Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
File:                     MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft (raw, json)
Hash identifier:          Za3rVvmkmuApoBoeLRnfOfU7WqPJ3VF57+yqH6m80tY=
Subject key identifier:   03:86:7E:19:4B:5A:1B:F2:21:66:B2:2E:A2:B6:A8:48:FE:96:38:EC
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Certificate issuer:       /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial:       01962FAB34768B53B720C0786C351338CF45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
Manifest number:          075F
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 1eHV2MTVv9r4jaAyWzNmweINues.roa (hash: kpyvjkV25MXxf36AZvjCKoDBz8hEwaag/9XEAwnyuhU=)
                          2: IrS_FAeo7ooc2f0ynHvuFdypznI.roa (hash: TS/DBO48YVVoe6NmoNSxb9VjzjtWbDtfeR9vV0R/jHI=)
                          3: LXgER9TQ6vRX8_SSmPuUTpJQ_Tg.roa (hash: KAUb4k9VX0zNCKUi+PPz3zFCakwLeDSDR9BXcsV4fHo=)
                          4: MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl (hash: AqrZIMjUBPZ8Xs6y2MDKrs5x13B3ILJ+SiJ76qcVO74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:34:76:8b:53:b7:20:c0:78:6c:35:13:38:cf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=03867e194b5a1bf22166b22ea2b6a848fe9638ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:19:25:c8:a5:77:f4:ff:c0:c0:b2:6d:71:
                    5b:89:e2:c4:8b:be:d6:3a:be:9a:11:4c:9a:4e:c0:
                    c5:64:8c:2f:06:f7:26:db:8b:d2:6d:20:37:61:2c:
                    9d:a7:f0:97:d0:e3:5e:6b:e7:77:3a:ae:68:c8:d5:
                    85:2b:8f:1b:34:7c:f8:79:ea:4a:ff:94:04:66:ec:
                    b9:00:8f:b6:2b:08:86:3c:ab:48:b6:65:9d:68:c9:
                    8a:73:7b:16:e8:35:73:55:06:68:b2:c3:39:f5:e0:
                    8e:83:97:fe:64:8a:54:f3:96:59:ac:82:f7:4b:b8:
                    f0:a4:f9:ac:9e:4c:d4:a5:1d:c7:25:cb:36:02:ac:
                    f7:18:b1:69:f1:b4:ba:44:d5:81:5a:bd:85:6d:51:
                    6d:8d:f3:ac:54:61:eb:9e:57:97:11:0f:43:d4:ae:
                    aa:31:1f:e9:7d:da:9b:6d:3c:2b:38:d6:00:fb:f8:
                    42:e2:2c:1c:3c:80:80:ad:27:8c:8f:4d:10:d0:c9:
                    53:55:5b:23:42:5c:21:bf:15:84:e4:3e:3f:e3:d9:
                    4a:2f:63:19:17:c1:ed:6a:b4:ed:54:bf:da:e6:95:
                    db:00:58:8f:11:f3:3d:32:91:43:95:a9:ee:ac:22:
                    6a:de:cd:51:92:4f:20:05:a0:7b:ba:19:bf:59:35:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:86:7E:19:4B:5A:1B:F2:21:66:B2:2E:A2:B6:A8:48:FE:96:38:EC
            X509v3 Authority Key Identifier:
                keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:8d:9d:15:81:d2:ba:de:69:a8:bf:f6:44:19:a7:ec:54:
         04:ce:3d:f8:72:71:5b:59:d0:92:b1:08:e6:f2:e1:64:ef:50:
         78:5b:5b:d1:58:40:9f:e9:cc:6d:06:b9:59:1b:22:7c:6e:69:
         77:d2:3c:c6:2c:06:1a:55:ce:65:59:a9:d7:67:3c:00:3a:8e:
         d5:ee:46:f7:6c:7e:1a:6d:05:67:28:28:6d:8c:cb:55:03:70:
         45:f1:63:cb:0c:c7:82:8a:ca:61:24:2b:e7:66:0d:6d:ec:90:
         0f:43:3f:4e:32:e2:72:c2:61:26:86:44:41:12:d9:44:97:5d:
         b2:20:45:5d:17:dc:69:fd:22:a1:1f:86:65:e8:70:06:c4:9f:
         bd:9e:d0:1f:47:0a:4d:99:de:80:d9:dd:2a:fd:99:69:45:0e:
         c9:65:0e:84:26:c4:43:0f:dc:4e:c2:c3:f7:af:ee:67:97:cb:
         64:a0:58:e0:d2:d1:fc:4c:97:21:7f:34:54:12:76:b0:a9:83:
         40:5c:d3:86:c4:5e:9b:d9:29:54:48:a3:0f:0a:78:f7:4e:d6:
         b3:16:83:59:5b:ab:3f:73:50:65:c3:e3:94:7d:2b:af:0a:b3:
         c6:9d:69:35:81:ce:e1:f9:e3:c1:94:5f:99:a5:11:be:f6:90:
         6c:14:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----