Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File:                     MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier:          AHnKW/mWDTsx5AakJD7LuTFKbNSA6jmvLwCxJxSCvLY=
Subject key identifier:   59:81:26:4A:39:1F:89:09:B9:70:36:51:44:FD:DE:BA:B7:59:7D:F6
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer:       /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial:       01962FAB28B909B032F41AF33E0BAF2CB460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number:          0A74
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
                          2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: h7zFF9H2/dIOJ24Z6NJRNsgyBMgJ1Bv8mT+XPT3aRFs=)
                          3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:28:b9:09:b0:32:f4:1a:f3:3e:0b:af:2c:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=5981264a391f8909b970365144fddebab7597df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:1b:15:b2:61:ad:c6:e4:a0:8d:77:0b:ce:
                    7e:05:c0:9c:7c:68:aa:10:1d:25:30:59:f1:b6:09:
                    95:65:c0:87:9b:19:ee:89:ab:2e:e5:a6:ac:bf:20:
                    8d:26:f2:e9:0f:a2:9a:f8:bc:19:05:27:f7:c2:b8:
                    66:eb:9b:a5:dc:f9:2d:8a:7b:ef:17:ac:92:6c:8e:
                    20:12:f4:ed:e2:46:b6:35:ee:f2:f3:b0:44:d6:f2:
                    d4:34:09:fd:51:6e:3d:fd:77:b1:09:ba:99:34:20:
                    64:3c:43:66:c9:9f:3d:0b:41:0c:3c:55:2b:4f:d3:
                    c9:84:5f:ef:2f:c6:4d:be:15:dc:b9:4f:3a:59:3c:
                    54:a8:4e:ad:6b:e2:a2:3c:19:f0:5c:0b:bb:49:f6:
                    7f:68:69:13:a2:20:3c:b2:7a:aa:1f:63:17:8b:7d:
                    3a:d3:0b:70:fb:74:94:dd:2c:0a:44:6c:c6:36:0b:
                    88:6d:3a:7c:5d:b7:62:38:38:f1:f8:d4:f2:d3:69:
                    dc:0e:57:69:06:95:80:79:5f:da:74:b5:46:2a:46:
                    3d:03:64:2c:27:38:45:93:3f:c0:16:b1:55:05:7d:
                    67:99:9e:5d:45:f2:9d:43:30:4f:89:ef:d2:ef:c6:
                    bd:5e:a9:40:e1:ed:8a:11:3a:1d:bf:e8:10:91:2d:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:81:26:4A:39:1F:89:09:B9:70:36:51:44:FD:DE:BA:B7:59:7D:F6
            X509v3 Authority Key Identifier:
                keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:82:94:71:02:40:4f:c5:f8:5b:29:d8:5f:1e:8b:92:75:31:
         b5:ad:be:86:19:cd:3b:62:d9:e3:b6:b4:28:54:5b:11:c6:b8:
         12:47:8e:3b:07:82:7b:85:83:9d:39:a6:ab:9d:ae:32:dc:b2:
         a4:52:d1:0a:40:a9:c0:9d:31:f3:76:60:a9:bc:ea:d6:7d:01:
         57:69:a0:4a:e3:98:7d:d8:ca:99:a5:6b:1e:aa:9c:a2:48:2f:
         d5:b2:d8:f1:85:75:11:9e:b6:80:d4:6a:8b:98:79:1d:8f:68:
         91:a5:04:3e:37:0f:5b:05:83:1f:d8:6e:de:84:5e:fe:31:93:
         f2:63:88:5e:3e:dd:eb:d4:35:c1:d1:87:94:e8:9a:a8:ad:68:
         1b:b3:3d:12:01:c8:0c:28:fd:ac:06:32:61:27:e5:bb:d0:dc:
         95:ec:15:cf:0c:09:35:dc:6a:28:69:3e:00:7e:b2:59:8f:62:
         57:2e:85:33:d6:bc:79:4f:14:37:de:e9:39:17:a7:da:f6:8d:
         c5:35:5b:52:14:f9:69:98:ea:56:42:c2:57:12:ec:f0:78:d0:
         e7:dc:8b:77:b9:32:79:6e:5c:9a:f6:8e:6e:80:8e:17:50:a9:
         13:27:2c:5f:a5:d8:23:84:30:73:18:e0:14:b7:85:a6:28:17:
         36:bb:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----