Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File:                     VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier:          zr5S+6gNFXxvV9wLqBhsFCu8RJoJjq7fiyVuTJgcG9U=
Subject key identifier:   9F:5F:C6:FB:00:B0:A7:04:5C:35:89:1D:E8:DE:2C:D0:B4:17:9C:6F
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer:       /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial:       01962E995C3716D963B63389C8EEC3EDE4B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: d2UJFR/FLSYUeJp2LvKW6JYrK8N2VhW2aigHWegAhqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:37:16:d9:63:b6:33:89:c8:ee:c3:ed:e4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=9f5fc6fb00b0a7045c35891de8de2cd0b4179c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:b5:a6:26:07:5d:3e:fc:c5:a3:8d:fc:48:
                    01:2c:3a:ac:3f:1d:f5:2b:13:0b:af:4d:b0:26:c5:
                    53:9a:34:43:b2:e7:82:3e:e1:29:02:45:73:5f:68:
                    54:72:51:90:13:01:a5:3b:19:e9:4f:81:28:d2:e4:
                    1b:37:77:0b:51:53:53:f6:c5:9f:f4:a8:03:9c:b5:
                    b5:cc:13:6d:82:c2:04:15:6f:2f:ea:d5:e3:86:cc:
                    97:5a:f7:9e:80:a2:7a:03:5e:4f:9e:15:59:e6:54:
                    77:36:65:4c:a8:ba:fd:9f:5c:7d:45:c0:c8:56:22:
                    2e:5c:9f:d7:ea:92:df:b0:4a:7b:22:6c:d9:35:bb:
                    69:91:9e:e7:64:45:62:0f:78:87:60:25:a6:94:fa:
                    af:e5:51:61:ff:78:e4:20:b8:b9:ce:71:f6:d6:1e:
                    a1:7d:86:92:d6:56:1c:3a:4f:45:fb:7e:3b:0e:0e:
                    81:59:3f:f9:a4:68:40:3c:bc:08:b7:69:ac:19:8d:
                    f4:75:59:ca:5e:47:12:e2:49:4a:7e:45:35:68:62:
                    98:58:65:a9:ef:69:86:43:d0:48:81:8c:85:c6:a8:
                    8f:e5:e7:67:c7:69:4d:c4:5e:6f:b8:65:85:5f:11:
                    ad:cb:74:42:df:63:f9:65:59:96:f3:18:66:db:49:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5F:C6:FB:00:B0:A7:04:5C:35:89:1D:E8:DE:2C:D0:B4:17:9C:6F
            X509v3 Authority Key Identifier:
                keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5f:0a:91:0a:32:84:a2:39:3c:60:1a:12:d8:39:0d:1f:18:
         36:b1:0f:fc:6d:50:79:95:01:f3:e3:e3:6c:71:b9:35:b0:b3:
         37:bd:3d:c6:4a:06:92:38:88:50:d6:a0:71:d5:e6:d1:70:ec:
         07:c7:90:e2:e6:f3:c3:d6:9a:bb:e6:10:21:7a:e5:a2:8e:41:
         d6:5c:b3:c5:9a:7b:8b:d7:5f:0a:3e:b2:32:a0:1c:ee:40:3b:
         18:89:55:bb:08:4f:21:e3:5f:3d:f6:af:90:8a:da:01:1e:e5:
         89:3a:3c:60:a3:b5:52:39:b8:60:38:16:a2:5d:99:5c:b4:57:
         21:33:27:9c:3d:a6:cf:a8:fc:8a:b0:21:7a:fc:4e:0e:31:4d:
         44:a3:7e:6b:d5:2d:45:63:e9:05:fc:b8:68:69:40:4a:ca:f8:
         e0:1c:b9:03:af:1e:5d:93:a9:a9:21:ca:9d:cd:22:95:aa:2a:
         5f:e0:05:0d:af:53:a5:d2:aa:72:3f:63:6e:55:b5:b6:69:45:
         8d:fc:dc:49:d2:ce:2c:56:fe:92:3e:9d:30:79:1a:26:e4:d5:
         d9:40:54:a2:8d:e5:06:83:5c:da:ef:43:e9:d2:54:fe:9e:b7:
         3d:fa:6a:a6:20:51:33:ae:ae:f1:70:2c:8a:17:49:7c:6b:cd:
         eb:70:f5:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVw3FtljtjOJyO7D7eS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFjYjlhYmJiNGNhOWUwODY2MmE5M2QyZTczMmU3MGIw
NmMyZjIwHhcNMjUwNDEzMTAwMjA0WhcNMjUwNDE0MTAwMjA0WjAzMTEwLwYDVQQD
Eyg5ZjVmYzZmYjAwYjBhNzA0NWMzNTg5MWRlOGRlMmNkMGI0MTc5YzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ61piYHXT78xaON/EgBLDqsPx31
KxMLr02wJsVTmjRDsueCPuEpAkVzX2hUclGQEwGlOxnpT4Eo0uQbN3cLUVNT9sWf
9KgDnLW1zBNtgsIEFW8v6tXjhsyXWveegKJ6A15PnhVZ5lR3NmVMqLr9n1x9RcDI
ViIuXJ/X6pLfsEp7ImzZNbtpkZ7nZEViD3iHYCWmlPqv5VFh/3jkILi5znH21h6h
fYaS1lYcOk9F+347Dg6BWT/5pGhAPLwIt2msGY30dVnKXkcS4klKfkU1aGKYWGWp
72mGQ9BIgYyFxqiP5ednx2lNxF5vuGWFXxGty3RC32P5ZVmW8xhm20l/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9fxvsAsKcEXDWJHejeLNC0F5xvMB8GA1UdIwQY
MBaAFFX6y5q7tMqeCGYqk9LnMucLBsLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMt
MmVjY2ZjZTExMmRkLzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMtMmVjY2ZjZTExMmRk
LzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm18KkQoy
hKI5PGAaEtg5DR8YNrEP/G1QeZUB8+PjbHG5NbCzN709xkoGkjiIUNagcdXm0XDs
B8eQ4ubzw9aau+YQIXrloo5B1lyzxZp7i9dfCj6yMqAc7kA7GIlVuwhPIeNfPfav
kIraAR7liTo8YKO1Ujm4YDgWol2ZXLRXITMnnD2mz6j8irAhevxODjFNRKN+a9Ut
RWPpBfy4aGlASsr44By5A68eXZOpqSHKnc0ilaoqX+AFDa9TpdKqcj9jblW1tmlF
jfzcSdLOLFb+kj6dMHkaJuTV2UBUoo3lBoNc2u9D6dJU/p63PfpqpiBRM66u8XAs
ihdJfGvN63D10Q==
-----END CERTIFICATE-----