Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File:                     VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier:          LuiBcQRwL0q6RiSWjWPt1LTX3HE48som3YKRdNGn/AE=
Subject key identifier:   25:90:94:81:4E:F3:0B:DB:0D:EF:81:62:D3:2C:40:E1:50:D2:E3:B4
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer:       /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial:       01962E99165BA416B7D0ED06E3CBF0395773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: YZKNw20wcdyh84zqEl4cFfL5bHTVMQAGvMuvvQDLRf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:5b:a4:16:b7:d0:ed:06:e3:cb:f0:39:57:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=259094814ef30bdb0def8162d32c40e150d2e3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:2f:db:40:94:05:2d:09:31:95:31:ca:f9:
                    57:9b:a8:e1:33:b2:24:9d:99:fa:ac:eb:a0:6b:2c:
                    4d:b7:5f:b3:3f:87:15:98:a1:7c:06:0c:2f:33:7c:
                    c3:99:f9:db:25:f4:8b:fc:5a:c8:ae:d1:11:33:a5:
                    fa:9e:3f:6e:ae:71:34:d6:94:29:c6:86:1c:9e:61:
                    0f:bb:41:b7:ac:5f:bc:68:56:88:2b:54:cb:0a:52:
                    b2:f5:f7:5a:cb:d0:a9:a1:53:c5:58:6f:88:51:83:
                    b7:b9:b2:76:36:b8:a8:a9:f0:fd:bd:25:c7:15:2b:
                    db:bd:5c:03:2e:51:1e:00:25:2d:db:5f:21:f8:2b:
                    f0:d6:24:a4:7d:29:15:f4:ae:bb:f0:9b:6f:7f:ab:
                    be:91:e8:ab:79:86:0d:58:c0:fb:f4:4c:b1:75:55:
                    77:9f:c6:2c:77:43:73:71:8f:ea:af:0d:23:37:e9:
                    0e:2b:5b:c5:da:49:e5:b7:a8:a2:46:50:fa:7b:c4:
                    bd:70:16:99:2e:22:ee:62:59:bf:64:0d:da:08:47:
                    01:72:ab:12:e3:99:2c:d1:bc:3c:fe:9f:65:01:91:
                    54:94:40:1b:36:77:c9:2f:2d:da:a4:87:32:1d:4e:
                    0e:ec:1a:ba:d1:23:e3:19:94:65:08:1f:a3:71:e2:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:90:94:81:4E:F3:0B:DB:0D:EF:81:62:D3:2C:40:E1:50:D2:E3:B4
            X509v3 Authority Key Identifier:
                keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:4f:98:38:f7:e2:48:d9:62:63:e1:ac:d8:1b:c3:30:c8:
         a7:fb:7b:14:47:64:c8:26:0d:29:6d:2f:02:34:01:70:f8:72:
         2d:49:70:0a:81:13:fc:82:1f:17:86:d4:c8:98:32:a5:6e:4a:
         32:ad:88:14:54:79:b8:bd:2b:66:2e:85:0c:70:c6:f9:9f:30:
         86:b7:40:ac:9a:c0:14:96:3d:96:a9:0b:92:b1:f7:bc:14:f2:
         07:7c:85:30:a6:af:5a:24:d6:ac:a9:33:b8:33:62:b5:eb:31:
         a2:20:29:5f:3d:6b:53:3f:cc:16:2a:58:e8:ad:16:42:19:b6:
         d4:cc:6a:01:89:42:86:e5:cc:3f:1f:68:cb:a2:41:44:a3:af:
         d3:b7:0b:0d:18:4c:1b:81:e0:28:5a:a0:fc:1b:98:55:b3:c0:
         ac:58:ae:fd:4f:12:8f:ae:cd:49:fd:f7:8d:8c:43:57:d0:40:
         35:24:14:7d:91:ee:c2:2b:85:5c:fd:7e:26:3a:0e:3c:f9:50:
         a3:26:31:84:65:fa:bd:1e:0c:32:7d:66:69:3b:9b:ec:56:cb:
         2b:fc:90:b9:9d:f6:72:bf:e2:4e:2a:31:c2:ea:50:12:45:36:
         a0:a7:72:62:35:99:f7:14:1c:5c:43:14:4a:3d:b5:51:59:f1:
         98:26:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----