Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File:                     vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier:          fnRCKgJ6F4dZwpUQ026eycwcQ0aH0wjyIuOX9XckV3g=
Subject key identifier:   C3:06:A3:BB:8C:C0:86:F0:58:6A:2B:91:EA:3C:1C:CB:F0:F1:94:F4
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer:       /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial:       01962E2AE528B5D70964CEE535A71AE3B097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: El3p2z/RUtEmBCOgGeo0Yxnlk9A+v/SmXG6M2+X7huU=)
                          2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e5:28:b5:d7:09:64:ce:e5:35:a7:1a:e3:b0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=c306a3bb8cc086f0586a2b91ea3c1ccbf0f194f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:f6:2d:27:61:60:6e:52:2b:21:67:1a:88:
                    af:c5:65:c1:dd:ee:ca:7a:cd:eb:6a:b2:8d:32:42:
                    1d:fc:96:16:5a:a2:06:70:d6:da:0d:85:ad:d3:52:
                    3c:98:5c:43:c7:49:91:60:c9:7d:b7:79:d3:bf:18:
                    35:7d:db:f7:1d:ee:aa:a9:24:e0:97:e2:c4:9b:5c:
                    9b:a2:1f:dc:2d:93:51:35:9f:3b:01:9a:a7:5a:4b:
                    f9:4d:4d:0c:32:1d:a2:ae:77:3e:37:ef:76:9f:9b:
                    03:e8:97:78:b8:e1:e0:91:82:8f:6b:f3:e5:fb:2c:
                    7e:66:80:f9:87:a7:e0:fa:00:ec:91:0a:f5:48:e1:
                    47:c0:37:94:96:33:c9:d7:e1:c8:46:d2:73:94:8f:
                    90:7c:b9:6d:24:4a:78:49:f2:1c:3b:9d:64:3a:fc:
                    a5:8a:14:22:48:75:b9:db:d6:9b:49:54:e3:9c:03:
                    8c:c1:9d:d9:b6:f2:8f:53:81:23:3b:70:f2:5d:9d:
                    e7:b0:78:a6:52:82:99:a4:db:e9:4b:03:f3:8c:72:
                    e1:10:6c:0f:3a:8c:3e:e5:b0:bf:67:1b:d2:36:24:
                    0a:b9:8d:47:3d:fb:bc:20:26:c7:5d:74:67:07:9d:
                    e0:3c:52:71:ff:6e:ed:31:60:83:ec:40:44:8b:f9:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:06:A3:BB:8C:C0:86:F0:58:6A:2B:91:EA:3C:1C:CB:F0:F1:94:F4
            X509v3 Authority Key Identifier:
                keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:de:27:d3:09:c7:39:e1:49:3c:ef:5b:d7:68:cb:9c:ea:
         7c:4a:61:75:58:65:54:6d:5d:d1:d7:00:cc:55:b6:35:ba:75:
         b1:96:76:b2:d3:ef:7f:0e:83:29:9c:c6:8b:71:84:99:cc:86:
         25:e5:e7:15:84:fe:68:0f:57:e0:19:b8:85:37:67:ad:07:1c:
         f6:0d:34:39:de:c7:9e:55:77:71:12:c7:c1:8f:74:ad:3b:2e:
         d1:72:e9:12:f7:e8:bb:41:f8:bf:2b:93:ce:e2:e0:d1:a4:97:
         96:87:5c:42:52:a5:71:e0:34:04:bf:29:67:7e:c9:dc:a9:2b:
         15:c4:cd:72:35:69:5e:eb:7e:8f:9e:59:f6:c3:91:29:7c:4b:
         71:2c:72:50:32:86:59:34:2e:a3:55:59:f8:40:86:99:69:d6:
         f6:6b:1c:e0:76:85:bd:eb:54:ae:4a:67:82:0b:57:e1:f9:fb:
         fb:48:69:96:69:00:6b:bc:d5:a8:33:87:fb:38:2e:51:68:a1:
         9f:68:7e:1b:d0:55:1d:bf:d5:c9:41:5e:2f:2f:18:1e:50:35:
         aa:0f:74:d6:c7:44:ab:8e:45:dd:05:b5:4a:66:0e:3f:a0:a2:
         df:08:a5:97:8f:58:3d:1f:93:54:a0:c6:46:a1:f0:0e:91:ed:
         78:04:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----