Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File:                     Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier:          umvhqhzvBk83X79xB5lcjWy2d6wZeM89i+S6lGO31d0=
Subject key identifier:   A2:B9:47:C1:B5:A4:57:B0:7F:09:DD:FE:67:27:50:F9:6B:CE:92:EA
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer:       /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial:       01962E61CE2C3B8E99D23B89EAAC609FB61D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number:          0AC1
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: DXld8GNcpZOILpw18GnAf6D1v/UeYYAiOwrccpzABCI=)
                          2: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
                          3: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
                          4: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:2c:3b:8e:99:d2:3b:89:ea:ac:60:9f:b6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=a2b947c1b5a457b07f09ddfe672750f96bce92ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:c0:0b:8d:b0:23:50:5b:c8:e0:b4:e6:02:
                    a2:35:59:34:60:4d:5b:87:c7:3a:b6:07:8d:0a:2d:
                    fe:e7:8f:d2:b6:03:d2:9a:d9:2e:d4:c0:8f:5b:5d:
                    59:36:46:a2:45:4a:1c:fd:77:35:fd:6d:80:30:b2:
                    b1:08:63:08:00:de:a0:03:ea:d1:e3:5d:f5:c3:8d:
                    69:fc:87:f5:4d:fd:8a:2e:9f:b2:65:c5:ec:bf:6d:
                    58:a1:df:e2:1c:22:ab:5e:86:0c:ae:58:39:61:02:
                    c7:88:1b:19:bf:f4:a4:e4:0c:d3:16:da:1f:c9:aa:
                    15:81:e4:a7:6a:8d:d2:53:0c:b2:c2:90:c5:0b:d1:
                    b8:e2:73:49:2b:84:91:72:19:37:00:ef:57:65:7d:
                    0e:00:3f:34:68:35:b4:f6:0f:34:3c:6f:64:7d:c0:
                    ce:ad:f7:cc:db:f7:7e:20:04:2c:ea:a5:9e:d0:c4:
                    21:df:37:e0:f5:b6:8f:41:b0:d7:d6:f6:0a:36:68:
                    3a:5f:18:22:0b:59:12:c6:e7:32:32:b8:a3:f6:13:
                    7e:d7:48:15:8a:67:76:3d:fe:19:5f:f7:92:80:50:
                    20:2d:e4:b0:82:fd:03:b7:77:5c:d8:81:00:9f:da:
                    6f:44:60:89:29:28:2a:26:03:59:7d:d6:d5:89:d0:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B9:47:C1:B5:A4:57:B0:7F:09:DD:FE:67:27:50:F9:6B:CE:92:EA
            X509v3 Authority Key Identifier:
                keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:1d:23:8e:54:c1:a7:01:89:e8:c8:3f:82:94:0c:95:42:
         76:14:2a:a4:f5:cd:1c:08:d8:7e:71:84:63:23:a0:0e:7f:80:
         18:f5:a9:29:fb:bc:92:f3:d5:5d:ff:e1:8c:7c:2b:c1:f7:2b:
         01:5a:c8:27:1e:a3:13:8a:eb:da:cd:52:d3:8c:9f:3d:17:9a:
         5c:39:e7:b6:0a:56:40:d5:0a:38:34:93:2b:90:a8:80:21:86:
         56:49:de:64:ba:7e:fb:17:df:0f:88:b1:4d:e1:f8:79:2a:0a:
         5d:49:4c:77:e1:70:01:f3:0c:7e:57:32:0e:c7:ce:a3:1f:ec:
         41:3c:26:70:29:aa:36:7b:c6:f3:51:18:8d:68:92:80:64:1f:
         3e:bf:cb:00:3e:ec:50:d4:eb:30:50:07:01:91:7a:6a:52:e1:
         8b:3d:59:7a:bb:47:3f:6f:d0:10:5d:85:66:7d:52:84:c4:ce:
         a2:e8:93:00:b2:dd:47:7e:bb:c2:26:aa:08:57:1a:ce:da:c3:
         87:9e:10:62:bb:e6:f1:00:ad:d0:44:95:75:f6:76:ea:4f:50:
         0b:01:aa:ad:72:72:ed:e8:a6:ae:24:0a:63:f5:03:c1:c8:25:
         f3:15:c1:2e:76:11:9a:a5:16:0f:80:f4:82:fa:20:bd:e2:de:
         51:47:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----