Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File:                     v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier:          myiNJH+GAt7nKMyCmchwVUahGhg7mVhzM2WllWppWg4=
Subject key identifier:   AA:1E:C7:B6:E7:D6:72:1B:2B:42:19:7E:86:0D:CB:EC:5F:31:0A:27
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer:       /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial:       01962E2B260292BFB5E2E886685ABEE8DCA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=)
                          2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: XOEbBnj0V42LFlC/c50mTCQuEVFOWcMqcXyhUxdNNaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:02:92:bf:b5:e2:e8:86:68:5a:be:e8:dc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=aa1ec7b6e7d6721b2b42197e860dcbec5f310a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:e7:5d:07:b2:38:4a:a2:37:0c:6e:20:63:
                    68:29:42:81:65:8c:22:91:7d:c1:5a:69:b9:45:38:
                    f8:48:9e:2f:d4:4a:00:60:70:7f:6a:84:f7:a5:70:
                    2b:f8:ae:6e:da:f9:9a:00:1d:67:d8:e4:dd:31:89:
                    98:10:68:95:b1:76:46:d0:b0:6c:bb:41:e0:fb:a2:
                    3d:3e:d0:3b:8b:a9:6a:ec:52:b7:aa:5c:98:2c:c5:
                    07:3a:ae:d0:cd:15:15:86:78:91:28:df:1f:d3:f4:
                    8f:ce:fc:c9:74:26:2d:9d:27:be:d0:cc:1b:fb:83:
                    fa:5a:45:32:7d:f0:08:5e:68:91:37:99:c5:77:5f:
                    3b:42:ac:ba:4f:17:7b:6c:2b:64:3b:83:8d:22:a5:
                    a0:88:31:3c:f0:70:ed:01:0d:0e:ee:16:cf:6c:a5:
                    b8:31:44:d8:f2:07:3f:92:08:9b:ef:4c:b8:b3:4a:
                    88:a1:e9:c8:1f:4e:49:b6:1e:81:9a:81:77:69:de:
                    38:8a:15:21:c0:a8:b3:e8:92:79:d7:86:52:b9:e9:
                    dd:4d:9b:2a:20:7e:60:cf:dd:f9:e6:9f:f0:7f:9d:
                    ab:dc:4a:f2:51:71:82:b6:27:02:94:3f:ec:5a:37:
                    50:73:ec:5f:e6:84:ed:ff:91:a3:fa:7c:44:e8:e7:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1E:C7:B6:E7:D6:72:1B:2B:42:19:7E:86:0D:CB:EC:5F:31:0A:27
            X509v3 Authority Key Identifier:
                keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:94:17:e7:c0:fb:e1:e6:09:3c:19:42:ab:1f:dd:1e:bc:
         eb:4d:81:0c:38:f8:52:7f:15:21:f1:39:2d:c5:a4:87:69:6c:
         08:3a:f8:d9:53:af:5f:2c:42:8f:22:8f:04:31:66:b6:c4:03:
         1c:91:62:f2:ab:5b:9f:17:31:33:db:aa:69:77:96:6d:75:a0:
         bd:e3:06:fb:a5:14:c3:dc:bd:07:51:45:bb:af:a0:cb:f4:9a:
         7f:51:33:d9:c3:2b:12:90:00:c5:1e:ec:5e:b2:78:84:53:53:
         e9:af:f0:83:96:d8:71:86:e6:fa:46:0a:95:c4:aa:78:2a:cc:
         8f:fe:03:1f:57:04:5b:e8:57:dc:90:5d:61:f7:fb:e3:90:55:
         21:40:32:cd:c8:e6:89:e1:45:32:fb:e6:e7:fe:f0:7b:86:d0:
         98:07:ec:6e:b4:46:e6:ba:4c:a1:d4:2a:c8:d0:c6:40:ca:57:
         0b:86:87:57:e3:d3:68:0f:4d:dc:c2:bf:5e:c8:96:30:ae:ab:
         cc:91:ba:b6:20:73:d5:f9:58:f1:c2:52:dc:2d:bb:72:c5:c2:
         57:4a:f7:57:c8:a3:86:cc:8a:e2:64:a6:3a:c4:69:e2:48:39:
         26:4f:19:10:f3:11:df:31:dc:45:6a:33:7b:13:e9:77:86:f8:
         6f:73:23:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----