Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
File:                     vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json)
Hash identifier:          /UWPv+AekdXyXyBZAG8qcmIVWljNU1b9ppp5jXYsq20=
Subject key identifier:   40:6F:F3:DD:45:56:13:99:11:41:D6:F3:A3:EC:DB:BA:AF:48:0F:79
Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
Certificate issuer:       /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Certificate serial:       01962E2AD85E0C23F4AB5024E62522783FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
Manifest number:          048D
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=)
                          2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: 15EpZKTot/7+Lm8Mog1U9cAurb0CuGArM8Po+fukJgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d8:5e:0c:23:f4:ab:50:24:e6:25:22:78:3f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=406ff3dd455613991141d6f3a3ecdbbaaf480f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:81:6f:b0:bc:dc:79:b2:f6:64:53:24:f4:
                    d6:68:b3:2b:e7:2d:0e:d4:52:3b:83:c3:bd:7d:f3:
                    24:41:d1:b9:e9:74:bc:02:7f:1d:cb:a0:ab:18:0b:
                    13:83:39:14:41:a4:fa:a3:7a:91:22:61:dd:4f:e2:
                    66:7c:0d:76:07:96:b0:68:24:8c:e1:c8:2a:a4:ff:
                    3e:19:74:2f:be:2f:73:64:3f:b7:1e:25:ec:9a:af:
                    07:47:80:48:02:a9:19:a3:a4:8c:25:69:5f:a4:90:
                    1e:0c:8b:fa:54:81:1c:1d:17:c7:d9:73:05:66:f4:
                    24:e7:91:b7:8d:a1:69:f9:c1:6e:01:f3:e6:c6:d9:
                    b8:4f:83:ff:01:2e:db:7b:af:c0:62:67:b7:21:96:
                    41:30:05:99:b0:0a:aa:51:67:b2:03:b2:59:37:0d:
                    80:f8:ce:1d:02:02:05:4b:7c:eb:87:55:88:a6:74:
                    90:d1:8a:57:02:78:6c:f0:a0:c4:4b:7b:09:98:71:
                    b7:96:fe:50:db:82:a8:f5:18:5a:03:f5:cd:75:ce:
                    8e:b7:9e:15:8f:e0:6b:4c:da:68:dd:f0:e1:eb:de:
                    a4:a0:e0:87:8c:ae:ea:80:a7:09:cb:23:0d:a4:a4:
                    00:1a:68:36:a5:fe:62:05:f6:29:33:e1:fb:22:12:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:F3:DD:45:56:13:99:11:41:D6:F3:A3:EC:DB:BA:AF:48:0F:79
            X509v3 Authority Key Identifier:
                keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:4f:d0:30:8b:7d:1d:66:b5:be:81:07:e2:a4:d8:7e:e0:
         4d:fe:b9:bd:4c:a6:70:67:a3:3b:ae:ea:f7:28:63:6c:52:63:
         d8:62:6f:1f:8d:78:8d:98:f2:d7:63:d6:21:d3:03:8e:ca:c2:
         a6:9d:d3:a0:4c:3b:f9:12:1a:33:61:15:57:1d:19:55:fc:06:
         ca:98:80:6b:8c:c4:de:a6:32:14:fd:56:90:c1:6d:3c:dd:5d:
         72:79:1f:fc:f1:9b:a9:89:c5:1a:4d:13:ab:b8:69:c2:33:0b:
         5a:fc:c6:f8:76:66:85:d3:65:34:ca:68:90:dc:f3:49:b8:15:
         40:73:33:55:ec:d7:0a:16:a5:3e:79:74:b7:c7:5c:4c:c3:f4:
         55:da:3e:e4:08:cb:a5:ed:a5:ed:5d:10:30:ee:b1:f3:b8:fc:
         9a:97:d3:ae:ec:e8:07:d2:2c:e0:3f:bd:7e:d2:89:26:d8:92:
         bb:01:76:e9:d3:27:74:dd:11:a1:36:89:ca:05:2a:f5:30:1f:
         75:9e:bd:86:07:85:bd:44:26:1d:b9:7a:b2:b8:a7:d3:c4:99:
         0d:db:6f:50:b4:f0:21:7a:8e:39:77:1c:db:04:a9:3f:28:76:
         b1:d6:d2:5a:55:ad:20:0f:1a:f0:00:79:f4:af:75:8b:75:1c:
         5b:3c:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----