Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File:                     MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier:          vuI1tVK3/tQjdP08ElJrnceQrVNkkqkUfiBg5AoWyes=
Subject key identifier:   F9:DE:95:52:6F:64:4C:FB:7C:E4:FF:02:E1:B8:6A:75:8D:17:8B:CF
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer:       /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial:       01962E2AFA6DE84C3D92DAADB0AB863FD6E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number:          13D8
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
                          2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: u2tlppMYzHpKHWkYImdJbpBPSolZ/lMUMCBjzn+bH48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:6d:e8:4c:3d:92:da:ad:b0:ab:86:3f:d6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=f9de95526f644cfb7ce4ff02e1b86a758d178bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:c4:e6:40:f9:31:44:37:1d:34:4a:dc:71:
                    4c:d5:d9:57:79:16:f0:58:87:c2:1f:05:fc:e8:af:
                    70:24:0e:ae:93:3f:dd:11:5c:8a:63:be:f3:2f:16:
                    ea:93:17:4f:55:80:4c:fb:95:59:09:95:d3:8a:ce:
                    29:5a:d9:f3:e6:88:87:0e:2e:27:37:66:0e:79:c5:
                    4b:b1:23:dc:0c:fc:ec:69:13:df:25:a4:a7:ab:4e:
                    c6:4c:09:09:ec:47:60:1e:38:5d:b6:f9:20:06:15:
                    f7:f6:30:1b:d7:56:1c:8f:98:bd:37:b1:f8:64:10:
                    f9:ff:62:4a:c8:15:c3:bd:99:0f:f9:c1:50:70:3f:
                    e8:da:35:78:f6:83:72:8b:c1:df:df:5a:92:96:84:
                    09:3e:b9:76:65:cd:ee:8b:d3:37:54:fa:57:6c:99:
                    6c:44:dc:4b:8b:eb:a6:9c:9d:b5:f4:a2:ab:e8:74:
                    db:e8:88:6e:39:86:91:fe:9c:69:ed:c7:10:79:5f:
                    5e:44:a7:5e:bd:72:d9:ef:ed:48:a5:bb:56:59:51:
                    6d:28:81:e5:cf:0a:05:86:87:cb:ab:37:29:eb:b1:
                    20:2b:7d:31:c0:3e:7c:ed:3f:b4:35:da:7a:fa:c4:
                    20:47:79:91:73:98:43:02:01:10:77:94:91:a4:bc:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:95:52:6F:64:4C:FB:7C:E4:FF:02:E1:B8:6A:75:8D:17:8B:CF
            X509v3 Authority Key Identifier:
                keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:ee:cf:5d:c3:aa:e5:ff:35:70:42:06:ae:bf:6d:28:c7:
         9e:a9:77:55:db:33:fe:29:41:64:26:05:be:0c:66:3b:33:36:
         5f:fc:c1:ea:de:ea:7c:cd:68:d2:00:4e:42:f3:a4:fe:9e:9c:
         2f:5a:3c:99:e6:50:c6:e6:14:88:f3:0f:ed:bb:54:92:bd:00:
         1b:e5:f9:30:4e:a1:08:8c:01:c8:ed:ae:b6:81:8b:c5:a9:fb:
         4f:12:b2:5d:ec:83:6a:86:d5:02:8e:8d:22:b5:1c:9b:b4:5d:
         60:ea:40:5c:8e:13:2e:ce:9a:68:68:e2:2d:3d:8c:3f:20:7a:
         77:44:99:64:05:7f:21:e4:8e:1a:7b:3c:d6:d5:f8:f9:90:4b:
         dd:c6:ef:4c:46:68:5a:86:d3:93:97:cf:f8:26:d1:ae:45:6e:
         9f:70:5f:91:38:ec:6a:5d:9c:42:2d:b0:da:b2:6d:69:2e:5d:
         ed:61:bb:20:ae:d2:75:16:ed:ab:05:5a:e5:ba:12:65:a0:96:
         c5:31:23:3c:71:1b:b4:c3:f5:04:1b:22:4a:58:b3:95:04:9c:
         41:59:32:83:dc:eb:a8:c4:aa:14:4c:09:1d:f6:71:31:8b:2a:
         11:b6:df:5e:c5:0f:59:34:a2:29:b2:72:63:b8:9a:60:2e:4f:
         dd:db:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----