Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
File:                     vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json)
Hash identifier:          2dK+DVxzk3RFdVk3JAUf5TyEMcvyZ58Rfd7q0S9WiPk=
Subject key identifier:   ED:48:D0:46:8F:F3:58:27:73:5C:E8:C1:50:D5:3A:17:F6:A9:0E:A5
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Certificate issuer:       /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial:       01962F74B91284C160EBFC34F0723FC0E982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
Manifest number:          10B8
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=)
                          2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: nRRCvZY9fNbi48QoSwdyZ+bIBkwiZi+2Fz32V7Siwek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:12:84:c1:60:eb:fc:34:f0:72:3f:c0:e9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=ed48d0468ff35827735ce8c150d53a17f6a90ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:66:00:d9:69:32:ee:2d:29:3b:df:63:b6:
                    fe:f9:3a:59:d4:68:17:33:fd:14:e5:51:88:52:4a:
                    f6:b1:76:15:55:5f:84:36:8b:d1:83:e5:85:c0:94:
                    a3:01:47:21:2d:53:72:e5:57:8e:ac:11:7b:00:fd:
                    b0:3b:b9:cd:97:e9:2e:54:39:fc:8d:13:2f:97:df:
                    30:e6:07:8b:23:cf:13:ee:70:88:8c:55:ba:bd:c4:
                    5e:29:fd:7a:ce:00:80:65:06:a6:e2:e6:d0:04:8e:
                    a0:8a:f6:a2:36:43:a4:18:18:8d:ad:da:2d:dd:25:
                    40:68:18:04:ae:36:d5:14:fb:38:5b:2f:e6:24:d3:
                    34:08:ac:21:e3:6a:29:8a:0d:2a:ce:36:ee:57:b0:
                    68:e9:0b:e6:17:60:9d:8e:1f:50:82:49:ae:1f:ca:
                    c9:2c:f9:5e:3e:47:30:63:db:e7:82:c7:4c:5a:e3:
                    9b:f4:7b:79:c0:7b:0d:16:7d:3c:ee:b0:3e:9f:ff:
                    93:1a:fc:95:3d:b4:20:03:55:8e:9d:5d:66:4e:a2:
                    4b:a0:9f:46:86:a3:2d:22:64:1f:c4:e2:43:7b:5b:
                    7b:64:55:07:ca:18:31:73:80:5f:6f:9f:4a:05:85:
                    51:a5:38:3b:6c:9f:f9:8c:e1:9d:7a:a0:ed:49:32:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:D0:46:8F:F3:58:27:73:5C:E8:C1:50:D5:3A:17:F6:A9:0E:A5
            X509v3 Authority Key Identifier:
                keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:01:ae:ac:5e:14:9a:e2:b3:f1:9c:3d:cf:20:8d:01:4b:e5:
         07:92:53:62:de:1c:58:ce:89:0a:7b:84:de:77:38:95:db:7a:
         7a:ec:39:c7:96:ed:ca:5b:73:d0:54:8f:6e:36:73:d1:50:e4:
         2f:f7:08:5c:7e:3a:b4:f8:d1:45:5a:68:12:a3:0b:2e:b0:8f:
         49:8d:5f:a2:68:90:5e:4a:bd:74:82:16:e9:94:bb:50:16:3e:
         b3:99:bb:f8:e8:ed:d0:23:ba:75:bc:9a:90:b5:48:d9:37:8d:
         e5:54:c4:ee:49:26:70:56:d6:50:4a:8a:98:cf:e5:0c:50:8a:
         cd:23:e2:24:c5:4e:8a:46:bf:ab:ea:09:d5:a5:ee:12:e9:15:
         89:b4:d5:cf:71:f7:f5:d7:a0:3e:ed:94:40:32:1f:42:97:ba:
         9a:15:15:39:f9:74:1d:f3:14:11:81:4c:7b:20:fc:c6:85:b0:
         8f:4b:62:d8:81:ac:07:eb:f5:02:37:00:85:e9:b4:9c:8a:57:
         cf:0f:bc:f6:d5:cf:24:d1:df:c5:0c:77:fb:8c:db:54:43:86:
         8a:16:e4:9e:bb:e2:f3:78:e8:f0:b6:ff:a6:46:fb:8a:32:fc:
         24:85:e5:46:92:eb:54:f5:64:e0:d7:b6:ce:76:21:68:75:e9:
         2c:cf:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----