Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File:                     rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier:          Mtazlv6SkpFmWchBY+gqgIfeRXLgfiDnthg0yA5pivA=
Subject key identifier:   D6:BC:34:19:5B:F1:D2:B4:1D:C4:7C:66:88:64:FD:52:97:FD:78:43
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer:       /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial:       01962F3DA518CE68E38AABB4711E11C039B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number:          0561
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
                          2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: iYKZnM+GgVXGeSKf9AhdHsNtyWpywa5jon3rV3zo+t4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a5:18:ce:68:e3:8a:ab:b4:71:1e:11:c0:39:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=d6bc34195bf1d2b41dc47c668864fd5297fd7843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:e5:c2:22:42:ca:42:c1:fb:38:da:33:21:
                    94:a3:3c:d8:cd:68:cc:63:f7:d0:3d:e3:61:28:16:
                    00:d8:48:a6:94:61:98:d4:df:cb:b1:51:a0:74:fa:
                    69:48:e1:ed:1c:26:b6:0e:a0:de:6a:b4:74:fd:10:
                    07:92:63:0d:da:e0:ee:5b:9f:c5:c6:47:76:f3:49:
                    fc:e8:9c:67:f2:86:8d:f0:f3:dd:b3:62:b7:55:1e:
                    1e:c8:b3:e3:94:fc:28:da:7d:03:83:5a:21:d9:28:
                    bc:d3:53:c4:25:88:c8:6f:24:a1:ca:95:4e:af:0c:
                    e0:e3:27:da:fb:89:7a:19:82:4d:40:c0:6d:6f:13:
                    1a:56:a2:59:72:6f:7d:46:0f:63:1b:17:b8:f3:cd:
                    87:a4:7a:94:7d:6f:e3:c3:97:46:34:ee:04:61:18:
                    ee:7d:8b:3a:2a:a0:85:34:6f:a9:c0:63:3a:3a:8a:
                    f8:2f:23:54:d2:50:15:95:4b:c1:0e:42:dd:21:2b:
                    e1:fb:40:71:8e:21:d1:45:29:1c:91:0b:94:c6:93:
                    45:e3:ad:b5:32:b5:59:8f:a8:f0:21:a8:cb:0a:7d:
                    3c:f9:3e:87:e0:46:91:c0:b6:da:f2:bb:63:1c:5b:
                    11:f4:a1:8e:c7:de:4f:c8:74:f2:01:5c:92:fb:95:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BC:34:19:5B:F1:D2:B4:1D:C4:7C:66:88:64:FD:52:97:FD:78:43
            X509v3 Authority Key Identifier:
                keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:73:31:f0:5f:06:66:b4:4d:e9:bf:ad:33:de:2c:59:f3:
         5e:84:20:7b:70:76:bb:86:2f:8f:fa:9e:71:9c:09:20:e7:50:
         33:cf:dc:37:5f:9b:5d:7a:fa:b4:fb:3a:59:4f:8f:2d:86:09:
         af:c7:5f:d4:a9:57:86:6a:9a:0f:5f:98:c9:3d:12:c9:c6:90:
         b3:4d:5b:6b:c7:c3:aa:db:7e:c0:ae:64:11:b9:0b:a0:cd:13:
         e4:db:3a:e2:76:fa:6d:62:56:fb:05:ff:15:94:96:ab:12:c3:
         c1:9a:f0:04:b5:b6:35:51:d6:b2:e5:f4:de:3a:db:d0:93:c7:
         47:af:4c:20:ee:c9:3c:20:c2:80:72:82:3d:e9:24:de:2e:4a:
         91:e9:79:0b:10:a3:02:f8:c4:71:5d:84:97:ed:28:b0:ab:e5:
         2f:b3:08:4b:11:8a:ca:e5:24:5a:dc:17:81:2b:b4:d2:b6:06:
         bc:cd:dc:88:98:4c:f9:3e:d5:00:84:01:d6:a9:eb:57:ac:85:
         e8:a6:a9:7b:fa:03:af:63:78:26:78:00:ed:c1:53:6d:96:95:
         c7:e0:ab:37:d0:69:da:e4:8a:ea:fb:96:67:91:11:fa:68:6e:
         5d:c9:44:4a:52:fb:68:b5:c5:b0:c8:58:1f:71:97:5e:d4:77:
         da:56:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----