Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
File:                     vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft (raw, json)
Hash identifier:          Lx+X4o7utZKjpG6U5O4WujEB2l/w71yMMLQGYHw7/A4=
Subject key identifier:   09:3A:9A:9F:85:70:26:10:5F:AC:28:B0:DF:9F:F6:3F:51:34:C4:65
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Certificate issuer:       /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial:       01962ECF8204144984C7740F81CE6CA28014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: FnExCvLDVdYuTR08kgWAavX-Pk0.roa (hash: AIJMjDttEuZdQI2f5T19fqAfcHk4SoNhDhOU5X3/Gj8=)
                          2: SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa (hash: OAmumDrq2brGzOON0ZBpmY/Uom5WD7nl6vre292Hhmg=)
                          3: db5zCybt_34-4-i-989NlftPaAE.roa (hash: t4OVx3KTrCCGv9kMRVOWKBYVAK6vdDRT4hnb6yO9KXg=)
                          4: vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl (hash: DwfJV9hXyqJUKGJtvU89A37aj2jbXj0CL8BBb5T+KAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:04:14:49:84:c7:74:0f:81:ce:6c:a2:80:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=093a9a9f857026105fac28b0df9ff63f5134c465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:a3:18:cc:23:ca:8d:2c:e3:2d:c2:76:4b:
                    6e:a1:d2:0a:e9:1d:86:c0:7d:19:2f:f1:6f:0d:b9:
                    36:d7:7f:4d:b3:25:0a:13:95:aa:1b:cc:06:d5:c8:
                    4a:b6:c7:63:c2:da:91:88:ad:1a:21:36:39:8c:a9:
                    3c:dd:44:ac:65:6d:af:9e:80:bc:75:01:62:42:22:
                    08:40:33:0f:9d:a6:d9:69:0d:ec:92:fb:4a:3e:b2:
                    62:75:af:c8:8f:79:c6:44:a6:aa:f0:25:5e:07:35:
                    9e:fc:fe:fc:b5:62:46:48:73:24:d5:ea:5e:c7:9d:
                    1d:b1:88:b3:f0:63:59:36:f6:e8:79:db:e9:84:b7:
                    85:2c:2b:b9:f7:33:62:31:ee:ec:9b:f9:a2:a3:65:
                    c1:b4:46:06:17:fa:e1:82:ca:b1:4e:ab:27:82:ed:
                    a0:37:ae:ff:e3:99:26:02:c6:50:f5:4a:58:84:d1:
                    5b:07:7b:57:ef:40:11:35:cd:6f:91:a6:c8:39:8b:
                    e4:a1:05:c8:7e:d9:7e:e3:44:d4:88:de:5c:b8:1e:
                    53:88:16:90:aa:3b:ec:16:30:28:ba:29:a9:6c:fb:
                    ae:80:3f:32:31:01:83:47:b4:9e:be:41:01:c8:b4:
                    b3:5e:fa:82:12:86:56:a7:fd:44:2f:76:29:73:07:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3A:9A:9F:85:70:26:10:5F:AC:28:B0:DF:9F:F6:3F:51:34:C4:65
            X509v3 Authority Key Identifier:
                keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:41:c1:5f:e4:19:46:03:49:8d:8a:96:fd:96:d8:d1:c7:
         e0:40:ef:b6:a9:20:12:32:4b:99:16:74:3d:09:a7:58:0a:6b:
         10:87:08:fc:91:ef:17:a5:fb:4a:b7:45:a1:83:87:90:06:28:
         ef:e1:6b:c3:0d:c2:9d:00:df:fb:7e:bc:35:db:c2:40:7d:f3:
         58:e6:55:6b:97:b7:76:8c:cd:7b:07:0f:9e:17:3c:71:18:5d:
         b4:75:00:17:49:62:fa:06:ce:16:bb:d2:52:f1:36:92:18:f0:
         1f:ba:3b:5a:48:84:b5:b8:69:ae:ce:cc:53:ff:f8:18:58:ae:
         d1:0a:63:74:62:7c:f2:38:71:42:18:3a:b8:4f:3f:e2:7d:1d:
         ac:4e:fb:3a:1f:56:db:ee:2c:0f:c9:d6:ae:df:63:20:8f:82:
         d3:1f:b7:63:bc:32:c7:07:6a:98:a3:04:39:cc:8c:cd:7b:f2:
         63:12:8e:4f:d6:f9:b6:b9:77:49:db:65:f1:f4:de:9b:2e:d2:
         43:ca:d8:16:56:2e:4b:60:00:f3:46:c4:23:c1:36:c1:b6:54:
         fd:15:86:75:ff:5f:3f:1d:e9:0b:f2:10:6c:7d:a1:18:45:95:
         ef:4c:77:6a:17:38:98:d6:3a:87:71:46:0f:17:c7:7e:f7:43:
         09:ff:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----