Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File:                     vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier:          SDZIGnvyOgVUQSfnlV/6wR0K7eWZwiB/97cWiXi9iyA=
Subject key identifier:   7F:6A:F1:A0:7A:26:88:0D:2F:56:87:D6:7D:A9:EB:8E:FF:D5:8B:09
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer:       /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial:       01962E61EC4A7FF1B496D8823486EA68D3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number:          102C
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
                          2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: JMNeNUHsuM1dP/uYOJCc55rMYA6QvlX2mCVn4e+aBWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:4a:7f:f1:b4:96:d8:82:34:86:ea:68:d3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=7f6af1a07a26880d2f5687d67da9eb8effd58b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:cd:61:b6:9f:e6:92:08:57:f0:5c:f1:42:
                    5d:99:93:03:01:e4:e5:8f:6f:ec:7a:b7:c5:d6:72:
                    e6:ce:0f:d4:51:a6:ce:20:22:32:90:ad:14:85:23:
                    dd:a2:bf:35:fe:77:b5:bd:f6:25:38:ba:dd:aa:bd:
                    99:62:db:7f:21:c4:17:0d:41:9d:a5:01:c4:95:3e:
                    ff:f4:87:90:b0:4d:0e:90:c2:ee:8e:87:86:a7:87:
                    6a:87:e4:14:dc:93:e5:57:b8:8c:5b:00:75:0c:0b:
                    80:18:78:83:59:30:b0:cb:5c:1e:4a:b7:91:15:8b:
                    a8:0d:22:1e:93:8a:16:23:79:89:69:87:50:15:b1:
                    83:3f:fe:99:15:45:29:f6:eb:fc:75:bb:63:0b:0e:
                    16:2d:bb:aa:4d:5a:ba:73:e4:35:03:f4:7d:8e:20:
                    25:b2:66:16:d8:09:d6:d4:5e:8c:1b:70:34:0e:1f:
                    49:37:7b:9d:8f:0c:12:5a:94:59:a7:0e:35:ad:f1:
                    66:87:01:26:ad:5b:15:e8:aa:63:e2:54:5a:5b:d1:
                    a1:81:c4:66:26:9e:43:d6:e7:44:be:ef:ef:be:34:
                    5f:8a:23:2b:ce:ca:7f:c2:2b:20:80:5c:5a:26:87:
                    10:db:73:8b:5a:52:3a:5e:b2:21:62:99:cb:ef:ea:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6A:F1:A0:7A:26:88:0D:2F:56:87:D6:7D:A9:EB:8E:FF:D5:8B:09
            X509v3 Authority Key Identifier:
                keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:76:84:2d:13:6f:59:d6:56:1c:50:58:fa:b6:c3:6c:09:
         f6:e8:6b:08:9e:61:d8:7d:51:3b:1b:3d:3d:4f:21:60:de:e8:
         cd:e7:6e:d6:18:28:f8:79:86:39:a4:31:92:19:80:b5:54:63:
         f5:5c:eb:e2:dc:3d:3c:8c:13:00:b1:db:4a:17:40:4c:e7:bd:
         60:91:12:df:4e:4a:a6:19:f2:2a:1b:25:6b:31:5b:b4:63:05:
         e4:1a:c4:59:ce:3a:17:17:6f:f0:ea:27:81:3f:83:2e:07:fe:
         6f:ca:ad:8c:8d:70:73:92:74:77:ac:4a:f9:9a:75:dd:0c:6c:
         cf:f6:ea:0f:a6:8b:13:af:2d:3e:97:06:c6:77:78:6f:54:0b:
         da:91:5c:d8:b7:e7:af:bc:69:b6:8e:6c:90:f1:be:f5:5c:17:
         69:e3:90:18:fd:b7:61:af:9f:6e:c3:69:ce:d0:41:7d:ad:b7:
         ae:28:22:71:eb:f0:fa:a8:d3:9e:c0:0f:ed:ba:4d:e3:e6:99:
         3d:50:f3:62:ab:97:00:10:57:13:7c:4e:27:90:71:d8:d2:f1:
         6d:69:e9:9d:1f:84:65:fc:97:89:7e:eb:5b:89:00:eb:10:32:
         7e:c5:fa:c8:b7:2d:88:81:36:fb:b1:76:b1:f4:13:66:6e:be:
         dd:27:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----