Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File:                     42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier:          3JEr9SZ1nh2gW3Cq+GvkXKf4BDNIdX8P0BF1Vk0Jics=
Subject key identifier:   F7:82:8B:AC:9F:1D:C9:30:3E:5C:AF:08:05:CD:B1:5C:76:FD:DD:BD
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer:       /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial:       01962F06521B9431237B3972FB867C91EBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number:          13A8
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: EvMBUDj6dnrMgqS/I0z6AnFy4Qkd6w4XCdzCbap44RA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:1b:94:31:23:7b:39:72:fb:86:7c:91:eb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=f7828bac9f1dc9303e5caf0805cdb15c76fdddbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:43:a9:5e:9c:0c:60:24:f4:f3:ac:59:a2:
                    c5:75:f7:66:64:61:ff:b4:5d:ea:a7:a6:30:eb:ab:
                    93:06:4a:89:0a:0a:49:39:7e:02:eb:15:58:41:7e:
                    a4:64:91:d0:2e:48:11:77:31:08:83:2e:c0:d4:2a:
                    27:c8:07:47:03:9d:e6:47:8f:ff:26:10:08:18:f1:
                    94:71:58:21:88:bd:58:1d:31:35:74:66:ac:8a:fd:
                    79:ca:61:86:aa:86:c8:74:ab:90:52:2c:95:5e:18:
                    3c:d5:24:23:c4:37:00:a6:f6:77:25:55:49:8b:b8:
                    33:80:43:25:4d:4c:a0:86:f8:8b:36:38:4c:ee:da:
                    82:02:5e:10:6a:69:49:72:03:7e:fd:e2:b6:44:40:
                    0d:42:fa:41:15:44:e1:8a:82:4b:e4:f8:49:ce:d1:
                    7b:87:17:1b:f8:8d:e9:58:70:86:81:73:6a:c2:24:
                    09:a0:bd:ce:01:80:f0:cd:d1:7f:00:71:2b:c6:da:
                    ff:4e:53:f9:aa:83:3d:24:87:b8:a1:7c:94:13:e0:
                    c5:59:0c:95:03:43:6b:00:aa:bb:1b:1b:bb:2e:b6:
                    56:69:4f:d1:78:6a:bf:68:14:f2:5c:49:fa:65:66:
                    19:24:a0:9b:01:0f:aa:a4:3e:8d:43:f3:5c:40:66:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:82:8B:AC:9F:1D:C9:30:3E:5C:AF:08:05:CD:B1:5C:76:FD:DD:BD
            X509v3 Authority Key Identifier:
                keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:13:2a:b8:0e:71:39:34:7a:66:40:dc:40:2b:c3:13:28:1b:
         d3:75:01:f3:31:05:48:bc:4f:61:5b:4d:ca:10:c4:f9:6a:8f:
         9f:1a:ff:17:17:7f:ba:10:a6:30:d2:52:94:ab:be:33:fa:a6:
         bd:cb:56:65:34:b9:dc:49:3e:52:09:6d:b4:99:50:4a:78:6e:
         7e:df:d9:f7:31:09:b9:1c:94:03:d8:41:7d:78:57:d6:c7:19:
         95:31:c3:4e:97:9b:1b:4c:08:ae:11:12:55:83:9a:24:3c:4d:
         05:67:ca:27:b6:31:da:6a:87:3b:83:20:e8:68:91:f2:c3:56:
         34:2a:86:7a:29:46:40:27:c2:03:b5:2f:40:98:a4:87:c2:fe:
         8e:5d:cf:17:db:e3:88:46:6f:ad:1e:7f:f7:ab:34:3b:9e:77:
         3d:db:c9:bc:5e:f7:bb:b0:99:61:21:f1:ad:44:6b:62:3d:b2:
         a1:07:7a:75:18:1b:6c:99:85:a4:e6:fc:47:a7:ea:dc:b8:c8:
         bb:81:ca:d3:26:b8:74:de:fc:4e:d5:b9:9c:d7:a1:c6:02:dc:
         69:40:37:ae:92:5c:47:af:7d:a0:17:9c:b9:0f:3f:80:e4:10:
         c8:60:c4:91:bf:df:e9:8d:46:b3:c3:b2:d3:9f:33:0d:c2:51:
         7a:e5:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----