Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
File:                     vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft (raw, json)
Hash identifier:          QSVdQhnHXamYTNo/cbZF5LwH6anYFjy+GkjdPmpjYA0=
Subject key identifier:   AF:CD:83:C9:D8:3E:C2:9C:EB:AE:C7:84:6E:88:C3:74:1F:B6:9E:63
Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
Certificate issuer:       /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Certificate serial:       01962FAB14E0BF88E452579BE2F5CC3AFE0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
Manifest number:          0766
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 2ea_Ght-OBVvtgKuaEhUjFGnCIo.roa (hash: dArjpyisxrgvkT5h9NbQ4Zg16ShXRNvAx7t0mMervEs=)
                          2: vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl (hash: kJu8zhUgP+W6TMOz/RJbjGjoPWXj1SUGnsm3H1+H8R4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:14:e0:bf:88:e4:52:57:9b:e2:f5:cc:3a:fe:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=afcd83c9d83ec29cebaec7846e88c3741fb69e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:2b:41:ce:29:a1:0c:58:da:0a:f3:41:ce:
                    90:3f:de:d6:a2:49:ad:3e:c2:63:40:cf:ab:6f:7e:
                    41:75:6f:48:c9:01:ac:15:b1:0c:cf:c2:b5:51:e1:
                    a3:18:2c:85:2b:73:7e:1d:a9:7c:5f:ea:1e:91:44:
                    cb:03:83:3e:33:89:76:64:53:00:6b:ba:9c:3a:6b:
                    aa:07:0f:ff:1b:6b:df:04:aa:b3:e8:aa:c0:9c:f1:
                    16:03:d6:00:d2:06:19:26:5a:6b:c1:53:5a:82:89:
                    1f:92:b4:2b:66:79:95:fb:78:51:ad:fe:44:19:52:
                    95:e9:18:8a:f1:aa:14:fd:7a:6c:ae:f2:45:12:2d:
                    5f:d7:27:da:de:3a:94:99:81:11:f1:70:14:cf:55:
                    1f:1b:b0:1d:11:bc:14:22:b8:1d:4b:c3:2d:41:3b:
                    4f:98:68:be:bf:96:6c:7b:db:38:c1:ae:00:1b:c2:
                    3f:25:31:b2:91:a0:ec:fa:c8:00:0d:0b:4b:9c:fc:
                    58:ad:0f:4e:23:4e:53:ec:ad:ca:9d:f5:9e:12:bf:
                    96:19:d8:a5:d5:50:7b:83:99:0a:86:a8:d2:25:71:
                    83:6d:f9:12:b3:30:fb:5b:6d:b2:f6:00:63:63:52:
                    36:6c:d2:a3:28:4d:88:7d:7c:8f:29:f4:35:4b:59:
                    07:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:83:C9:D8:3E:C2:9C:EB:AE:C7:84:6E:88:C3:74:1F:B6:9E:63
            X509v3 Authority Key Identifier:
                keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:8a:53:e3:8e:6c:f7:1c:96:39:68:f3:c7:fc:78:af:92:
         76:88:52:11:d4:d9:94:c7:16:09:51:e3:e5:1a:86:bf:c5:d6:
         2c:3b:fb:d3:9b:3a:9b:9e:1f:72:39:21:bb:37:d9:7c:5f:f3:
         be:a4:61:b0:04:92:0f:09:66:fb:5e:c5:c0:9d:79:57:2a:10:
         87:e0:eb:c8:5c:ff:ce:20:9c:38:1f:58:e3:06:d6:3d:b5:49:
         e8:dc:30:82:0f:df:8a:64:a7:7d:84:d6:9d:a4:2d:47:be:04:
         6c:e2:86:88:f5:d5:ce:ed:12:5c:a1:84:67:f5:70:1f:13:a8:
         00:e5:1d:4d:17:f2:14:b0:21:be:76:f5:c2:2d:10:5b:48:aa:
         ab:87:b9:85:d2:74:6a:a2:41:df:90:94:fa:be:86:07:cb:b9:
         c6:8c:b0:9f:52:ef:3f:4e:c9:2a:63:33:10:da:e6:8c:af:99:
         d6:81:84:67:9c:a9:13:a8:3b:e7:5d:57:ae:54:13:cf:82:b2:
         94:16:23:42:f8:11:ec:a6:61:79:10:f7:cb:9c:57:2c:32:d5:
         d4:d2:eb:23:90:5e:42:4e:1b:b4:fa:d0:9e:3f:03:97:6f:a0:
         4c:ce:e4:10:e5:ca:4f:e4:45:54:16:eb:31:3f:e0:93:81:fe:
         a0:7f:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----