Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          P0/VVEnsZ+goNPwTflTocXfSqyxsEaWKFyl6onuxSms=
Subject key identifier:   90:A1:0A:53:B8:15:10:E2:8D:0D:A0:F3:0D:B8:20:64:80:A8:05:F1
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       01962E992D249F11248B8458FB05087A26F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          4: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: 12u99lYG69+Xjk+eVlF+5cm1tyIebtHUxuyp2lgHwEo=)
                          5: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          6: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2d:24:9f:11:24:8b:84:58:fb:05:08:7a:26:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=90a10a53b81510e28d0da0f30db8206480a805f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:c3:f0:ff:6a:cf:5c:22:97:01:3f:16:08:
                    94:70:01:da:22:7f:fa:46:85:f0:42:0c:ad:ed:45:
                    e1:22:4c:5d:bb:9f:64:86:38:71:ae:ae:7c:4b:5e:
                    03:8b:17:c9:56:4a:8a:81:dd:bf:c9:d7:76:4c:8c:
                    cf:7e:15:f2:dc:2a:28:81:15:a2:ba:d8:13:a1:67:
                    a7:69:75:80:25:d9:31:f3:06:33:44:31:b8:41:f9:
                    1d:04:8e:a2:49:6d:db:96:f2:5c:22:d2:a3:62:ab:
                    39:03:bd:16:79:52:3c:71:ee:b6:9a:b4:ec:20:a5:
                    7f:ff:0f:e4:8c:ce:de:5b:db:6e:e0:fd:a2:74:78:
                    32:33:e4:2d:ff:e9:a0:42:30:a7:9d:1d:da:b5:83:
                    0d:3a:d9:b4:08:a9:1b:2f:06:7c:09:d7:05:37:4a:
                    37:08:1b:86:b7:b1:11:c4:59:05:f7:0c:04:2d:e0:
                    0e:dd:d3:73:41:2d:49:97:1a:b5:ac:a3:21:99:3b:
                    48:49:82:fa:e2:38:27:1b:2c:2e:c7:b1:ae:2d:0c:
                    98:7a:6f:7c:b7:74:5e:3c:74:2b:a9:12:ca:69:79:
                    40:ea:c0:73:28:16:f1:67:a3:df:6f:ef:27:cd:e5:
                    91:43:dd:9b:1f:15:0a:e4:e4:eb:03:7a:4f:7a:dc:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A1:0A:53:B8:15:10:E2:8D:0D:A0:F3:0D:B8:20:64:80:A8:05:F1
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:00:21:84:05:80:3e:68:9c:95:f0:91:78:d4:97:ab:83:f2:
         b9:83:ad:4a:4b:c2:a5:70:a6:f0:b2:04:91:27:0b:1e:b8:4a:
         b3:7d:09:83:18:65:34:5f:88:e9:f7:fe:3c:6e:66:5a:62:52:
         fe:cf:dd:c0:03:96:43:42:79:1a:8b:12:e9:42:d3:c9:87:c3:
         fb:81:03:76:93:0e:82:d9:1f:82:89:9e:10:5b:92:30:3c:5e:
         ae:9e:b5:af:41:a6:63:25:e9:f1:29:12:46:46:5c:8b:ca:bd:
         41:ef:ff:58:7a:ad:50:81:38:89:dc:f6:3d:25:12:ce:34:c7:
         84:ad:76:31:5a:0c:81:aa:90:ab:a6:2d:44:8d:18:ae:9f:2c:
         8d:0f:3a:a1:c9:6a:c7:d7:3e:74:22:d9:a2:3a:85:0a:c0:cf:
         c0:f6:05:47:14:56:42:7d:97:14:8c:44:c4:0e:f8:23:8d:c5:
         fb:66:b3:a7:ac:28:61:60:c2:89:77:42:32:6c:7e:f0:9f:a1:
         6a:86:d2:59:2e:0e:17:10:eb:23:b3:7f:e4:5a:d4:83:fa:4b:
         bc:f9:85:e4:01:f8:f7:05:76:ef:e7:28:fb:ec:d4:e5:b0:38:
         38:aa:74:85:1f:42:57:7a:a1:8a:27:1f:3a:7a:b4:ba:65:d6:
         f6:89:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----