Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File:                     vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier:          rwypqzKZvEXGCD4fKAgaQKIkmTjGnGt6RTbJG9M/oPU=
Subject key identifier:   3B:D0:DB:38:93:59:CF:13:13:B4:D1:A1:C2:FE:A6:BC:99:11:3B:5C
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer:       /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial:       01962F749721FB5012F86A171D565C410B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: Gf4riRaoKN2ZkJe6BKcrNwZHrHVqoSH2Pb0Z32m6hXM=)
                          2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:97:21:fb:50:12:f8:6a:17:1d:56:5c:41:0b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=3bd0db389359cf1313b4d1a1c2fea6bc99113b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:e6:4b:10:00:43:04:05:e5:3a:11:c9:e6:
                    67:e2:ab:af:2f:94:7a:fc:52:58:96:5b:df:2e:fd:
                    58:5e:ba:b2:2f:49:7c:92:8a:45:4f:b3:3a:e2:7f:
                    06:0f:cf:1c:09:3d:c9:9d:b1:2c:54:c8:47:e9:84:
                    08:83:39:05:d6:7d:34:58:13:04:c0:13:36:f0:32:
                    b4:9e:08:ad:65:cb:f4:2a:89:78:71:3b:e0:c8:3c:
                    03:5d:63:51:2d:51:a8:d6:7e:e8:50:d8:f5:f5:57:
                    a2:6b:51:eb:ba:95:c1:be:0d:a0:4c:86:92:18:6b:
                    ce:7d:50:5b:f3:6d:bf:4b:0e:3b:d6:0e:69:79:06:
                    c9:36:4c:2d:49:f8:d4:7e:e2:48:89:0e:7a:31:37:
                    41:42:61:87:f3:51:c9:71:1a:fd:da:a9:46:94:5e:
                    db:2a:3d:35:ea:5a:06:88:6e:af:41:71:64:ec:0b:
                    11:11:42:c2:c9:47:a7:fd:b9:9c:42:fb:38:01:14:
                    82:e0:7d:4b:7e:30:f7:68:0f:2c:b7:c9:25:33:70:
                    70:15:a4:30:16:e5:55:b2:3d:e8:0a:ac:4e:5c:c7:
                    37:15:1c:90:82:f6:cd:8c:91:db:38:9b:f1:2a:7d:
                    25:48:ef:68:15:bd:9e:b6:ec:f4:0d:8c:9c:53:88:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:DB:38:93:59:CF:13:13:B4:D1:A1:C2:FE:A6:BC:99:11:3B:5C
            X509v3 Authority Key Identifier:
                keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:60:48:f8:44:ae:8e:ae:f8:6a:60:5f:f7:3d:40:fe:96:
         63:9a:83:c2:90:5c:d5:6f:27:ef:9d:ee:7c:75:2d:43:4e:01:
         5c:10:5a:38:09:fb:8f:56:2b:dc:3e:be:fb:c6:5b:d0:27:8c:
         6b:3c:d5:59:d2:a8:a4:da:be:45:d5:5f:55:e7:95:e8:fa:b0:
         bc:94:fe:04:c3:30:5b:c1:64:46:5b:f0:cf:b3:f7:2d:6d:45:
         37:06:67:6a:7d:60:fd:a6:db:d0:0c:bc:28:16:70:9a:6c:ca:
         cb:a3:39:3b:93:7b:6b:af:5d:05:3b:31:59:9a:7a:cc:7b:ab:
         7f:e0:72:4a:85:be:5d:25:5e:ea:5b:1b:86:17:7c:04:13:47:
         27:ae:ab:ff:af:b3:60:5a:a4:1b:fd:e6:5a:61:92:9c:d5:f5:
         84:27:bc:d7:89:e8:50:d7:d0:30:3a:74:b0:f5:a8:11:a7:a9:
         1e:10:42:f7:2e:d6:48:55:8c:05:a1:c0:c0:d6:24:00:fb:cc:
         b7:69:57:a9:8b:94:94:38:27:be:63:ef:da:53:87:35:ff:01:
         f6:bd:0a:22:61:e9:c5:9d:60:e6:94:da:12:af:22:2a:40:55:
         9f:14:4f:69:8c:d0:02:9b:88:99:e7:e2:ee:7d:95:8d:b5:af:
         4d:fa:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----