Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File:                     vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier:          OZl8yMI/2mrTaIm65tFLBZ2Zj443VKcuzxK+8hyHfgw=
Subject key identifier:   CD:EE:DB:E7:21:1A:7F:C1:B3:67:59:8C:26:DC:A2:B5:55:C6:49:EE
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer:       /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial:       01962FAB5E73F173D7B58AACDDC31D22B390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
                          2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: h6c/dTvHNz1AdQpC8WOIHjgD3RGzH4uPazix7I93l7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5e:73:f1:73:d7:b5:8a:ac:dd:c3:1d:22:b3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=cdeedbe7211a7fc1b367598c26dca2b555c649ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:45:9e:0c:58:a5:1b:dc:3b:21:45:07:03:
                    1e:c7:9e:4b:49:43:9f:41:3f:db:f1:a9:5d:b5:8f:
                    17:36:12:c0:dc:f5:2d:b5:ad:d7:7e:81:52:8e:b8:
                    be:38:10:d2:bf:9d:e9:89:d7:c4:60:a2:0a:45:73:
                    49:b8:a9:26:14:a6:8b:90:f9:af:52:f5:f3:fb:9d:
                    3b:4b:25:2a:17:66:8d:c8:4d:6e:57:da:7f:ca:d7:
                    7e:6c:e6:a0:31:15:84:e7:3e:ea:db:ab:2e:03:ec:
                    82:9c:1e:bb:4c:72:63:08:48:16:14:49:27:9c:a8:
                    80:d5:17:8d:c8:4a:0d:0e:d2:18:d3:ef:1f:fe:c8:
                    78:d7:93:4e:83:1e:6a:e9:9e:e1:be:f3:b7:8f:e9:
                    b8:85:71:d3:2f:5b:f3:77:6d:1f:88:14:b2:c3:82:
                    ce:32:f0:bc:b6:3c:45:3e:68:df:fb:71:87:c7:18:
                    f4:61:52:2b:c7:e9:b2:29:7f:93:2b:f3:cf:4a:75:
                    3e:ee:4d:eb:70:3f:fa:87:2c:55:41:4b:bf:e1:a9:
                    0f:96:d5:e4:ac:d0:cb:78:98:88:f0:b7:e7:bb:1c:
                    42:db:e7:54:73:c1:6a:26:0b:20:7d:86:18:26:c6:
                    dd:73:60:49:5c:ca:e6:b9:41:d3:04:32:ee:8c:a6:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EE:DB:E7:21:1A:7F:C1:B3:67:59:8C:26:DC:A2:B5:55:C6:49:EE
            X509v3 Authority Key Identifier:
                keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:91:ec:bc:a6:11:71:7c:d2:5e:59:e8:71:04:08:6e:e2:ac:
         64:00:38:fb:10:59:6e:0c:7e:02:13:49:d1:02:a9:a9:bb:78:
         8a:0c:2b:83:cf:e2:6a:4e:09:c3:54:3d:37:4b:f3:a0:11:a1:
         e0:da:a5:b9:89:e7:e4:43:07:45:60:00:b5:31:c5:b7:32:40:
         ad:28:08:13:b9:f4:3f:a7:2b:06:bf:68:de:37:2e:ad:0a:61:
         ec:68:e0:e7:8c:dd:c2:9c:df:8d:26:88:02:8d:cb:b0:0d:32:
         e8:09:1e:12:79:ea:e5:3b:d2:28:75:50:14:3a:e6:af:74:6b:
         4a:83:fd:0f:18:78:2a:5c:60:98:90:6f:0e:08:ec:31:77:6f:
         ca:14:c2:dd:af:16:88:f4:0a:a7:3d:38:93:89:f3:fc:1e:9a:
         b0:a2:2e:76:ec:f9:bd:4d:23:02:f0:65:93:48:f5:22:9f:a2:
         72:eb:0e:a4:57:e4:b8:df:10:f7:92:45:29:c3:87:48:ef:8b:
         4f:b1:ff:4a:e1:5b:78:7f:cb:02:cf:c6:fc:c3:25:d9:68:54:
         d5:2e:ff:62:af:3c:39:a2:a2:4d:f3:59:28:f6:85:fe:50:7a:
         65:d8:65:83:2a:85:40:98:96:ff:2e:0f:6f:26:7f:f2:e1:0c:
         84:bd:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----