Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File:                     VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier:          tTE0Dntx2eg9j8HT5DWicGxPtmbPXLBCAF9BH8vzFZI=
Subject key identifier:   DA:7B:B4:C2:96:6C:A4:91:B7:5D:F8:78:CD:7E:D7:19:57:E9:90:95
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer:       /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial:       01962F749D255BD889B810AA1289528ED62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number:          06FD
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: FeklVC0qNHXfj0J3Hp8Z9ArWnx4.roa (hash: zhU/XsLgugYmejL0TFrTVwxSx58qhIKNoUYntYLxICw=)
                          2: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
                          3: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: NK6E/iIBVw6zQHIls4huLa3kRQl+FHUv6JeczUfsUOk=)
                          4: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
                          5: f4Ucn45Rv4XzGRea7jIYv06EQoM.roa (hash: dEkb9TCXMwOfFotkjpNPCU75fXglPlFmFSOsMZEXlWI=)
                          6: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9d:25:5b:d8:89:b8:10:aa:12:89:52:8e:d6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=da7bb4c2966ca491b75df878cd7ed71957e99095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:21:09:44:34:5b:00:d3:67:fe:c2:b6:47:
                    41:7b:e9:22:d0:ee:6d:31:56:80:e0:67:0b:f7:c4:
                    cd:a0:6f:54:33:33:62:f5:09:ff:d7:fa:67:74:6e:
                    db:c2:12:33:19:5a:72:a5:59:4f:e9:35:ce:b9:60:
                    c1:c5:1f:72:23:6b:69:c5:a1:d0:ba:0d:cf:c7:c7:
                    4c:84:81:d8:29:0c:10:40:23:14:5e:04:f9:5a:96:
                    a8:ff:73:da:15:02:a3:d6:df:97:3f:96:9b:d1:db:
                    f2:52:52:de:52:ce:05:32:59:b5:50:e6:d5:cf:8c:
                    ee:9e:4d:6e:cd:af:a0:34:0b:df:7c:42:4f:a4:c7:
                    1b:65:ac:80:be:ca:59:70:f8:cc:57:96:8c:7e:ca:
                    d2:20:13:19:be:1b:07:e4:7e:2a:62:f5:ce:c8:f7:
                    13:81:e3:0c:d3:f5:c4:7c:1d:f3:7e:e5:f7:bb:1e:
                    b0:47:69:b3:26:7e:07:58:d7:f0:44:7d:83:7a:1c:
                    68:84:fa:c7:e6:3c:85:34:7b:6f:e9:b3:57:2f:45:
                    16:23:2b:8e:53:60:d8:53:09:1c:e5:93:14:ac:0f:
                    53:f3:8e:7b:aa:6e:63:58:26:c5:ef:41:0e:30:18:
                    f9:8f:dc:e9:46:d3:dc:3a:01:f7:5d:55:1a:72:cb:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:B4:C2:96:6C:A4:91:B7:5D:F8:78:CD:7E:D7:19:57:E9:90:95
            X509v3 Authority Key Identifier:
                keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cc:05:13:73:af:8a:8d:53:64:e2:b1:73:30:da:62:0f:1d:
         08:50:e0:6e:82:75:c1:07:c5:1f:f4:a5:7a:c9:bd:39:42:59:
         17:a8:34:06:18:4c:d2:f3:96:dd:90:0a:b3:cd:a3:57:d6:1c:
         ca:c0:96:b9:56:b6:bd:a0:9f:49:68:18:87:bd:98:04:17:4d:
         d6:71:fd:99:03:1a:3a:6c:74:55:c0:42:55:8c:65:d2:40:d1:
         23:12:71:62:80:c0:39:00:60:99:4b:45:0c:3b:50:8c:a0:3b:
         72:05:1b:da:fb:1a:55:42:5b:f2:e8:da:c7:38:5f:ad:dc:4f:
         4f:2e:4a:26:5c:cd:f1:f5:c2:8d:36:b9:20:ee:1d:d4:74:14:
         25:7a:30:82:8d:08:4b:59:05:76:97:ae:bb:de:66:07:a9:7d:
         dd:fa:9c:02:e1:90:26:23:2e:b8:c5:b0:29:70:af:9e:a3:6f:
         1a:74:23:13:ae:48:88:66:1c:13:0e:09:dc:35:35:c6:70:17:
         77:1e:39:10:36:57:5d:96:93:06:ea:54:7e:b2:01:68:b3:8a:
         ce:53:56:fc:4b:4f:51:e6:32:fb:93:14:44:c0:ce:eb:30:13:
         27:be:cd:84:15:51:50:c3:85:27:00:c9:59:d9:89:fb:66:00:
         a1:8b:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----