Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File:                     VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier:          eXYnXYAXqmvOEf125p4RSLRcOYKqePGEkX0s0tMyypY=
Subject key identifier:   A2:A2:A2:81:19:CC:8C:11:44:FD:83:3E:D9:ED:70:27:E5:37:48:83
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer:       /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial:       01962F748016EAF919720645FA1AD644BB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number:          0DC1
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
                          2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: p+FXLNrdRid4kttDU6pg2SSCq8/8Rwo74CnqkCmgXw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:80:16:ea:f9:19:72:06:45:fa:1a:d6:44:bb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=a2a2a28119cc8c1144fd833ed9ed7027e5374883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:b4:34:2b:13:5d:1d:bd:5c:e9:65:96:94:
                    21:d1:07:e5:b8:ea:d4:cc:44:09:90:d7:c4:b6:52:
                    cb:f8:c3:cf:ca:4b:3e:43:38:4b:dd:83:93:d1:81:
                    6c:a6:25:07:5f:89:dc:08:3e:68:19:11:56:ab:97:
                    70:3f:4f:3c:96:61:17:76:c0:e2:1b:2e:89:e6:0e:
                    69:44:1a:3d:6b:f9:0e:d7:54:1b:5c:97:f9:c9:f3:
                    a7:fa:a8:de:8d:72:b4:f2:3e:2e:2b:bd:82:46:6d:
                    cf:22:2a:43:2b:3d:86:42:27:88:6c:6d:3b:45:d6:
                    d3:2b:a8:06:bb:74:38:8f:9c:55:b3:af:2a:46:68:
                    4a:eb:2a:7e:1e:1e:e1:18:2c:c5:ef:88:98:8e:d6:
                    d6:11:8b:bb:95:1b:8c:dd:1b:62:01:b1:5c:fb:f4:
                    78:12:99:6a:f0:17:ae:7b:99:a7:e4:bb:d6:19:d4:
                    02:5b:63:e6:1b:99:41:b9:41:92:6a:30:be:af:7f:
                    cb:88:c5:9f:4f:c4:eb:f1:f2:ce:4c:da:1a:eb:57:
                    0a:01:04:ad:e5:cf:9c:9e:9b:5e:fd:b6:d5:d3:32:
                    e5:e7:9c:05:84:99:0a:a7:ac:83:12:bb:51:fc:a7:
                    64:6f:63:1b:28:e4:b7:8a:28:fc:fe:1c:0f:ba:e0:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:A2:81:19:CC:8C:11:44:FD:83:3E:D9:ED:70:27:E5:37:48:83
            X509v3 Authority Key Identifier:
                keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:f5:78:a6:9f:fa:41:7c:13:07:a9:57:40:0b:88:6b:c1:
         1d:b5:8b:38:a7:81:ba:cf:75:c0:68:39:92:6e:f2:48:50:16:
         00:6b:be:77:e7:ab:29:5d:ef:81:da:c6:fc:c6:39:43:ff:85:
         fe:ac:5b:81:b9:dc:43:a9:c6:6a:c3:4c:11:ad:a6:b2:fb:6a:
         85:cd:79:53:b3:bf:b8:b3:28:0b:a9:a4:5f:31:f1:8b:56:85:
         e7:e2:3e:9f:2c:0b:83:fe:fb:f8:f7:b0:6a:6f:92:fb:06:c2:
         2a:f5:e5:a4:4f:dd:84:07:8e:19:09:b4:cb:b2:33:1c:3e:de:
         06:2d:fc:a8:e8:8c:eb:34:56:86:13:ef:a3:2a:0b:2a:8a:df:
         9e:a9:c8:40:8e:5a:1e:56:08:29:98:5a:a8:21:4a:bb:72:66:
         cb:d4:73:6d:75:fc:fc:2e:fc:95:d6:59:30:92:31:4d:55:c5:
         69:b2:cf:d2:c0:e2:08:0c:fd:ea:4a:ea:16:7f:fe:3d:d4:04:
         d9:c4:bc:77:bd:b1:5a:89:71:87:90:c8:01:45:45:09:06:8e:
         ba:4a:80:cf:23:94:fe:1c:22:ec:08:aa:2b:2d:69:5d:6d:fa:
         39:1f:c8:84:4a:5e:57:9c:c6:ee:f9:a0:82:19:b8:60:46:76:
         a4:7c:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----