Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File:                     VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier:          pZLPRFqcCc9jFaqNJDxdiMqFA4nFRkclaaDC/2cDN9w=
Subject key identifier:   A1:BE:48:F0:D8:99:D2:FF:C8:30:69:99:35:70:5A:DE:07:7C:06:79
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer:       /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial:       01962ECFC2BAB4342DC2FB6A1EB9A5D0D87E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number:          0102
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: Pph4GlG8EqTuxhcZ/13bFkqsG0b3q7z4g39phQecDmY=)
                          2: gz5Fn0iYS2J-2PWlXPOubZS66_c.roa (hash: 3ZNULpIUwqK52p1xdQUbvRyZUixjUvhEv6tYcx6J92Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c2:ba:b4:34:2d:c2:fb:6a:1e:b9:a5:d0:d8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=a1be48f0d899d2ffc830699935705ade077c0679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:09:c7:25:98:71:ad:5b:e4:32:b3:7e:63:
                    98:f3:c2:de:83:43:40:f2:af:8e:41:48:94:b1:b7:
                    45:fd:c5:c4:22:07:66:49:11:88:22:99:5f:0e:0b:
                    66:2a:49:f6:cf:ed:3f:35:8d:e1:69:89:10:82:35:
                    6f:ad:e2:02:11:9d:00:fe:44:83:fb:b4:2f:c2:18:
                    c6:ac:62:65:bb:ee:f3:4b:65:13:b1:4e:32:3b:92:
                    a9:ed:6b:65:61:6c:46:54:70:88:82:ce:2c:a7:66:
                    83:68:3d:71:26:e7:ba:9a:44:d2:cd:5d:5c:19:d0:
                    51:0e:68:58:61:13:53:c0:2f:3b:77:58:f9:f5:45:
                    49:26:79:5e:b8:71:f6:3d:87:6f:70:48:99:b0:53:
                    71:19:68:41:d6:72:01:f7:ec:4b:28:03:d5:7f:1b:
                    ea:f9:4f:c7:de:99:34:a4:29:71:e2:e1:63:5b:33:
                    60:5f:03:6c:16:ff:9b:56:e3:21:97:96:e7:1b:14:
                    59:2d:9d:89:28:ac:08:3f:a5:6b:7f:2a:8e:16:10:
                    00:fd:7e:b2:67:99:8d:12:d0:b1:a4:4c:15:7f:75:
                    72:4b:fb:43:fc:11:21:38:42:8b:cb:06:c8:8e:d3:
                    9d:a6:a0:52:42:db:10:d3:f8:3d:bc:97:cb:a8:26:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:48:F0:D8:99:D2:FF:C8:30:69:99:35:70:5A:DE:07:7C:06:79
            X509v3 Authority Key Identifier:
                keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:46:06:64:7d:fb:b9:0e:ab:f2:c1:5a:cf:5e:08:56:1b:
         9a:5e:b2:f1:7b:01:d6:ee:37:ff:d6:3a:8d:00:e9:a7:4e:42:
         dd:cb:46:bc:a8:16:57:fc:c9:55:f9:78:25:ad:68:2a:45:e2:
         6c:93:03:64:d9:30:4f:d5:d0:5f:94:52:54:60:8c:6c:31:bb:
         99:80:7e:db:39:70:35:5b:c6:5b:df:8c:89:0a:32:b1:08:cb:
         b9:63:23:98:b2:fa:78:b2:28:fc:ed:0c:d0:a7:3b:af:fe:93:
         94:26:2e:cf:68:04:5f:2e:27:c9:2d:42:07:07:37:bb:74:c0:
         0e:5b:75:d3:75:0d:64:82:16:04:75:5b:11:9d:c7:82:c2:97:
         3e:cf:5c:b6:9c:f4:26:5c:06:6d:1f:24:94:4e:2b:0a:2c:9f:
         b7:35:a4:1b:81:c9:19:d3:d9:c0:0f:73:4a:a8:ca:a4:90:b4:
         06:b0:ae:c9:18:81:63:cf:04:da:90:8d:5a:3c:90:a3:2b:ee:
         07:a0:9a:3c:c9:2c:a1:ef:de:f1:51:02:3a:d1:0a:c8:43:3c:
         9d:7f:61:11:cb:26:d4:01:22:ff:18:39:4a:46:ea:bd:85:80:
         a5:57:6b:bf:e4:fa:28:e9:ae:ce:c6:9a:ec:b7:dd:9a:f1:1f:
         3e:c8:da:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8K6tDQtwvtqHrml0Nh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTg1MjFlODBmMmYwNzFhMzEzODViY2RmYmMzMWE2MjFj
NjhmOTQwHhcNMjUwNDEzMTEwMTI5WhcNMjUwNDE0MTEwMTI5WjAzMTEwLwYDVQQD
EyhhMWJlNDhmMGQ4OTlkMmZmYzgzMDY5OTkzNTcwNWFkZTA3N2MwNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAligJxyWYca1b5DKzfmOY88Leg0NA
8q+OQUiUsbdF/cXEIgdmSRGIIplfDgtmKkn2z+0/NY3haYkQgjVvreICEZ0A/kSD
+7QvwhjGrGJlu+7zS2UTsU4yO5Kp7WtlYWxGVHCIgs4sp2aDaD1xJue6mkTSzV1c
GdBRDmhYYRNTwC87d1j59UVJJnleuHH2PYdvcEiZsFNxGWhB1nIB9+xLKAPVfxvq
+U/H3pk0pClx4uFjWzNgXwNsFv+bVuMhl5bnGxRZLZ2JKKwIP6VrfyqOFhAA/X6y
Z5mNEtCxpEwVf3VyS/tD/BEhOEKLywbIjtOdpqBSQtsQ0/g9vJfLqCaScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG+SPDYmdL/yDBpmTVwWt4HfAZ5MB8GA1UdIwQY
MBaAFFboUh6A8vBxoxOFvN+8MaYhxo+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMt
MGRhMGYyYWQ0Njg4LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMtMGRhMGYyYWQ0Njg4
LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAof5GBmR9
+7kOq/LBWs9eCFYbml6y8XsB1u43/9Y6jQDpp05C3ctGvKgWV/zJVfl4Ja1oKkXi
bJMDZNkwT9XQX5RSVGCMbDG7mYB+2zlwNVvGW9+MiQoysQjLuWMjmLL6eLIo/O0M
0Kc7r/6TlCYuz2gEXy4nyS1CBwc3u3TADlt103UNZIIWBHVbEZ3HgsKXPs9ctpz0
JlwGbR8klE4rCiyftzWkG4HJGdPZwA9zSqjKpJC0BrCuyRiBY88E2pCNWjyQoyvu
B6CaPMksoe/e8VECOtEKyEM8nX9hEcsm1AEi/xg5SkbqvYWApVdrv+T6KOmuzsaa
7LfdmvEfPsja6w==
-----END CERTIFICATE-----