e0:0f:d4:
                    f3:b3:a1:b9:27:46:5e:3a:e2:2d:f8:74:5d:b7:93:
                    35:42:f3:fd:3c:25:56:89:e8:1d:71:9a:f9:86:57:
                    a9:70:e0:4c:1b:c1:d2:4c:cf:63:aa:96:02:eb:1e:
                    f3:2b:cf:3c:91:98:49:e9:f7:fb:0b:67:cc:c8:1b:
                    c0:86:24:a8:33:78:93:fa:7e:ee:dd:4c:92:aa:65:
                    8d:86:66:16:b1:fa:a6:cc:7a:a6:3e:03:82:60:e4:
                    53:45:67:90:8d:dd:a6:92:6b:f0:d3:59:e8:6a:fa:
                    cd:7e:26:87:25:7e:d5:d3:ed:35:2e:81:1d:5b:39:
                    41:a7:bb:9c:a3:d1:7d:d9:8b:9d:d0:63:1d:75:aa:
                    58:b2:00:62:61:2c:22:2f:75:fd:3c:6d:1c:c1:f8:
                    36:d7:65:1b:3d:70:6f:0c:41:c5:54:84:85:29:c0:
                    95:8b:96:cc:76:75:64:d5:1b:77:17:ce:ac:ff:6c:
                    ca:06:e2:f6:e1:6a:6d:1d:e8:5d:74:43:d6:51:8c:
                    f2:14:0a:3e:9a:be:98:45:48:b5:60:6b:30:2e:83:
                    f9:ab:78:bf:f5:4f:3d:25:e5:cc:f3:ce:88:0b:5c:
                    19:76:7f:dc:a3:87:32:96:a2:b3:72:ac:7c:30:27:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C7:86:14:D2:7E:7A:0E:5D:F7:FD:FC:26:6F:B8:4F:DF:07:B5:D6
            X509v3 Authority Key Identifier:
                keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:d7:b0:6a:df:89:44:7c:06:fe:26:1a:43:31:41:dd:40:
         1c:01:cb:2d:83:89:29:8f:c7:c4:d4:0d:5f:8f:c1:0b:06:77:
         e7:b4:94:e4:94:59:9a:5b:61:5e:e7:ef:e0:1f:f6:0e:4e:7a:
         8b:60:d6:f9:a3:e4:c9:80:73:c0:c4:c6:80:dc:2b:ce:58:0a:
         dd:ee:29:83:44:12:3d:73:6b:d4:29:41:16:1a:06:35:3e:7f:
         88:25:94:15:30:c7:85:3e:cf:9a:ee:dd:b1:4a:b7:6e:95:bb:
         a2:0f:7a:7f:60:8d:fc:34:62:2a:c1:20:34:53:aa:e6:65:d0:
         a9:24:7c:5c:aa:b7:b9:46:8d:da:83:5b:b3:a1:0a:43:73:45:
         76:3f:57:18:22:af:8e:c9:49:7c:7e:d0:d0:6b:95:31:6b:87:
         00:98:9a:d4:58:8a:06:16:8c:bc:c8:f8:43:fc:e6:4b:c0:2c:
         2a:28:82:7c:02:b7:11:77:2b:9d:ad:80:20:2a:f3:7f:68:7a:
         8d:71:65:c2:33:41:69:e0:65:7d:ee:2a:8c:13:f2:ae:34:b2:
         e6:6b:9c:dd:ac:2d:6b:52:b0:71:e8:b2:21:06:05:b3:7d:22:
         1a:96:63:d2:74:2e:27:23:f5:95:4b:a0:33:8b:4d:ce:e9:ab:
         28:77:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----