Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File:                     vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier:          6sM1hVvbzkqCfbUCFwCQ+rdtA5NwyjrpoTJ3tLf6BdY=
Subject key identifier:   8B:B9:E1:B7:79:B1:9F:C1:93:4C:0E:89:5F:AC:38:2D:10:A8:81:B0
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer:       /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial:       01962F068EC9EFB3EBCC8FE988308AAF7C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
                          2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
                          3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: KyPZ1jMJeL5dAfwOk30DkiLQ3hP87OFSDiiAb+c4c3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:c9:ef:b3:eb:cc:8f:e9:88:30:8a:af:7c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=8bb9e1b779b19fc1934c0e895fac382d10a881b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:11:97:1d:b9:5e:df:59:e8:5b:de:ed:2c:
                    b8:ea:90:b9:b7:72:28:ee:4e:61:12:11:50:85:13:
                    4e:6b:db:ed:20:52:3b:ad:ae:94:c2:3a:82:e7:6e:
                    5f:98:9c:eb:eb:ad:ba:e2:c2:2a:34:64:73:ea:aa:
                    4b:99:94:e1:8c:b2:e9:8f:1c:67:2d:3e:71:32:55:
                    4a:1e:b8:53:4d:c0:9d:93:cf:08:05:e5:38:64:bc:
                    fa:2c:d5:96:53:8f:98:b0:20:b6:39:4d:a3:f4:cc:
                    5e:42:5b:31:0d:53:97:75:e9:83:eb:bd:be:46:f7:
                    df:13:0e:1b:d6:76:34:98:f7:59:49:70:23:3b:52:
                    b0:b4:06:53:5d:48:d7:9e:5b:e4:05:42:fa:97:19:
                    57:f9:63:35:68:25:a3:4f:eb:37:b4:ad:9f:58:9c:
                    3d:c1:4f:a8:64:0c:ac:05:07:ec:ae:ef:f4:ab:58:
                    05:8e:20:55:6c:d2:1b:5c:c5:ba:f0:8b:25:af:38:
                    ee:74:cd:e0:e7:7a:3d:8e:19:ab:4a:a1:44:09:a5:
                    9a:da:2f:d9:56:45:4e:5e:c4:b6:53:a5:0c:ea:6b:
                    dc:8b:2e:9f:f0:d2:0c:90:9c:e4:92:7b:76:00:82:
                    29:b8:76:3e:14:29:de:9e:1e:31:51:31:d9:ce:6b:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:E1:B7:79:B1:9F:C1:93:4C:0E:89:5F:AC:38:2D:10:A8:81:B0
            X509v3 Authority Key Identifier:
                keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:99:ec:98:89:f0:41:0b:fc:1e:53:ee:2d:bb:1f:0b:7c:51:
         96:47:19:1c:76:2d:55:d4:97:ee:f1:39:c6:b0:56:81:47:97:
         ec:3a:76:e7:47:96:87:a6:e2:23:fc:cd:f3:1e:18:60:23:53:
         8c:6a:7e:3e:b1:ac:14:f4:61:89:51:81:62:8f:36:23:c3:ff:
         f8:54:1e:3c:d4:79:39:f5:a2:56:ea:d8:6d:bd:64:94:32:f5:
         5d:5d:ba:68:db:20:dd:b5:03:c9:f8:a3:df:cb:82:3a:ac:25:
         a1:13:cb:e7:3f:5c:0d:7c:d6:b0:f4:64:ac:c7:b3:46:08:9b:
         f6:9f:ad:32:31:1e:c1:b4:66:8b:c6:ba:b0:98:10:15:74:47:
         fa:ce:43:70:ac:91:4b:f6:bc:10:4f:66:37:8e:24:ac:56:0c:
         4c:44:5b:4d:67:ee:7f:d5:07:fd:2d:88:45:f7:d5:3b:88:7d:
         10:9f:f6:04:98:61:5f:95:a1:23:4c:bc:29:bf:d3:eb:6d:b1:
         28:d3:0a:6b:31:ed:bd:7c:bb:64:c3:06:07:9a:89:ad:f1:9d:
         cc:04:5b:d5:2c:30:00:e3:f7:20:7b:67:ff:88:ad:01:9a:d2:
         b6:c2:d1:00:c3:1c:62:3a:d2:0e:7c:8d:18:00:07:d8:60:be:
         34:09:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----