Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File:                     Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier:          MnaQXhLyxe2t2bIH9fym5C1bBxK4Ldf5KL5tkyPSAh8=
Subject key identifier:   0A:C8:88:27:41:E9:84:71:CA:42:F2:1E:65:CC:03:0F:A5:20:99:61
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer:       /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial:       01962E61A92B876A6E41922A9711403C6421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number:          05B6
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: hsTdXoXN4yn/XWA/oOkZk1P/cZQ50cIzE8+QybnI7Ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:2b:87:6a:6e:41:92:2a:97:11:40:3c:64:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=0ac8882741e98471ca42f21e65cc030fa5209961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:14:7c:7a:81:ac:05:53:3c:7e:28:5c:f9:
                    a8:4e:7a:ef:40:29:e8:5e:57:71:5f:7c:3f:ef:a6:
                    68:28:9d:eb:3a:15:eb:db:e5:f2:c4:cf:13:d8:2c:
                    3a:92:3f:60:f1:e0:ed:77:05:cd:29:55:21:fe:83:
                    75:8d:14:36:6f:3f:29:5d:6d:78:fe:89:17:0c:49:
                    77:75:67:71:97:88:ce:49:73:9c:e2:37:73:d0:9c:
                    f2:f1:fb:79:6f:ed:05:76:77:36:9b:f9:19:88:6b:
                    67:81:c8:51:62:d0:92:90:49:3f:0c:1d:91:b7:a0:
                    c3:30:eb:8f:f4:17:2c:0d:99:f0:97:62:b1:58:88:
                    21:a8:50:e6:b9:e9:91:13:7a:59:2f:a3:ca:a5:27:
                    d8:64:f3:93:49:11:4b:22:2a:aa:70:58:8a:d9:e3:
                    92:ea:a6:8e:99:bd:7c:e4:b5:92:a7:73:bc:ee:3f:
                    08:0a:c6:80:a4:e0:28:e5:26:44:9f:5f:89:0c:1a:
                    e0:6c:c4:10:4f:e6:dc:a2:9d:7a:9f:3c:3e:d8:44:
                    20:28:57:e0:f7:20:b2:a3:cd:56:72:20:24:04:1d:
                    93:e9:f5:ea:84:51:17:e2:f6:05:69:26:30:e0:b3:
                    6b:17:35:0e:55:83:6c:ae:16:4a:58:a6:dc:d3:f4:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C8:88:27:41:E9:84:71:CA:42:F2:1E:65:CC:03:0F:A5:20:99:61
            X509v3 Authority Key Identifier:
                keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:92:c3:a1:2e:d0:4b:c5:ae:1c:56:f9:e5:20:7e:88:d5:
         8a:1b:63:a8:3b:b2:f5:23:57:2d:3c:0e:f2:ed:f6:d5:99:da:
         e7:a2:7b:ba:79:10:9d:61:94:ac:b1:2f:09:89:52:b3:c0:dd:
         5e:2e:8c:38:8e:e7:5c:21:6d:5a:be:de:6d:e0:85:5a:db:5d:
         cd:a6:c8:00:a9:04:39:45:60:20:5e:77:7a:84:b0:b0:a4:d5:
         ba:ae:9e:1a:59:ec:ba:bd:c9:e2:36:7f:a2:7c:54:78:81:2d:
         66:f2:ae:b0:92:1a:21:c8:2c:2c:ad:85:de:5a:85:50:56:3b:
         49:96:9c:93:5d:61:b2:1c:cd:89:d5:f2:d0:c4:aa:89:db:c9:
         df:39:cd:59:6f:36:26:02:0b:4f:13:20:87:58:ae:6e:f7:40:
         34:7f:f9:f6:6f:ac:11:e1:34:b4:ce:a7:ba:92:b7:12:c2:85:
         4f:70:2d:88:cf:94:da:95:60:ac:e6:c5:be:3e:cd:ac:eb:91:
         fd:55:2e:22:04:bd:6f:f8:a5:c1:aa:e2:70:80:0e:05:f7:5f:
         25:75:88:b1:c8:06:4c:a6:85:a6:97:fa:34:41:4f:ec:c1:52:
         f9:f7:4b:a5:8b:32:63:06:07:0e:82:64:38:ee:55:71:b6:93:
         dc:2c:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----