Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File:                     vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier:          D6ow69rJb7OARRiJE/wn4cS2oGUxAw1jLTSz5BN04bw=
Subject key identifier:   C1:80:79:5B:61:4E:55:7D:BD:9A:8C:8D:ED:F9:89:E3:F1:DF:65:63
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer:       /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial:       01962E61CC522A31A90D68BA3A0BB93EAABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number:          0814
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: qUq_q62qYu3qxVOMe_F0xihpmUw.roa (hash: SovqRJc4ePvthgrrsQXCalBtYnWMU+TdM7o0xgmwIiE=)
                          2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: LpwlZIpdVYXx9sRB4yHhmU1xwlwxff75gzCFdpTKzKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:52:2a:31:a9:0d:68:ba:3a:0b:b9:3e:aa:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=c180795b614e557dbd9a8c8dedf989e3f1df6563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:2f:79:7a:a9:b4:bc:68:55:f8:e3:db:be:
                    aa:fb:33:c0:1b:b9:7d:54:7f:5f:0f:85:0f:76:8a:
                    1e:31:15:eb:d7:ac:5c:c0:90:9f:02:de:9f:ad:92:
                    30:2f:84:b7:20:e2:3d:37:85:d6:f9:bd:86:75:2c:
                    53:7c:f0:47:66:b7:0e:16:c9:82:e2:aa:45:c5:11:
                    d0:ac:b5:44:d3:03:f7:67:3e:43:b1:9f:cb:e3:21:
                    67:2f:78:5f:e9:e1:c4:2d:3e:9b:68:9c:21:5a:1a:
                    48:c3:a7:9e:a6:ad:2c:fb:df:cb:73:c1:e1:00:bd:
                    10:c3:ca:91:5e:9a:fb:66:a6:89:f3:fe:42:ae:8b:
                    bc:64:1f:74:d1:ce:8a:c4:c7:0b:d2:cb:7b:2c:c5:
                    6b:94:33:3c:01:a0:3a:33:7d:0a:3b:09:08:23:dc:
                    98:48:22:1f:86:7b:4e:ad:7b:07:7e:91:d3:44:47:
                    6b:62:6b:5e:cc:e6:b1:a0:e8:dc:3c:63:2f:50:5d:
                    22:79:e8:37:2b:19:e3:a1:bd:fc:bf:bd:80:be:b7:
                    b6:c2:36:bb:86:37:9f:d3:9e:53:f0:eb:ea:3b:17:
                    69:ef:68:ca:39:d9:e6:b1:97:54:3f:c9:ad:14:ee:
                    4f:66:fb:46:08:bc:ea:33:f2:b6:29:cf:ae:b2:1f:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:80:79:5B:61:4E:55:7D:BD:9A:8C:8D:ED:F9:89:E3:F1:DF:65:63
            X509v3 Authority Key Identifier:
                keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:50:9e:75:87:3d:5d:57:81:0b:23:2f:a6:31:1f:99:20:
         3f:b9:e7:13:32:a1:06:f9:ea:7e:af:b4:95:1e:53:2c:43:7a:
         58:27:a4:89:52:33:8b:61:f6:b0:4d:29:21:17:d9:fd:b0:31:
         4d:ae:a1:65:ad:18:a5:72:fa:32:ae:55:81:c7:4e:df:20:b0:
         09:f4:61:8a:78:21:25:f9:00:d0:70:3d:6d:a8:8f:dd:a1:4f:
         bd:92:d6:9a:5c:2c:1c:2a:81:aa:8c:fd:06:4a:ce:2f:8c:88:
         9d:5d:46:32:2b:b9:33:5a:f4:7f:04:35:b6:1d:36:37:b1:ad:
         05:38:f4:91:5b:50:7c:c9:02:10:16:0e:78:c4:f9:00:c0:67:
         ef:a3:ac:60:e7:3f:53:e7:1c:a3:1e:6b:66:be:a7:4c:27:e5:
         56:45:6d:11:64:32:6e:69:bc:6a:1c:aa:61:f2:13:0c:b3:a0:
         92:56:cf:1e:f7:f5:8f:73:2d:d3:c5:9d:e3:d1:34:30:4e:b6:
         7a:89:07:30:bc:72:0d:bb:4f:10:61:87:92:c3:2c:ae:a0:2b:
         01:94:07:b3:3f:e9:77:a0:ad:88:9e:79:e0:39:78:bf:76:de:
         0c:55:fa:14:c9:8c:0b:97:3b:a2:23:84:29:fd:1e:a6:1b:33:
         64:c8:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----