Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File:                     MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier:          dYCHNSaeoYQI7n7de1o0yp/8rgbvLxlBegBUCBQbae8=
Subject key identifier:   57:42:46:5E:64:D4:30:5A:7E:45:A6:BB:AA:75:DF:E2:2B:D3:DD:C7
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer:       /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial:       01962F06F4D6A55F6A36801B47B621899EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number:          0C5E
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: S3hqRFh+9Mpihb3ES8BjAlSQ/qfFxCYx36Ol73kDpow=)
                          2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:d6:a5:5f:6a:36:80:1b:47:b6:21:89:9e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=5742465e64d4305a7e45a6bbaa75dfe22bd3ddc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:5b:ec:8c:25:61:92:6f:aa:b7:93:10:5e:
                    a8:1c:d3:9a:aa:ba:c5:05:fa:29:2d:92:a5:fc:31:
                    26:a3:f1:18:b8:18:87:a3:88:9a:9e:d4:17:96:49:
                    f2:80:3c:7c:b0:0a:e8:a9:8e:4e:71:d9:55:93:a9:
                    0a:a2:59:7b:8c:91:ba:c7:5a:92:18:bd:fc:c4:e5:
                    82:b9:27:16:04:f6:42:f9:77:ac:63:4d:10:e9:be:
                    fe:25:90:59:2b:cc:0e:c3:ed:78:9d:6d:bd:43:f0:
                    f8:d0:28:1b:ea:4a:a1:2a:c1:75:7c:fa:c0:44:d6:
                    9b:9b:ea:e1:04:d9:c4:c4:d6:74:3d:30:1d:3f:69:
                    99:9d:01:39:56:d1:26:8f:d1:45:19:66:d9:9b:da:
                    a8:aa:f6:7b:ad:dd:27:6f:4a:66:70:0a:a7:5b:d4:
                    a4:27:5e:e1:2c:b3:a7:13:6e:47:0e:c7:03:0a:ea:
                    37:7c:5f:0e:db:fd:4d:0e:73:ad:00:39:95:e8:af:
                    c9:41:c8:ca:de:26:28:38:dc:33:61:ee:06:cf:89:
                    7c:60:e0:7a:73:e1:29:00:9e:7b:d0:0b:bc:b8:b7:
                    e2:1b:1b:9d:37:5c:ec:62:99:66:93:f6:47:75:de:
                    4d:62:9f:6d:8b:00:7d:da:16:5c:4f:c8:5b:a1:0d:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:46:5E:64:D4:30:5A:7E:45:A6:BB:AA:75:DF:E2:2B:D3:DD:C7
            X509v3 Authority Key Identifier:
                keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:d3:9d:cc:df:d8:d1:5c:7c:73:c6:e8:59:60:87:ba:81:
         43:f5:5c:a1:59:8b:94:d7:84:1d:b2:99:3d:4e:ec:02:47:6b:
         d0:96:77:ee:6e:e6:59:d9:bf:51:37:a9:9a:35:19:05:b9:6d:
         eb:1a:a6:74:db:bc:55:e1:ff:99:2b:62:05:29:cb:72:ef:b6:
         c1:1f:e2:d7:e3:24:bd:c6:46:45:f5:86:94:06:16:4d:6a:36:
         62:f8:0d:e5:6d:59:e0:2b:f4:69:1e:be:59:49:c2:bb:70:9e:
         e4:43:ff:80:79:71:61:50:7a:16:e6:42:a4:1d:06:36:9a:82:
         fb:5a:8b:ea:0c:6a:12:93:1e:f0:19:0a:75:a3:de:25:4c:1e:
         af:a1:31:a2:d1:a5:41:5b:81:7d:c9:02:bc:e0:6d:5a:7c:5e:
         af:3e:c5:eb:c8:0f:3a:a4:51:85:66:f7:dc:bb:13:ad:82:1c:
         c6:a7:06:39:9c:ee:d8:96:86:3a:9e:0a:8c:c0:60:21:86:25:
         1e:2b:d4:fd:0b:98:08:11:2b:ad:c6:11:7d:bb:61:f5:d9:43:
         7d:bd:cd:9d:80:14:34:9a:a6:0d:83:0d:d5:3d:39:04:84:ab:
         5e:d7:de:0e:65:8c:52:ee:e2:cc:a4:ec:d7:76:c4:70:6a:0e:
         a3:08:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----