Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          237fw70tPAFMKVsKTTXslGFMXFLsBHZh0X2Usa1v2dc=
Subject key identifier:   85:98:8B:22:C4:49:7E:A6:D2:7E:7B:A9:E6:A5:F9:0E:7B:83:36:E9
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       01962DF3EB59D6FCFD155E2DAE9003C7FDCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          1307
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: uDuRH2IwZ/6nFXo5UN+ml99TmMRNBYhgiKAvUViZXb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:eb:59:d6:fc:fd:15:5e:2d:ae:90:03:c7:fd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=85988b22c4497ea6d27e7ba9e6a5f90e7b8336e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:9b:6e:3f:08:fb:0d:9c:b0:7b:72:08:2b:
                    95:4b:c5:7b:9a:d9:7f:12:53:11:d2:16:9a:a1:2d:
                    89:ab:e6:5d:73:46:4e:d2:6c:b0:67:b6:19:22:61:
                    e2:ff:34:bb:e9:6c:9b:4d:b8:9e:e8:f3:6f:d7:82:
                    ee:66:15:6d:07:dc:b4:5d:19:eb:a3:70:2b:79:85:
                    b4:9b:3e:c4:19:36:d2:a7:ba:e7:e1:26:91:1d:3c:
                    6e:e5:be:bb:46:60:3d:c4:c4:ce:ea:5c:4e:a2:60:
                    09:8f:46:06:bb:57:02:6c:9b:4f:7a:12:e1:5e:aa:
                    d0:3b:b6:bb:9a:6b:76:36:f5:5e:5d:a3:da:56:ec:
                    c7:1e:cd:88:a5:61:9b:fd:fe:33:45:52:ab:0c:ba:
                    d9:d7:e9:a8:dd:dc:76:6a:1a:a1:17:13:6c:22:0f:
                    75:09:66:77:7d:b8:f6:0f:24:52:ea:17:b6:73:a3:
                    59:44:22:47:07:4d:27:25:1d:a0:90:ae:b1:bb:e5:
                    66:5f:ee:4a:e6:30:09:38:54:c3:78:73:20:5b:3a:
                    7e:b1:8c:9d:cc:b4:f1:f4:7f:4a:f4:88:a9:99:80:
                    d5:8f:00:c2:29:75:bd:71:43:26:ce:a6:4b:5d:b9:
                    f2:1d:c9:63:39:29:8b:d9:ab:cd:b5:16:00:5c:88:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:98:8B:22:C4:49:7E:A6:D2:7E:7B:A9:E6:A5:F9:0E:7B:83:36:E9
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:1d:d3:b7:fe:4b:31:bb:37:3b:4f:0e:6d:f8:5f:30:62:
         dd:f1:3e:5c:cd:76:a7:7f:f0:58:64:bd:2a:86:2c:08:d9:85:
         17:f4:53:00:aa:97:f5:76:2b:50:dc:23:e9:27:27:60:14:ea:
         7d:e0:a8:d5:52:79:03:13:9d:bb:7b:c3:c3:20:8f:c0:da:d1:
         49:d6:e8:bb:b2:24:b3:f1:9e:69:10:58:67:08:75:88:bc:3e:
         5b:70:c9:21:d3:9d:c3:91:22:91:e6:86:35:5c:8f:16:06:10:
         d8:4f:bc:86:a7:ac:29:6e:5e:54:43:1f:98:97:88:02:e4:23:
         80:fa:4d:f0:d3:1a:bc:d5:16:ee:0c:45:ef:3a:82:c9:01:2d:
         c2:fb:cb:eb:3c:b2:48:75:57:bb:8c:a0:7d:ab:1f:52:d3:0d:
         36:a4:28:27:74:79:aa:d9:9e:1e:57:e2:b2:35:f6:6a:70:1b:
         c1:79:d4:54:bb:cc:c3:87:c5:9e:c0:2b:02:a4:82:bd:58:dd:
         e6:70:6d:3e:08:44:f5:21:fa:13:4e:37:2a:c2:43:72:5a:63:
         5b:5a:ed:98:ea:8c:00:13:dd:3f:a7:34:65:df:92:84:9f:5f:
         38:93:a8:6a:0f:54:fc:8d:26:25:a7:3c:c8:f4:f9:42:e0:81:
         54:7e:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----