Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File:                     v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier:          s7YWF4TlpAmlKaYzoHkdXw6nS3KGApbXh27oFWRNPRw=
Subject key identifier:   AC:2B:59:BD:3B:51:2C:B2:99:CD:29:38:66:BC:38:C8:6A:84:FF:A9
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer:       /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial:       01962F3D2EAEB23ED05338F0709F70059A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
                          2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: sbIQtBCPXPh/xVRZyIPLQa5nbcNH1CCCYMe/N45jIhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2e:ae:b2:3e:d0:53:38:f0:70:9f:70:05:9a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=ac2b59bd3b512cb299cd293866bc38c86a84ffa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:42:ee:cc:d3:c1:a9:8e:43:69:13:85:89:
                    2b:08:78:8f:ee:f3:80:a5:92:eb:85:c5:90:11:a6:
                    51:a2:e9:43:49:ca:a2:4a:13:f6:be:b6:6b:59:b1:
                    4d:01:35:69:98:44:73:c0:57:4f:82:4d:6e:5e:58:
                    96:73:e3:1a:82:43:0e:47:73:71:d5:f2:d6:1f:88:
                    5c:61:f4:8b:39:01:5f:74:de:60:24:38:0b:90:73:
                    38:7b:c8:76:b5:14:e0:3f:c9:25:ce:3c:d2:e6:5f:
                    08:a8:d7:43:93:c9:a3:ce:b9:53:98:29:3e:b9:0f:
                    d3:e4:04:d7:c5:a3:29:40:a0:d8:79:aa:dd:07:81:
                    6e:30:3f:6d:2f:b8:e1:61:91:00:af:dc:61:f8:ff:
                    7f:33:69:7d:f2:60:c8:82:55:e1:c9:e9:49:fd:82:
                    a6:a9:eb:09:e8:15:a3:20:bc:96:94:13:8d:a5:5a:
                    34:87:7c:f3:a0:84:a8:09:2a:63:9e:04:8a:7e:22:
                    60:ff:c8:d6:a9:06:78:5f:dc:18:57:ce:bb:52:4b:
                    bb:28:20:e9:55:f2:13:ab:46:fd:04:f6:df:20:e9:
                    05:55:7e:69:73:10:b3:34:29:71:15:38:25:81:37:
                    85:4f:d8:14:fc:ff:b0:b7:00:7a:fc:3a:f9:e7:95:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2B:59:BD:3B:51:2C:B2:99:CD:29:38:66:BC:38:C8:6A:84:FF:A9
            X509v3 Authority Key Identifier:
                keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:d9:f0:52:bf:5a:3f:57:f7:d6:6b:ee:7e:c7:1f:ab:ce:
         6c:1c:ee:7a:8b:87:ef:24:b1:b6:e7:85:39:ac:a3:e3:a5:4e:
         c0:fc:ce:91:1a:92:60:17:b4:c9:71:76:58:4b:bf:f6:b4:c7:
         4b:e0:b0:d1:6a:67:45:c7:b4:ee:fa:83:37:df:e0:7d:a7:a0:
         17:b5:34:de:0b:76:3c:f2:c7:61:ff:47:d6:9c:be:dc:0f:8f:
         c0:44:fa:3c:71:5d:2f:5e:59:df:87:76:e3:c7:b8:59:c7:d8:
         5a:f5:0c:d1:f7:4a:2e:f4:03:69:2a:ba:47:d5:6f:76:87:97:
         2e:a0:f0:61:21:9e:ec:6c:0d:b7:40:ff:55:ae:7f:73:99:1d:
         53:91:b0:f7:ec:5e:19:96:e7:e8:27:f1:ab:27:30:2f:35:7f:
         36:0c:b0:ea:63:d4:aa:0e:92:dd:23:be:bc:7e:2c:28:84:25:
         14:e9:c4:b2:41:07:6d:f4:d3:d8:2f:5f:b8:e3:39:4f:d7:ea:
         21:06:a2:ea:42:28:b3:a6:25:73:8b:4d:eb:d6:63:7c:0e:78:
         ac:f3:04:38:27:e0:f7:f7:c5:e3:76:37:02:8c:bb:19:47:89:
         29:93:1a:89:4a:40:58:01:e7:90:16:94:51:b3:00:15:be:d0:
         87:12:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----