Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File:                     veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier:          sqfiThc4vq897E9Xw6353iy+9kdP2tYd0/ii6oVOu98=
Subject key identifier:   6B:52:59:FE:0E:D9:86:EA:8F:5D:8A:3D:3E:FC:2E:61:9C:D3:8B:1F
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer:       /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial:       01962DF40C39694A686456FFA3F18B3C621C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
                          2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
                          3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: ts2F4P+74wyINCGSRjqFkbelDRY3cj+uLKUpNd66k5g=)
                          4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0c:39:69:4a:68:64:56:ff:a3:f1:8b:3c:62:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=6b5259fe0ed986ea8f5d8a3d3efc2e619cd38b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:ad:2d:e4:6a:1b:7b:e8:a1:21:d6:a3:82:
                    06:1e:17:71:ac:63:b7:01:31:e6:7f:db:c4:46:ab:
                    c2:e1:54:bd:9f:4f:ce:31:45:c4:87:de:5e:95:76:
                    11:a6:3b:1e:44:46:d8:64:b1:68:ce:b8:b7:89:95:
                    12:dc:49:bd:7f:f6:e6:5f:b0:33:2c:33:69:64:44:
                    c9:7a:2a:db:ac:a4:a0:65:d1:be:ee:f3:dd:0b:b8:
                    99:20:c3:c0:ac:98:93:5b:29:ff:e5:c1:63:d7:f6:
                    16:c2:ed:25:a7:c0:e7:6b:ab:e0:b8:52:29:bf:a2:
                    51:4e:0f:8b:b6:b3:be:4e:9a:27:70:98:47:9a:da:
                    01:44:59:bd:a7:2c:54:64:2b:be:80:a8:ac:44:0c:
                    d1:9b:d8:90:91:89:6a:f5:ea:1a:a4:59:30:bb:a1:
                    2c:83:09:a9:ff:f4:d3:2a:87:5a:16:e7:47:0e:22:
                    7c:8a:5f:f6:71:94:7e:d8:3d:02:81:3c:9f:4f:00:
                    49:c8:52:e6:e9:17:ec:c9:d1:f2:69:c8:4a:99:c3:
                    2e:37:39:9b:98:73:4d:c4:f4:37:68:d0:53:e1:48:
                    f5:7d:01:57:dd:19:6c:1d:a0:6b:f9:29:89:bf:23:
                    a8:1a:1e:16:6f:f0:04:31:24:5a:2b:f9:fc:4b:78:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:52:59:FE:0E:D9:86:EA:8F:5D:8A:3D:3E:FC:2E:61:9C:D3:8B:1F
            X509v3 Authority Key Identifier:
                keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:62:7d:e0:9b:ad:af:77:6d:46:c0:b4:2e:e2:5a:44:8f:54:
         21:c9:c9:78:ee:f9:e2:d3:a6:7a:24:87:77:ab:4a:17:12:ce:
         d5:95:75:ad:81:1a:00:9a:ac:cb:a0:30:02:eb:c8:cd:52:87:
         b4:60:7d:a0:bc:ff:82:18:c4:7f:56:c0:b4:17:d7:37:41:de:
         14:b3:76:80:05:f7:8a:a4:32:85:75:a5:31:5b:51:e9:7b:4a:
         72:0f:ff:c3:6a:a8:cc:43:40:fc:b1:c4:ef:dc:8c:db:81:0a:
         70:f6:29:fd:ba:bc:c4:6c:57:3b:a0:1e:23:e8:a6:bb:6f:88:
         8f:b9:fa:d9:1a:f4:74:85:eb:a3:1f:7a:79:e9:31:d4:e9:85:
         64:bd:03:88:03:5f:7e:b3:d8:c6:e3:45:33:ef:b5:00:ad:45:
         73:03:08:3d:56:78:98:27:72:42:de:32:d0:65:c6:8a:6f:1c:
         79:ba:4a:8f:f1:87:f0:06:66:1a:4b:07:d3:56:1c:96:b0:f6:
         fc:cf:da:79:38:e1:dc:d9:7d:01:8b:d9:cf:25:b3:4f:b7:2a:
         bc:7d:b9:f1:6b:c8:f2:8d:5e:64:4c:b1:4c:f6:9d:13:ab:fc:
         ef:26:e1:1f:19:05:87:21:24:f8:cf:87:54:5f:ec:af:43:f1:
         09:12:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----