Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File:                     vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier:          HGOk1r5yptk2SeSoih/sM8xCZ+uc26bgoSGkpMIb6tQ=
Subject key identifier:   06:BA:C4:0C:AA:82:C3:42:19:8B:42:52:DC:11:D8:80:F8:98:F8:94
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer:       /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial:       01962F06CD5D1CD023D0BBC0D933141566D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
                          2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: oESIKBOIYiirDnXlN9V+HVLpjb5WNrlQKKjOMskB9Kc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:5d:1c:d0:23:d0:bb:c0:d9:33:14:15:66:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=06bac40caa82c342198b4252dc11d880f898f894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:13:7d:0a:d0:7a:3c:bf:d5:74:15:31:29:60:
                    ed:99:12:67:c9:27:30:fa:d5:f8:ae:be:b3:2f:3f:
                    49:69:e6:80:8e:e3:06:9f:38:a3:56:50:1b:9e:bb:
                    90:8c:23:93:79:89:27:3c:f3:f6:22:b8:98:63:5f:
                    85:b4:ce:2e:dc:6f:73:02:50:e0:b5:ab:bf:c5:14:
                    1e:79:26:77:fe:e4:47:14:10:ad:6c:e9:9e:1d:02:
                    4b:7e:e2:e4:2b:f0:2a:14:fc:42:26:eb:dc:1c:ed:
                    63:b7:61:ad:5b:c0:a2:58:b1:85:55:13:2f:a9:3a:
                    4a:2c:78:fc:be:f1:9f:3b:d3:62:ce:6f:e1:f1:4c:
                    55:0f:19:98:12:f2:d1:79:98:31:f7:10:bf:f1:b4:
                    6a:ca:8f:98:82:94:c5:5b:09:0f:29:8a:63:d9:f9:
                    4a:99:8f:4c:6d:b4:fa:18:72:01:b5:b2:c6:3b:eb:
                    8b:17:a3:d4:c0:9b:4e:87:3b:ed:d8:43:7b:f1:bc:
                    ac:61:32:34:26:93:c2:91:93:2b:57:13:38:8f:ab:
                    87:3f:cc:13:3d:54:94:79:53:b1:3b:26:7d:36:57:
                    ab:cc:a6:bb:cd:56:62:ed:02:94:5f:9f:dd:d5:f1:
                    36:a4:c8:b4:cd:f0:c2:58:d2:65:c3:85:70:4e:da:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BA:C4:0C:AA:82:C3:42:19:8B:42:52:DC:11:D8:80:F8:98:F8:94
            X509v3 Authority Key Identifier:
                keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:38:2e:d1:3a:0f:2c:01:b3:95:79:71:81:ce:47:70:aa:23:
         58:cd:32:b3:51:f4:a1:cd:3c:de:b2:89:f3:bb:3d:cb:3a:7e:
         21:c8:ca:6d:8a:f0:ca:7e:65:f9:99:32:8b:eb:e8:de:10:d7:
         7c:10:35:c9:e0:96:ff:4d:59:19:64:9e:8c:17:84:08:5b:b6:
         56:23:81:30:d2:16:f9:e6:3a:e0:8a:c2:99:f9:27:74:0b:bd:
         c7:3d:f2:ee:67:08:af:ab:a6:44:77:11:ec:f1:6b:85:72:8f:
         4a:3d:28:86:87:b8:d5:20:9e:dd:54:6e:f6:dc:83:24:fc:60:
         43:11:0c:16:9a:c1:9d:a3:4c:c5:d6:fe:dd:89:d3:dc:f4:75:
         34:0e:0f:3f:94:e7:ff:9a:9d:df:b4:91:c1:c9:9a:38:84:68:
         72:46:9b:3e:57:3b:ab:61:f8:92:ab:71:58:f1:b2:15:4b:55:
         3d:46:8a:0b:3a:00:72:2e:a8:aa:2e:a8:1d:f5:ee:f5:7d:de:
         47:b0:d8:48:e6:3c:2c:cb:45:2d:e9:70:86:01:6b:1e:df:61:
         51:03:cb:4f:bc:4b:44:cf:ef:12:7d:22:bd:d0:24:56:55:8e:
         81:b9:65:2b:27:d1:ab:bf:67:bd:27:cf:ef:8f:64:00:ba:5a:
         e2:66:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----