Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File:                     vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier:          7YtKjigohVttY8CIRyttu243Rr3o1s+VARU/0zlTe3A=
Subject key identifier:   A8:BD:57:A7:88:73:87:04:14:57:60:7E:A1:C2:29:0E:3C:82:A8:AD
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer:       /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial:       01962FAB6BF2C16B5633A0634F55E4E3A739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number:          0AF0
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
                          2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: pF1b7+rBNe+qYmv55cSBKisBY2HgLceZNTaHTZ4tQr4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6b:f2:c1:6b:56:33:a0:63:4f:55:e4:e3:a7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=a8bd57a7887387041457607ea1c2290e3c82a8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f6:39:da:19:50:9a:0f:5d:a4:8a:9c:4d:bb:
                    e1:bf:22:c3:e5:d4:89:69:be:2e:ce:87:e1:e5:49:
                    4b:60:a9:f7:98:b0:d6:5c:8b:3d:f3:f6:8e:8c:20:
                    f7:56:94:a7:0f:df:dd:5f:00:9b:1e:23:8d:f1:9d:
                    22:21:b2:a4:f8:b9:eb:0d:2d:90:17:1f:c3:24:fa:
                    db:cc:8f:32:14:18:60:63:1b:0b:df:1a:67:c0:7d:
                    89:bd:0f:22:06:62:65:4b:fc:a5:18:47:1d:ce:2c:
                    f8:fd:e8:be:7b:fa:d8:e3:dc:e6:54:7b:b7:f7:c9:
                    f6:a5:02:c5:33:b7:7b:16:80:e6:85:f1:cc:82:41:
                    a3:b9:ff:bd:fb:d8:29:37:5b:67:c0:28:45:ad:e0:
                    7d:8f:26:74:99:c6:66:c1:c5:6f:42:d8:5a:4a:8d:
                    fe:30:4f:7a:72:19:52:39:d8:0e:04:dc:69:2c:15:
                    39:6a:ec:3d:bf:ad:9e:1d:e6:9a:85:c7:25:8d:e1:
                    b0:d5:4f:b0:02:6a:61:61:8d:d3:4b:4f:65:5e:bb:
                    d7:53:e8:40:62:a2:dc:93:3f:df:f9:a7:30:88:34:
                    d3:58:af:9e:30:44:bf:97:fa:85:71:e4:b0:ed:ba:
                    42:75:02:99:65:ab:f1:9f:ee:fa:ed:f9:d9:d7:68:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:57:A7:88:73:87:04:14:57:60:7E:A1:C2:29:0E:3C:82:A8:AD
            X509v3 Authority Key Identifier:
                keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5e:e8:ff:9f:06:91:83:9d:30:f5:90:cf:ee:b0:21:90:32:
         07:29:ee:ea:ac:a0:41:63:29:dc:21:f6:c7:e6:c7:07:36:22:
         02:26:4e:28:fa:6d:fe:5a:79:25:fd:62:79:b2:7a:d3:4b:af:
         f1:b9:7b:49:96:c2:b3:fa:e5:30:51:55:76:e4:2e:a3:99:91:
         97:13:e2:c2:b3:ac:cb:48:1b:d4:e3:d3:5a:22:1d:57:6f:df:
         ce:c3:4d:d9:d9:1c:10:06:92:64:bb:93:7a:66:19:ee:9e:c5:
         ef:a8:29:78:79:5f:1b:dd:34:7c:07:8e:93:a4:54:46:44:74:
         40:9c:69:7e:42:3e:f2:6f:3a:92:d2:cb:2a:b1:b9:b3:53:ee:
         dd:22:a6:be:6e:28:06:28:f9:4f:65:3b:81:21:b6:16:cc:88:
         24:9c:3d:83:35:5e:11:0d:76:48:ea:5d:de:9c:71:52:8c:44:
         51:5a:9d:76:9d:b5:5a:82:fd:c3:96:bc:6d:66:43:77:62:70:
         cd:e2:9e:11:b1:a1:41:78:f7:8e:69:b9:15:7c:ee:8a:c8:35:
         3f:8b:e7:ca:b0:a4:98:ec:c6:fa:2a:c8:77:f3:97:52:27:9f:
         2f:2a:48:5c:f8:18:f7:4c:02:a5:1b:13:63:21:dd:ff:5f:9d:
         40:80:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----