Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File:                     VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier:          JKdbxLZ8dt+UcH2mT4WibXODq6wsKs27zZ434LAbLtI=
Subject key identifier:   54:37:EF:DB:3B:F5:5A:65:2F:56:23:FE:17:9E:ED:54:76:0C:91:3C
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer:       /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial:       01962F3D32EFFB6F2E69ED0EE13398C63DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number:          11D0
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
                          2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: qcH2MoKRyuiUGRubOuB/eORHTYzS78dgHEoyqsQLXNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:32:ef:fb:6f:2e:69:ed:0e:e1:33:98:c6:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=5437efdb3bf55a652f5623fe179eed54760c913c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:62:38:a1:c5:8b:74:27:48:3d:d0:84:63:
                    04:54:d8:25:4d:ac:d7:92:2b:e5:a6:83:7a:4e:85:
                    ef:cb:d9:f3:6d:0b:fb:0c:38:75:51:e9:05:ee:5d:
                    ad:81:6e:de:77:c2:4c:4a:62:e9:40:1b:9b:10:dc:
                    8f:e2:97:11:5e:2a:26:97:3f:5e:9a:a5:b2:fb:e4:
                    36:f9:95:ec:fc:6f:5d:55:8e:40:75:dd:25:01:7f:
                    ce:a2:df:55:f5:8a:5d:90:df:c2:4b:5f:7b:b0:11:
                    80:26:fb:0c:7a:dc:57:a0:6c:98:f2:2c:c7:a8:15:
                    24:73:71:cf:b2:c9:ea:55:cd:6d:be:75:2c:af:50:
                    b7:3a:39:18:8f:62:1c:1b:f0:0e:c4:e0:7a:e9:d8:
                    56:0a:ce:db:b5:f3:fe:20:f2:74:73:b3:00:45:98:
                    9f:ad:89:27:67:e9:95:06:07:1c:89:fe:91:53:4f:
                    9e:85:a1:ac:ac:17:f9:64:10:6b:2b:a5:ed:cf:e2:
                    df:10:31:2d:43:f1:f4:a3:30:4e:38:f8:7d:82:b9:
                    52:c0:ac:48:b9:1f:24:20:c2:2c:50:7f:69:91:37:
                    a6:7b:24:9e:9c:da:6d:68:66:04:39:4a:0a:0e:74:
                    2b:b9:f1:33:60:88:e4:36:22:66:79:13:ea:64:a2:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:37:EF:DB:3B:F5:5A:65:2F:56:23:FE:17:9E:ED:54:76:0C:91:3C
            X509v3 Authority Key Identifier:
                keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:78:72:c0:d4:70:04:db:d7:45:69:ef:af:b9:36:5d:54:e5:
         dd:50:6b:51:1a:a9:e7:8e:31:fe:b5:40:dd:55:f7:14:66:5d:
         a7:42:21:6e:18:ac:90:18:a1:61:f9:2a:35:8b:10:0c:8d:46:
         2e:2b:b9:27:36:1a:b1:8a:a3:b5:5f:c4:79:ed:58:aa:79:6c:
         a3:54:35:e3:f8:f6:22:bf:31:ee:54:ba:21:c5:ff:02:a9:95:
         f4:52:02:41:44:55:72:a4:47:a5:c5:84:6b:72:9e:2e:a5:16:
         53:71:f1:17:c9:6a:88:6b:45:19:03:a5:2c:6d:59:60:1b:35:
         df:7c:27:cb:57:d4:4b:b6:66:be:42:b2:1c:b9:e7:8f:97:85:
         36:59:65:6f:9a:b9:7c:b0:67:17:4e:9f:60:5d:f1:ba:d8:d9:
         be:3e:a2:a2:7f:78:b9:39:9e:75:c3:a1:b2:41:21:52:c1:2a:
         b8:49:c1:59:ea:03:86:1a:3e:b6:a1:16:4d:06:47:36:1a:08:
         2b:ee:79:a2:55:70:4b:66:04:71:b6:6a:bd:aa:57:cd:d7:33:
         81:5c:04:f6:38:43:f9:47:a9:6c:01:f6:aa:87:fa:05:08:70:
         9f:8e:2f:cd:67:9f:ef:7b:2a:6e:cd:15:fc:93:d3:d0:0e:bd:
         cc:81:24:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTLv+28uae0O4TOYxj3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmYwOTRmMDQyN2IxNGYzNDk5ZjdjZGY2MWQ4ODNiMDg4
ODYyOGEwHhcNMjUwNDEzMTMwMTAxWhcNMjUwNDE0MTMwMTAxWjAzMTEwLwYDVQQD
Eyg1NDM3ZWZkYjNiZjU1YTY1MmY1NjIzZmUxNzllZWQ1NDc2MGM5MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7FiOKHFi3QnSD3QhGMEVNglTazX
kivlpoN6ToXvy9nzbQv7DDh1UekF7l2tgW7ed8JMSmLpQBubENyP4pcRXiomlz9e
mqWy++Q2+ZXs/G9dVY5Add0lAX/Oot9V9YpdkN/CS197sBGAJvsMetxXoGyY8izH
qBUkc3HPssnqVc1tvnUsr1C3OjkYj2IcG/AOxOB66dhWCs7btfP+IPJ0c7MARZif
rYknZ+mVBgccif6RU0+ehaGsrBf5ZBBrK6Xtz+LfEDEtQ/H0ozBOOPh9grlSwKxI
uR8kIMIsUH9pkTemeySenNptaGYEOUoKDnQrufEzYIjkNiJmeRPqZKI+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ379s79VplL1Yj/hee7VR2DJE8MB8GA1UdIwQY
MBaAFFQvCU8EJ7FPNJn3zfYdiDsIiGKKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGIt
MGUwNjhjNDk3MGZmLzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGItMGUwNjhjNDk3MGZm
LzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHhywNRw
BNvXRWnvr7k2XVTl3VBrURqp544x/rVA3VX3FGZdp0IhbhiskBihYfkqNYsQDI1G
Liu5JzYasYqjtV/Eee1Yqnlso1Q14/j2Ir8x7lS6IcX/AqmV9FICQURVcqRHpcWE
a3KeLqUWU3HxF8lqiGtFGQOlLG1ZYBs133wny1fUS7ZmvkKyHLnnj5eFNlllb5q5
fLBnF06fYF3xutjZvj6ion94uTmedcOhskEhUsEquEnBWeoDhho+tqEWTQZHNhoI
K+55olVwS2YEcbZqvapXzdczgVwE9jhD+UepbAH2qof6BQhwn44vzWef73sqbs0V
/JPT0A69zIEkEw==
-----END CERTIFICATE-----