Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          ChZr8+t0Gd9zKskEpGnX9oC5jIqrDapa2DgWs+VgyJM=
Subject key identifier:   21:8F:88:7D:FB:66:2B:BD:71:2E:7A:4A:F6:F4:7D:F7:E3:56:FB:D9
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       01962F3D746D1D0A2CD49EC75ED71E4D8257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          0405
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 1ffahNtPZYX-N5j-O0KlFd0HH4g.roa (hash: MoHHu9VYXOcbIDzTY/tBkP4afwJz6bsnwUqB9SFua4c=)
                          2: 3YupD0E1MQgwS1xrKNs025XGrvU.roa (hash: 21HOFTvc6Ct7i0rTAQHqk7NP6aZsXA22C7NraCUFkZ8=)
                          3: Jl24RpiWW2mnZnbXdVkHkwv5Ym0.roa (hash: 9jibyw+e0hpTaQ/C5dcgmcHW+Sc46nG49PYel1M3f7w=)
                          4: PlUFC6HKWWFjpql9DijziKwkcxw.roa (hash: 4W/hkwQltLoMthbvB9BB52pdcgOpX1UVyOI2+0P/Mmg=)
                          5: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: owHykJ9LZ4Q+ix+ttO2XbjchCK6QuE3f/mDwzPLbORM=)
                          6: al3sVmLza1lSWMNmX1wAnE6di0g.roa (hash: QViBGQ++sKC9WspIzy9uy1czwUBc30L4ut/rMlvD+hk=)
                          7: fOL2wn0hbjiBWIHSHx0ol-_V10g.roa (hash: /gFNmPhq1jkVbBwjHrnp2B3jWhZTHQ03KV2Xr4G2VBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:74:6d:1d:0a:2c:d4:9e:c7:5e:d7:1e:4d:82:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=218f887dfb662bbd712e7a4af6f47df7e356fbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:d9:57:9e:53:f6:f2:75:d6:80:d0:79:74:
                    e5:16:40:f7:5b:54:34:bf:aa:a7:b9:8b:61:03:1c:
                    b5:20:ea:87:49:d2:2f:4e:93:35:ab:50:c0:fd:4c:
                    50:a1:5d:1e:84:0a:09:15:41:bf:d1:27:ba:ad:d8:
                    7e:0b:07:ca:3c:b8:3b:e2:f0:eb:33:1a:d2:2b:ee:
                    e1:43:dc:a5:91:f1:2f:a4:af:58:b5:82:b2:f2:c2:
                    45:07:23:7b:f9:3e:4d:e9:56:98:24:3a:06:26:45:
                    16:b4:be:17:22:ea:12:63:c6:ca:e3:b1:dd:c0:0e:
                    a3:0e:6a:7a:6f:24:cb:58:a5:77:e0:e9:b1:79:33:
                    53:2e:8f:92:dc:22:06:5b:15:f9:41:f9:91:96:a8:
                    a9:f9:34:a4:5e:d0:31:c4:9a:ad:68:56:7f:e9:99:
                    1c:6a:14:7a:a3:d1:ca:91:13:36:a7:57:4b:19:90:
                    82:73:07:fa:1c:5d:a9:53:c9:67:fc:ea:ac:66:ce:
                    f1:d5:0a:68:4f:7c:e2:48:1f:6c:b3:c3:14:a6:28:
                    e4:64:e6:76:5b:9a:c2:d2:6c:bb:9a:ab:da:a3:2f:
                    1c:48:00:c8:81:82:43:a1:d0:32:4c:48:d9:6d:d4:
                    5a:c5:88:df:ca:bd:42:bb:73:3c:db:5a:7b:af:29:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:88:7D:FB:66:2B:BD:71:2E:7A:4A:F6:F4:7D:F7:E3:56:FB:D9
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:82:ee:51:cb:5c:57:db:d9:f7:b9:b8:fa:48:d2:d4:17:60:
         35:63:c2:6e:c0:78:7f:d4:3f:3d:bd:59:8b:c1:bf:40:65:c0:
         fb:e0:f5:4c:84:cd:fa:75:53:40:f9:e6:61:ab:04:15:13:8a:
         50:82:41:6f:d5:3d:a6:28:54:72:76:33:5f:a8:88:d8:6e:5e:
         56:fa:9b:48:5d:2c:16:56:7a:86:9a:4e:9f:2f:3e:12:d6:c0:
         ef:1d:e9:9f:7e:8b:5e:fe:89:6d:ab:20:bc:82:7d:cf:32:6e:
         08:07:fe:41:66:9b:1a:89:c7:8c:03:bd:5d:90:05:52:b8:8f:
         9a:ce:4f:8b:d8:c0:8a:7f:11:5e:65:39:7b:81:78:74:6c:c2:
         73:20:4e:de:a9:66:70:cb:af:af:bd:46:fe:c2:11:44:a0:46:
         e6:63:be:10:e9:f1:0c:c4:42:81:25:78:e6:fa:80:cc:a4:ff:
         57:a8:89:2d:9d:23:cc:16:e8:52:5c:7a:de:76:7a:b7:7c:b1:
         5a:a0:83:da:7f:ad:48:23:00:90:bf:8c:d0:df:79:0f:77:df:
         3a:43:dc:b8:03:09:20:1b:f4:3e:41:68:6c:09:80:5c:3b:35:
         bd:fb:62:c1:0b:4d:37:9f:7d:11:09:d8:30:30:94:dd:c4:c1:
         d0:01:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----