Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
File:                     vTvLhii9vq2xlKI1rEuMi3EeN9E.mft (raw, json)
Hash identifier:          MvhZxWyOdbhq9mxfc5HsQPTjvW+x3xRm6viqXdJzdFE=
Subject key identifier:   62:5F:47:81:11:A4:EA:BA:1F:2C:31:42:0E:C3:E4:7F:A0:2B:AB:FD
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Certificate issuer:       /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial:       01962E6172EBB6FD1EC956181B03EEDD8CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
Manifest number:          09A4
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: bW-fv4_NbG1PNojUcPp0YRQIoB0.roa (hash: 7Z5rf32BgI6fjeUEiIFvBelYmcDYWIutC0cfXs7YxV4=)
                          2: vTvLhii9vq2xlKI1rEuMi3EeN9E.crl (hash: AH6BrFTzAWdiURZrCkofhpeUHiriuz3cRskbQfzsd1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:72:eb:b6:fd:1e:c9:56:18:1b:03:ee:dd:8c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=625f478111a4eaba1f2c31420ec3e47fa02babfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:4d:52:d7:3f:58:b7:5b:d1:9b:a8:9d:84:
                    f9:f3:83:35:c3:7f:07:64:3e:bc:64:eb:3a:6d:17:
                    bb:f7:db:98:b6:a1:97:8d:27:5e:c4:a7:ac:dc:92:
                    4d:e1:3b:cd:18:c3:91:3c:18:83:15:80:e8:4b:ab:
                    fd:2b:a6:82:da:cc:9f:c9:ad:2e:3d:6a:9d:d2:72:
                    64:39:2f:8e:f9:3a:65:4a:7c:22:50:6b:7e:ba:63:
                    ec:9d:29:d7:5e:0a:de:32:26:6d:b9:56:da:26:a1:
                    1b:80:b7:4c:81:45:d7:9e:ad:05:5e:f8:a9:eb:eb:
                    a9:e5:a8:29:d6:c4:82:ac:34:df:6f:ac:e4:f3:f0:
                    13:ab:16:41:73:75:3e:f1:b5:73:5b:49:5e:81:c3:
                    1e:17:32:0f:e3:53:a4:ed:99:45:e6:b6:1b:ed:60:
                    a3:54:fc:e5:fb:d6:e9:3b:26:5a:99:ba:98:44:7c:
                    42:de:df:2f:de:97:96:03:09:3f:a1:71:bb:c1:f9:
                    8c:c0:90:bf:83:2e:77:0e:d8:2e:a5:cc:6b:8c:6c:
                    8b:37:26:02:5e:29:da:72:c1:5f:d5:ca:ff:f3:02:
                    e9:e6:73:ad:e4:d0:ad:21:94:7a:2a:57:07:c2:dd:
                    39:aa:cb:38:28:76:d6:84:ab:da:4f:dc:e2:66:ac:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:47:81:11:A4:EA:BA:1F:2C:31:42:0E:C3:E4:7F:A0:2B:AB:FD
            X509v3 Authority Key Identifier:
                keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:95:36:03:15:4d:37:47:75:f7:f4:7f:d6:0b:d4:f8:af:b0:
         1f:74:c0:69:6c:04:7f:dd:50:c0:ea:f6:93:49:21:69:d1:1e:
         7c:4a:43:10:c0:38:08:ae:bf:0b:81:da:f1:d2:b2:6b:49:53:
         10:34:02:41:17:18:e9:73:92:28:05:03:f4:c8:1c:1e:1a:32:
         32:e9:ff:72:81:11:56:75:30:b2:f5:40:ec:1f:32:80:91:78:
         80:01:b9:87:42:25:ca:16:8c:08:e0:da:f0:02:63:41:b4:40:
         b1:36:2c:5f:c8:38:59:41:91:01:6a:74:5c:c9:65:f5:57:26:
         c6:4f:59:fb:aa:cd:de:b4:22:72:72:2e:fa:62:53:76:09:29:
         58:3f:4f:bc:82:be:b4:8e:4a:0c:7e:73:39:a6:89:66:09:00:
         e8:ec:a0:24:dc:fe:85:c1:2d:28:0e:08:2f:ac:48:78:fe:88:
         05:18:b8:75:d6:4b:f5:b0:e3:11:35:8a:0f:6c:32:4f:fc:8b:
         a2:0a:f3:c6:7b:16:93:e6:5a:de:23:dc:6c:4e:e4:9d:81:6c:
         a1:f9:9a:4f:f2:53:87:0c:29:08:91:c2:16:3b:95:b4:d1:dd:
         a0:22:5c:d5:b5:13:50:6c:a2:48:2e:aa:9b:bc:c1:1c:3b:7f:
         42:7c:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----