Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
File:                     v4F9yFUt82EP_EVEGz-BRk5Incg.mft (raw, json)
Hash identifier:          jcTrFMIG5sHJQwlemPTjJ0OemDPUIR/HbJUZvWippWA=
Subject key identifier:   49:AD:FF:7E:B9:2C:EE:23:76:B0:D1:4B:57:41:02:64:4A:77:30:83
Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Certificate issuer:       /CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Certificate serial:       01962ECF70C5CA0ADA3B744B661304FCE253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
Manifest number:          06BA
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 36ETTT31Rv9Wj7u6PqyJTy0CjDw.roa (hash: tx94g3vqrXkgyvU4ElzQ7jsADUb8XlCc6Q0poIVPLl8=)
                          2: v4F9yFUt82EP_EVEGz-BRk5Incg.crl (hash: AxEiF82hm1gjpua4+0JEBLgqJ50mMNAxr11e+he97V0=)
                          3: w6CIFsXhe3gJ8pF9EHg-adXDS5c.roa (hash: G5Kk3492Lln+8yGKEbYcF38b0XZXBFYUAf9aIet6yWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:c5:ca:0a:da:3b:74:4b:66:13:04:fc:e2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=49adff7eb92cee2376b0d14b574102644a773083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:86:82:e9:04:c3:d6:91:bc:e6:20:fa:ff:
                    f0:3d:8e:6f:61:bc:ca:ed:93:fb:0d:c2:f5:99:6a:
                    f4:80:03:9c:78:73:bf:dc:42:0a:ba:60:3f:1e:0e:
                    39:c3:a5:b0:e6:12:1c:11:ef:18:4c:b9:81:d8:ad:
                    4f:4e:6b:4e:a5:79:65:78:2b:16:32:51:1b:75:4a:
                    72:0c:ea:9f:84:c5:20:bf:e0:0d:23:50:fd:be:b4:
                    9b:66:ce:df:68:db:ef:24:5f:1b:1d:bc:4d:de:1c:
                    3f:41:6d:1d:a3:f4:f6:25:27:80:92:a0:b5:0e:08:
                    bc:3c:66:f1:b1:72:dc:a0:26:07:86:43:39:8d:ea:
                    6f:1d:12:97:cd:79:66:ee:86:03:69:d0:3d:f0:fd:
                    96:a7:3b:e4:96:d3:82:47:bf:73:f2:0a:0a:ab:4f:
                    f1:64:b1:a5:fd:23:65:9f:f9:3f:af:8d:58:36:92:
                    10:db:2e:71:e7:ee:ae:89:5a:b9:9e:2a:15:24:4c:
                    f1:a9:d4:db:ee:0d:55:99:7e:70:7a:8a:2e:c1:fb:
                    7d:c8:bd:78:66:a1:ed:49:59:0a:8b:5a:17:c3:fb:
                    a2:f0:40:42:88:c2:2d:c1:7e:4f:1d:dc:76:58:63:
                    bf:b0:9d:9d:91:8c:ad:4e:97:d3:88:f2:b2:93:45:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AD:FF:7E:B9:2C:EE:23:76:B0:D1:4B:57:41:02:64:4A:77:30:83
            X509v3 Authority Key Identifier:
                keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:32:44:b6:c5:fb:a1:18:e4:75:3c:6c:0c:d7:30:8f:eb:d5:
         ca:9b:b7:13:a6:c3:9d:1f:f8:e1:a5:b7:41:e7:d0:c1:19:ee:
         1d:5c:a7:c8:94:08:64:3b:0a:fa:a3:61:62:65:0b:ff:76:e0:
         26:fa:60:1f:25:30:19:e9:a3:70:cd:bf:b3:ee:5a:f3:46:1f:
         ae:ae:7c:3d:91:0b:9b:e8:8e:a4:32:13:61:b8:29:d2:8f:2d:
         d5:98:cb:59:6d:7c:3b:c4:86:c2:1b:7f:0e:74:0a:d1:b8:29:
         f1:3b:32:7a:a7:9f:45:4a:74:6e:ed:fd:ea:de:e8:5f:b1:0e:
         61:1c:9b:17:4f:76:13:b8:c3:43:0c:eb:98:be:bf:68:9e:97:
         ee:d7:59:e6:57:be:5c:70:6e:42:f4:bc:36:77:40:88:fe:96:
         42:75:b6:26:2e:ba:3c:f3:9c:9a:40:43:5a:25:85:01:32:3a:
         ce:75:94:44:13:3d:d0:70:42:e3:83:8d:06:6c:ea:d7:76:47:
         d1:f8:8b:3e:9e:b4:7e:0d:de:7c:e4:c5:1c:9a:c4:d0:fa:26:
         f7:4d:9f:e4:88:04:98:49:01:4f:f5:55:09:18:36:ba:b7:38:
         23:46:10:d6:06:e7:97:79:06:cd:8f:40:74:75:51:3d:1e:0a:
         ab:37:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----