Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          QKL8ufftpe/FoaTOwIvxpN/qdfRFCvpiw3Mu3redStk=
Subject key identifier:   6D:B1:24:89:FF:26:5B:64:35:8C:AF:A2:12:D3:BB:C1:F3:58:6B:EE
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       01962F3DD8B045A26FCAA2B6B4E71560C1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=)
                          2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=)
                          3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=)
                          4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=)
                          5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=)
                          6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: ayWpyO7hK+QH1ILJDBQ9I9dDCElsa6e6c+rOtKYDa1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d8:b0:45:a2:6f:ca:a2:b6:b4:e7:15:60:c1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=6db12489ff265b64358cafa212d3bbc1f3586bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:f1:2a:19:9d:6b:9e:ba:42:5b:90:00:83:
                    3d:f7:14:e1:69:94:8b:dd:ce:ea:50:77:16:89:51:
                    1f:3e:a3:8d:02:32:20:c5:83:33:c4:e0:38:40:c2:
                    55:eb:dc:91:83:ed:12:fe:1a:1a:8a:3b:32:8d:b5:
                    ac:86:12:9d:43:ad:1d:c4:e5:4c:91:90:37:f8:e2:
                    8f:b8:9f:21:fc:d8:30:98:03:8c:f4:92:ca:4d:22:
                    06:91:97:82:6c:5d:9a:36:ba:cd:b4:53:e0:15:4f:
                    08:ef:d8:c8:02:41:96:db:30:f0:36:2f:fe:3b:c7:
                    3c:d3:b4:c0:f0:6c:20:49:92:21:42:6f:12:6a:70:
                    af:09:4b:b9:4e:ba:1f:0b:c2:86:98:93:bc:fc:45:
                    2d:2d:2d:79:b3:8c:ac:e0:b1:5c:32:28:8d:e9:a4:
                    02:0f:bb:32:82:4c:7e:f6:82:20:85:c1:c9:8e:9f:
                    ef:55:e1:14:ed:84:ce:de:52:9c:96:1e:0e:3f:da:
                    75:35:a6:dc:df:f4:71:0c:65:51:dd:de:09:70:61:
                    6a:80:80:80:1e:e7:e7:f5:bc:bc:f6:02:72:d2:04:
                    fd:97:6c:29:a1:7f:0f:5f:8e:b1:c6:6c:88:c3:cf:
                    e7:1e:53:19:fb:d8:7c:99:3d:57:7e:f7:85:a1:4e:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:24:89:FF:26:5B:64:35:8C:AF:A2:12:D3:BB:C1:F3:58:6B:EE
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:76:a9:bc:45:6d:4d:d8:39:11:81:a6:f6:0e:5f:19:f7:25:
         83:67:06:ef:24:0b:47:92:c1:26:91:7d:ae:59:b0:37:70:5c:
         e2:c6:00:62:74:ff:d8:43:41:e6:12:ac:53:25:68:0b:d9:b5:
         57:27:fd:7b:40:e8:11:be:a7:dc:e8:95:08:c3:92:6f:dc:a6:
         93:66:ac:73:6b:8e:b1:d4:2f:ae:7b:52:ce:cb:88:9c:e6:0a:
         02:44:af:6f:04:ad:88:6b:2f:0e:ce:fe:ab:9c:34:eb:08:dc:
         0d:ef:0f:4e:35:75:7b:28:8a:cf:ec:a9:b8:dd:bd:f3:dc:fc:
         91:b2:16:2f:83:84:ec:3f:6e:93:d4:da:db:70:fb:5e:98:d6:
         86:cd:48:3e:0b:51:cb:30:7c:1c:42:54:d4:ea:a5:48:ec:bf:
         3c:a1:bf:53:cb:0a:bf:61:8e:3f:76:05:7d:94:37:51:e7:0e:
         c9:6c:69:b2:37:78:40:95:8c:64:ec:45:dc:67:fe:77:f4:65:
         d8:55:c7:e9:91:4c:53:1b:b5:72:4f:be:9f:18:0f:b0:9d:7b:
         d1:30:76:48:eb:45:44:be:0e:b0:e5:51:56:0f:65:70:4e:be:
         f4:5c:9b:d4:1e:b8:24:76:8f:d7:97:f4:f5:ad:5f:14:76:6f:
         47:e4:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----