Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File:                     vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier:          U1jsR/3ML1pKJNNL/6ASVjXJc0pD4DryDGWll2+h++w=
Subject key identifier:   59:C8:61:50:34:28:27:41:EC:94:E6:75:27:B2:96:A2:8C:E7:80:21
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer:       /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial:       01962FAB7A4104F4DC4976FF022A299CD339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number:          0977
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
                          2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
                          3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: ApkU/w7aR1sPx9vzsXqATGyQqU3AT762jRnTolmj+6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7a:41:04:f4:dc:49:76:ff:02:2a:29:9c:d3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=59c8615034282741ec94e67527b296a28ce78021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:95:23:b6:1b:ea:1f:31:c7:1f:2f:cd:7d:
                    6b:37:0d:49:71:0d:bc:ea:dd:52:79:a5:9a:78:bc:
                    92:bf:47:84:d6:df:99:d8:0b:2e:81:55:b2:2d:0d:
                    1a:46:a3:45:ff:0b:d0:2b:d5:1e:d5:af:65:ce:fb:
                    a3:f7:bb:9b:90:da:08:c9:73:3d:61:21:52:34:8a:
                    8c:a1:ae:b8:99:e5:00:ff:c8:ae:e4:1d:9b:80:b1:
                    bc:6b:0f:1a:8a:24:95:4b:58:39:c3:7f:94:b5:e2:
                    bf:cf:77:23:f3:da:d9:9e:58:b8:6a:7d:4d:5f:57:
                    90:71:7d:51:1f:9c:a0:37:e7:56:81:38:13:ff:54:
                    50:04:2c:cf:f6:40:99:d9:92:60:30:ea:0b:60:f5:
                    bf:0f:77:7a:3b:21:5a:35:94:ed:57:fd:af:cc:13:
                    0a:08:67:c5:18:b5:f8:29:a0:fb:39:66:5c:96:5d:
                    5b:fa:de:2d:5c:d2:62:af:67:98:26:08:d7:06:ef:
                    3a:b9:85:99:7a:06:9f:c0:90:6a:dc:ad:39:75:e9:
                    73:db:2b:32:5b:ba:2c:9e:6e:52:5b:eb:58:c4:cf:
                    16:14:f2:0d:0b:e7:2c:7c:d2:d9:b8:60:82:5a:cd:
                    56:d4:1c:ff:9d:74:24:63:6c:48:f1:a4:07:ec:fe:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:61:50:34:28:27:41:EC:94:E6:75:27:B2:96:A2:8C:E7:80:21
            X509v3 Authority Key Identifier:
                keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:87:18:d0:7f:3e:12:3d:ca:f6:d4:bb:73:3a:56:cf:4c:e5:
         a9:ae:3c:6f:a8:e3:51:24:56:ba:fa:84:a1:0a:37:07:9f:7c:
         d2:08:d8:0f:40:87:a6:bb:fb:98:22:e4:15:b1:df:87:b2:91:
         02:9b:50:60:a6:9c:f2:8a:b1:25:e9:9b:c7:b8:dc:bc:dc:5c:
         d9:cb:4d:5a:86:f6:e4:0f:3c:7e:0d:6e:66:ce:83:9b:b9:ac:
         c8:cd:e0:d1:0e:f7:4a:4c:6e:c9:2f:f8:c1:a8:02:61:c7:83:
         f1:17:cd:1a:8f:b2:66:56:23:cb:34:a8:59:5b:5e:9c:a7:5c:
         17:19:c0:6f:d9:b1:1f:16:4e:cb:35:f9:e4:b4:a6:86:1c:bb:
         fd:ca:a0:c8:36:ba:ea:bd:5e:18:95:97:f0:c9:fa:1d:16:f3:
         1f:7b:dc:3a:aa:ad:f3:ea:7c:1d:ff:30:57:85:ba:89:34:ba:
         b9:36:83:9a:32:6f:21:f6:5a:08:46:ea:de:51:6c:15:41:d9:
         07:d9:77:f0:ee:90:83:65:38:3e:20:57:11:3c:98:78:52:5f:
         d1:21:28:7b:53:f6:76:da:4d:e1:d3:ac:54:af:bd:c0:3d:73:
         bd:54:22:90:a6:ec:bf:a7:a2:07:f6:89:65:3d:14:89:4c:50:
         f2:d2:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----