Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File:                     vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier:          uXar8/3SDRqs+7jDUvM6h8+aEA/AeJJf9TwoVlWFBEk=
Subject key identifier:   25:7F:01:0B:B5:35:7F:C6:E2:FD:E5:FE:BA:29:E5:76:70:28:56:94
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer:       /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial:       01962E98D5168F08708F58D158D7BEA7BAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number:          111E
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: 496EzMZWfv6TdRuwaZ6/Lka4V13/zyXXKFhDnb92WR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:16:8f:08:70:8f:58:d1:58:d7:be:a7:ba:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=257f010bb5357fc6e2fde5feba29e57670285694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:0a:44:c8:d9:c3:07:f6:63:a7:1b:dd:04:
                    d5:d2:fa:bb:fd:55:ac:49:4a:b1:27:cc:e2:81:54:
                    79:18:ca:38:fa:17:98:ed:18:ce:56:f1:a6:1e:bd:
                    d4:63:23:31:e7:8e:42:46:21:f7:56:04:ad:3e:2f:
                    53:85:0c:19:b0:64:27:42:c0:ad:08:86:47:b3:41:
                    bb:e2:d8:ab:cf:86:c2:c3:20:fc:15:71:21:b5:c8:
                    24:c6:21:1a:80:66:73:81:a0:af:22:58:c2:68:bc:
                    d6:7a:0a:6f:32:04:bf:4d:84:c2:ce:63:9d:6e:a9:
                    a1:a8:8e:3e:a4:3b:bb:36:73:e3:3a:44:ea:1f:57:
                    ed:f3:0f:c0:6b:51:09:f1:d7:55:14:e8:96:a0:f0:
                    5d:2e:f4:47:78:16:42:29:6c:d1:4c:c0:c3:2a:84:
                    49:33:0b:47:cf:c5:c9:e2:82:bc:c1:0a:57:c2:fe:
                    46:55:db:24:74:c2:07:38:10:bd:83:b3:d2:4e:41:
                    bb:0b:c2:39:77:53:3f:93:15:f3:02:c7:4d:e0:18:
                    ac:a2:ed:48:57:70:c0:7b:93:13:03:76:1d:7a:a2:
                    7b:cb:88:62:8a:66:07:b7:0a:e5:37:82:cd:f6:7c:
                    49:6c:9b:b8:fe:32:c9:b9:4d:16:e3:26:ab:d5:67:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7F:01:0B:B5:35:7F:C6:E2:FD:E5:FE:BA:29:E5:76:70:28:56:94
            X509v3 Authority Key Identifier:
                keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:33:77:55:04:7b:4c:e7:e9:52:83:4e:50:7d:99:74:19:b3:
         fc:90:c7:57:dc:12:3b:49:a0:4e:e3:d4:f9:4f:4d:8b:4a:bc:
         e3:59:51:7b:a5:d0:e9:2e:54:92:fd:b1:aa:e7:c7:ba:4e:bb:
         5b:ff:bf:c9:42:74:fa:3b:d5:6f:df:19:07:62:ef:35:20:82:
         28:70:8e:7e:b8:3f:dc:b3:61:d0:e5:ec:e1:1f:75:84:56:8e:
         a7:31:2e:c8:3a:a0:27:18:f0:c2:35:a3:26:0b:27:d2:72:75:
         60:7b:6b:ad:f0:d1:db:8a:6c:7a:f9:05:80:e1:81:3b:ab:10:
         d2:b4:52:3d:60:5b:91:a4:77:d0:b4:c7:72:b4:44:91:b8:64:
         7e:3a:10:0a:e4:ff:b0:3c:df:8e:be:00:4b:8b:a1:58:1d:cc:
         7a:0d:55:29:05:ff:f6:30:28:5c:0d:c0:ed:9a:0e:b0:9d:8e:
         dd:19:d4:92:71:f9:8c:34:5e:33:9a:27:da:cf:8f:4e:2e:e3:
         e5:d9:2c:9f:f5:e0:30:df:28:88:d7:ba:ea:c1:4e:8c:8d:cb:
         f0:29:cf:04:85:0f:76:72:68:4d:e1:ec:c7:29:1a:19:80:65:
         3d:35:4f:48:33:08:1a:24:2e:58:ed:bb:83:93:0b:30:18:60:
         59:d4:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----