Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
File:                     vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json)
Hash identifier:          EyjYlF21joWMOIwECEfrQ1UQmZ/tWvud630mVP2qr6M=
Subject key identifier:   30:6F:92:3C:E6:95:75:23:9B:E1:FD:EA:3F:03:EB:2A:31:93:ED:AD
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Certificate issuer:       /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial:       01962E61B6C7851384EA4CD8DB1729CBE653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
Manifest number:          0429
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=)
                          2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: sM1p2LPDHi+JqFKgn8l2vQ/eqWMxE+L218LLPaw9V14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b6:c7:85:13:84:ea:4c:d8:db:17:29:cb:e6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=306f923ce69575239be1fdea3f03eb2a3193edad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:91:c0:96:09:68:7e:cd:b5:89:1e:69:f7:
                    52:13:cf:1a:03:6d:74:49:f5:b5:d4:92:24:87:95:
                    ce:fa:8e:dc:92:0c:e6:a9:de:d2:62:db:26:5e:db:
                    d7:45:d6:b2:ca:7c:48:66:ef:15:0b:5d:59:2c:99:
                    ea:df:fa:c4:54:d2:7a:74:ee:42:07:b7:5f:11:8b:
                    d5:90:ed:7a:9d:fd:48:3e:31:ae:46:ff:3c:5f:1b:
                    f4:00:5b:76:d1:f4:3b:01:34:81:a1:73:d4:5c:84:
                    86:aa:cb:a6:f4:a3:8a:02:5c:0b:d9:4f:e1:d1:31:
                    94:1a:b6:ef:83:36:ef:82:5b:fc:89:9e:7f:2d:bb:
                    b2:7a:aa:36:38:37:df:bb:a3:56:a5:d7:93:0c:fc:
                    a2:03:18:d2:b7:b6:83:fa:84:e5:db:60:29:2b:9d:
                    a7:0e:0d:f8:8e:a9:f6:30:32:5d:0e:d7:74:41:52:
                    39:13:3a:f5:4e:ba:87:16:05:7f:c6:ad:ce:e9:84:
                    28:c0:79:dc:85:b2:df:f7:b8:06:8c:14:65:b9:1f:
                    a1:37:01:43:ce:5b:09:7f:86:b8:74:a4:29:f1:04:
                    c1:fa:25:ae:f0:e3:94:36:34:ba:a2:8c:73:68:32:
                    ab:ea:35:49:63:48:53:ae:e7:bb:bb:74:aa:ec:0e:
                    02:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:92:3C:E6:95:75:23:9B:E1:FD:EA:3F:03:EB:2A:31:93:ED:AD
            X509v3 Authority Key Identifier:
                keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a8:a7:6e:7b:d8:ee:40:43:95:c4:26:fc:d9:cf:4c:3a:2c:
         10:6c:ea:9c:dd:aa:3d:57:13:b3:fc:9c:01:27:ec:68:e2:3d:
         d8:bd:d0:58:bc:d0:9b:f2:80:9b:ee:90:78:c4:68:41:72:29:
         12:8c:e7:63:d3:4c:df:54:59:7e:b3:ae:fb:83:8d:67:8f:b0:
         09:61:04:2c:39:3e:8c:9c:9f:a2:f1:68:8e:08:78:54:d4:90:
         8e:c3:09:b6:a7:9d:85:7d:37:d4:3e:fc:83:d3:74:9e:4f:d6:
         97:a0:3d:72:58:80:7d:49:6d:21:90:19:89:87:e3:8e:2d:b4:
         51:55:37:41:13:88:aa:77:b1:70:54:b9:49:3c:b7:b4:f0:2f:
         79:31:ef:05:a3:ac:54:98:8b:ee:44:8a:69:ac:9d:fa:66:b6:
         e2:f2:dc:ff:0e:01:46:56:a4:13:12:6b:e6:9b:21:2a:5e:94:
         41:db:7c:3e:61:60:35:37:11:e5:47:8c:00:e5:22:a3:aa:8b:
         ff:d4:ff:d7:1a:42:6d:38:98:22:f4:16:7d:7b:31:74:bb:02:
         fc:f1:4c:4b:f4:12:0e:0c:00:7f:27:17:51:0a:c4:51:af:b2:
         c4:91:00:86:7b:cc:a9:49:c5:d8:e0:54:be:80:b5:c2:b3:77:
         8b:cd:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----