Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File:                     vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier:          3q6QaWDy6g6tmBlNhNH6aRBFh1DDbEcJkeJP7JWsuvg=
Subject key identifier:   29:AA:40:C9:C0:93:AF:6C:B3:D4:2E:CD:6A:25:DF:E0:8F:B4:9E:37
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer:       /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial:       01962E98F336EF1BF4AE9C7A531530B45B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number:          0469
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: BiNxhszATd2O5JX2UnFlypqPxLbHv+7f/l3y6QkKSKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f3:36:ef:1b:f4:ae:9c:7a:53:15:30:b4:5b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=29aa40c9c093af6cb3d42ecd6a25dfe08fb49e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c4:16:d2:70:d5:d9:8c:b4:05:e7:21:4c:2d:
                    96:b7:71:5d:93:2d:a8:56:9d:4f:c6:69:75:9d:63:
                    fe:24:a1:b6:91:38:04:07:17:f3:31:0b:ed:41:1c:
                    51:33:65:0f:c2:fa:be:4e:7a:3b:5d:aa:53:75:7e:
                    64:3f:dd:a7:89:66:32:ba:9a:6f:ac:89:82:74:57:
                    6e:50:5c:81:f4:ba:81:4c:69:4e:dc:fc:7d:f2:aa:
                    f0:b3:63:07:48:50:00:22:cc:d3:a4:c5:7f:a1:54:
                    bd:8c:25:60:e6:9d:a8:45:5a:a5:cd:3f:a3:5b:0e:
                    b3:54:cb:0e:6e:0c:c2:8e:de:17:1b:66:f5:97:6b:
                    0d:fb:9a:ad:39:02:98:61:b0:7c:a9:8b:ce:c4:d4:
                    53:a8:30:a7:6d:4c:2d:82:22:34:17:c3:82:e6:8e:
                    0f:5c:5c:68:c4:f0:6e:1b:b1:1a:5b:8a:1b:05:e2:
                    28:b2:17:0e:da:11:1b:3e:7f:06:df:28:b1:af:ab:
                    18:ea:e9:85:7c:e0:39:4a:82:81:4f:3e:87:4d:63:
                    6e:65:c1:b0:df:14:26:4d:4d:d8:c3:41:b6:1b:0e:
                    19:09:7d:1a:7b:d0:b4:01:7c:50:45:e6:e8:48:98:
                    53:2b:61:17:8f:7f:d9:7c:c4:a6:06:52:bb:50:dc:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AA:40:C9:C0:93:AF:6C:B3:D4:2E:CD:6A:25:DF:E0:8F:B4:9E:37
            X509v3 Authority Key Identifier:
                keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:18:e5:0f:55:20:da:ce:3b:85:a1:c3:31:a1:55:62:18:
         e1:24:cc:45:5e:d0:6b:38:82:4f:e8:e5:fc:ac:da:f0:8e:71:
         83:2d:b1:71:02:e8:91:c6:6c:01:fa:4a:ad:45:50:93:a5:91:
         c8:b5:6e:f6:bc:45:b8:85:89:85:0a:85:0f:61:0b:19:78:dd:
         10:16:f0:78:19:ec:4a:21:94:e3:38:21:81:f0:d2:59:ed:35:
         b2:3e:ad:6b:8c:3d:11:8c:43:2a:b1:05:31:e2:33:0c:d8:bb:
         3e:1a:c0:a9:5c:67:80:27:8e:4e:67:fd:a5:07:7e:d6:cc:e8:
         91:e4:56:7d:15:80:a4:ab:69:a5:ec:64:81:b9:4a:b7:4b:fb:
         82:21:05:1b:e3:c4:94:23:72:af:57:de:2d:f4:80:14:02:d1:
         5b:61:6e:66:5d:41:16:14:ac:ac:a1:46:08:b4:56:62:8f:bb:
         5f:ba:56:ff:bf:20:fd:5b:e9:25:d6:44:0a:f2:20:37:fb:cf:
         04:71:23:8f:7d:7e:b7:92:7c:73:3a:59:cc:94:fc:60:8e:04:
         ed:9a:94:05:20:4c:bc:f8:76:3a:6f:4f:ba:1b:37:36:79:9d:
         a6:99:08:a6:50:8c:b3:d5:a1:2c:15:18:e2:3a:32:be:74:89:
         fe:11:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----