Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          PeWUSeq98EPyOP1FJh+l+426G+bava9iPv6x1B8gsB0=
Subject key identifier:   5D:9E:E8:E0:8E:7C:5A:24:9D:DD:C0:1D:A0:09:56:40:4B:4B:A9:29
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       01962E989CA1491BA5143ACBBA9133F23F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: a9grNvqYQZL96vSZgUaaUYW4pkM.roa (hash: UKQ9pbHuGJ7bkpOIdTsqFdrfM/n6bQ9BIxk/0hKXTX8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: ppN3CRusKelomw40OSys8v7cpiMjaywSUDK40zkboBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9c:a1:49:1b:a5:14:3a:cb:ba:91:33:f2:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=5d9ee8e08e7c5a249dddc01da00956404b4ba929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:e9:8d:96:77:0e:df:c0:58:8b:11:17:d7:
                    c1:ae:83:36:54:3c:99:3e:e4:6a:3a:90:70:46:c5:
                    18:28:19:f7:e3:1f:9e:d7:5b:4f:0e:f4:af:79:57:
                    19:8f:d0:d1:d0:cc:62:2a:4f:1d:44:83:06:8d:2a:
                    f0:f0:37:ba:84:5c:07:00:46:40:bf:d2:55:d8:d0:
                    61:31:a1:ea:12:b8:fb:e5:5e:ce:3e:5b:2b:56:b3:
                    9a:a1:2a:64:3c:52:41:3c:19:cf:96:9e:b1:c5:d9:
                    6a:a8:53:fa:8c:0c:cf:1a:a5:66:39:76:86:09:dd:
                    10:b6:0c:69:d1:ca:ee:a6:61:9d:43:f3:32:45:92:
                    1f:2b:0a:d8:ea:33:99:18:71:85:e0:8e:ff:af:68:
                    25:38:89:87:a8:ba:93:5e:5d:1a:70:91:76:0c:a0:
                    cb:23:e1:0d:59:75:e1:49:fb:f2:94:4a:2c:1d:03:
                    c1:0c:ae:53:72:14:20:05:f9:8b:9b:14:29:c8:92:
                    bc:88:2d:02:f7:70:e3:e2:d9:99:c6:91:cf:fd:90:
                    bc:45:11:52:bb:30:a9:46:ee:2a:29:6c:78:c6:26:
                    92:9a:e3:95:76:3b:06:97:72:06:12:62:47:cc:87:
                    75:1e:0a:51:9c:d8:32:3f:fa:fd:6f:9f:dd:8a:ce:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9E:E8:E0:8E:7C:5A:24:9D:DD:C0:1D:A0:09:56:40:4B:4B:A9:29
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8f:f0:bd:04:3b:72:39:e1:cf:66:2d:c2:16:4e:01:7a:4e:
         d5:c3:51:b5:23:a8:ac:50:4e:e5:34:94:ab:21:ae:08:d0:7e:
         92:f6:28:23:f8:55:71:70:86:bc:ea:8b:91:7a:ef:b9:c8:85:
         cc:28:34:d8:1b:93:6b:c4:e7:b3:a9:45:cd:ed:57:c0:02:9f:
         22:05:85:f8:b7:ee:5a:ae:45:ef:1f:56:9f:a2:e2:3c:62:ab:
         27:90:b1:dd:1f:4f:fb:54:45:ec:94:29:9f:a8:94:f3:c3:47:
         ef:a4:7c:b7:c5:48:d0:90:91:71:0c:52:75:ec:87:7d:ac:d2:
         d3:4c:13:47:2e:28:ef:d0:a4:f9:6f:52:f8:b1:45:e7:bc:99:
         b8:7e:7d:46:3e:c2:95:2f:4b:25:a0:1a:34:a6:b2:2b:29:50:
         84:82:2d:03:48:bb:fa:d3:27:c3:d3:2f:dc:5b:a8:cf:0d:62:
         b6:19:3a:bc:92:0b:48:99:d8:5a:bf:be:76:25:10:fa:c0:92:
         d7:b6:3b:b9:72:bd:e5:2d:bb:ec:d8:bc:a3:39:a1:ee:6d:ab:
         4d:fe:0f:67:3a:96:e6:72:1a:a7:24:4e:d8:26:91:a7:ae:ef:
         08:e6:a2:5e:46:2a:1b:41:dc:e3:fe:03:01:27:3e:3f:29:6b:
         86:5a:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----