Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File:                     tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier:          gXWjt2U0Ud57u0W/kyLERya8uNvYzqdZlvCGx4gGspk=
Subject key identifier:   BF:56:18:FC:75:B8:DA:5C:FD:36:D9:85:4A:96:EF:7F:E3:8B:62:A8
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer:       /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial:       01962F0694581D972EA58F5A97D5BE81BEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number:          22
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
                          2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: 830nzcT0NsMFSaGnTyq8XebGFrPiQOtoTtdHTpTgkk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:58:1d:97:2e:a5:8f:5a:97:d5:be:81:be:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=bf5618fc75b8da5cfd36d9854a96ef7fe38b62a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:11:62:c7:99:38:03:9a:8a:83:4e:36:17:
                    94:93:f1:b2:ac:96:cc:53:5e:a1:98:02:66:d1:8f:
                    55:0e:e4:b7:1e:ba:7c:6b:d0:a3:35:25:e8:a4:0f:
                    c5:52:ec:45:cd:2a:29:93:b6:27:5b:a2:c3:8e:43:
                    6d:86:a1:c1:22:3c:75:c1:1e:05:32:fa:8e:20:c6:
                    58:b0:3f:ae:ad:f2:e5:de:7a:4d:d8:a9:07:ba:20:
                    b0:c8:9e:26:fe:fc:a1:c2:2e:01:de:2e:ff:0b:a3:
                    27:4b:f9:04:43:ac:ed:ac:2f:84:66:5f:d2:ea:62:
                    7b:56:a5:25:fa:69:f7:c6:68:9a:81:a0:65:2e:0b:
                    28:49:d9:de:54:0d:d9:db:2d:89:38:2e:49:f7:31:
                    d3:43:f3:de:35:e6:4a:e1:6e:f7:ef:c9:5f:47:5b:
                    ca:ef:73:1f:55:08:4d:a5:78:5f:4a:09:84:be:21:
                    46:8f:5c:17:af:09:80:46:12:c5:61:a6:27:dc:2a:
                    56:d5:b9:83:d6:11:20:96:0d:4a:fb:6b:e2:ea:41:
                    90:26:a2:94:c6:58:b4:43:8e:69:5e:5a:79:46:98:
                    f3:e1:69:fd:55:5b:0a:0f:22:b3:26:e6:4f:41:cd:
                    f3:98:a9:6b:58:ef:0c:45:98:54:08:2d:b6:b7:f7:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:18:FC:75:B8:DA:5C:FD:36:D9:85:4A:96:EF:7F:E3:8B:62:A8
            X509v3 Authority Key Identifier:
                keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:56:7c:4f:bf:15:5e:0c:5d:7f:1c:84:4d:92:dc:cc:16:66:
         70:d2:36:ef:f0:a7:a1:74:47:5d:c7:e2:24:6b:0d:39:05:4c:
         01:d5:bf:bc:cf:d8:2d:82:53:13:2a:da:18:b3:a0:d1:71:9f:
         c9:99:d7:02:f9:7e:60:c6:44:8b:b6:ac:c6:cd:e7:38:71:11:
         42:06:09:07:1e:82:53:88:5a:a2:2c:ca:d1:7f:82:2e:ed:bc:
         9f:8c:ad:0d:21:c2:9d:ad:f4:c0:3e:49:3b:39:d4:bd:63:0c:
         99:35:95:fb:d4:1b:59:90:ef:ad:88:a0:d6:f6:8f:24:e8:06:
         23:44:27:94:73:61:a1:c8:b3:30:00:e9:6d:fb:ac:bb:fb:af:
         b5:3f:df:21:63:ea:74:aa:f7:c5:87:79:d8:81:80:29:cd:d4:
         02:13:e9:76:8b:3d:51:84:35:6b:39:03:3b:fc:9f:1f:3d:3a:
         80:7f:29:c4:ad:1c:6a:59:b3:f5:02:48:bc:d7:ee:5e:ae:be:
         32:28:e1:de:af:06:13:1f:89:a9:68:dd:48:62:14:c4:c9:0c:
         ca:ba:ce:97:64:9d:f6:eb:bb:72:c0:60:af:d2:f9:56:9c:34:
         df:4a:09:c7:20:5f:8a:a1:04:f4:0f:16:57:17:6e:48:20:91:
         6e:36:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----