Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File:                     vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier:          ZyTDN2RdjGngGRPZGut2tSUGNmWMyrKDN+HyJXsPxvs=
Subject key identifier:   89:01:FB:32:82:D4:88:78:B4:63:B4:52:F2:E8:C5:3A:39:10:E1:0D
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer:       /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial:       01962F3D2C7691ABD3CB2784B55F94BAC07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
                          2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
                          3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
                          4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: 8vILa/hVnrVbksVreTSQ6fXl8218Ogz0UPa7JjzNkp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2c:76:91:ab:d3:cb:27:84:b5:5f:94:ba:c0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=8901fb3282d48878b463b452f2e8c53a3910e10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:44:fe:d3:ab:0b:ad:11:19:dd:70:cc:57:
                    54:ed:d0:30:66:b5:fb:b8:00:e8:c8:00:1a:ca:3b:
                    ac:bd:f2:81:36:00:0a:73:e1:d2:72:b7:04:6b:85:
                    53:87:5d:f3:3d:1c:82:e4:0c:e8:26:3f:de:1c:53:
                    23:0e:3a:28:9d:29:c9:05:7c:07:52:6d:93:3f:17:
                    e9:0d:3e:55:4d:75:8e:ff:8c:ba:2a:64:ba:a7:0c:
                    ce:59:c5:99:77:3a:5a:d7:60:a8:7d:d4:5c:fa:70:
                    8f:ed:d6:ed:a5:b4:61:ee:11:25:57:34:7e:e9:3a:
                    8e:ab:39:b1:e4:1d:87:b6:e5:ca:2b:60:b3:b4:a4:
                    86:9a:72:8c:00:dd:a8:ca:de:d0:28:6b:ab:50:cd:
                    83:47:c2:27:be:27:d5:9f:0f:d1:a1:df:63:17:c6:
                    63:9d:14:d3:03:bf:9c:22:c4:7f:2d:c6:3a:9f:49:
                    1c:48:7c:2a:6c:a5:fe:81:52:a8:c2:fd:e8:aa:20:
                    19:48:a2:c0:e3:57:7c:04:6f:62:db:bb:c6:c3:1f:
                    91:44:e3:13:df:0a:e3:0f:88:8d:03:8b:43:26:49:
                    14:98:25:57:28:94:e0:ae:be:db:74:04:b2:ee:ef:
                    27:fc:a2:7e:c6:71:97:e6:4d:59:7c:01:5f:bd:ad:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:FB:32:82:D4:88:78:B4:63:B4:52:F2:E8:C5:3A:39:10:E1:0D
            X509v3 Authority Key Identifier:
                keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:16:ac:a9:a3:a8:52:f4:f8:2c:9e:06:0f:3f:80:d4:02:b4:
         87:be:b0:54:43:4f:8b:1d:08:2e:7c:81:e3:8f:1f:f2:63:97:
         ca:50:a6:42:a3:7e:d5:b2:33:18:9a:1b:0d:3d:43:52:d2:d1:
         ef:a6:63:ae:61:b2:af:28:1c:2d:87:79:b2:61:c1:05:63:08:
         c4:d4:22:2c:ca:90:d9:b3:8b:47:96:cd:93:1c:18:c6:cb:07:
         af:6b:f0:56:bf:b6:e1:4f:c4:9d:c6:1b:e4:fc:1a:bd:30:25:
         99:9c:9b:4f:35:5c:40:00:10:5f:a5:c4:8d:57:a5:64:41:52:
         ef:99:83:07:d9:6a:11:c9:7c:ea:13:c3:06:59:3a:bb:1c:ce:
         ed:62:83:50:b0:44:2c:95:04:33:d8:54:5b:be:41:ad:33:ee:
         1d:7b:7c:14:d6:ae:9f:48:cc:18:42:a6:bd:3b:c0:0c:dc:ce:
         20:4f:fe:f3:7f:40:6b:de:bc:ad:e9:8f:e5:e5:dc:c3:83:0f:
         9e:06:05:27:68:4d:ee:11:73:96:45:2e:52:39:12:43:bc:45:
         9c:46:20:87:6c:ae:cd:83:59:23:29:c6:e0:ba:c7:28:78:a8:
         75:6f:db:7f:e0:61:25:11:f2:3e:99:38:dc:e9:e3:27:1d:95:
         e4:e4:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----