Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File:                     Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier:          9cbjiO9ZzWE14KRkKV+p/TXGllxzDPhGVxbrBPWYUpw=
Subject key identifier:   3D:EE:B9:15:C2:A3:73:FF:35:DF:12:FA:C3:20:08:0C:48:51:C5:02
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer:       /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial:       01962F06F3946B5DC122605369BBED99F6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number:          1149
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: n65odtn3WAHmxeUPby50O4l4rI9+BNtAX7SZrTpCsvA=)
                          2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:94:6b:5d:c1:22:60:53:69:bb:ed:99:f6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=3deeb915c2a373ff35df12fac320080c4851c502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:71:00:f9:7d:84:dd:29:e0:54:76:83:d5:
                    22:46:64:47:81:bc:5b:5b:e6:70:db:fc:00:1a:39:
                    ca:ba:7f:65:62:26:4b:83:b6:39:38:fb:8a:b9:2f:
                    cf:cc:b1:9f:a7:2e:07:b7:57:48:d4:4b:61:40:ad:
                    0a:7c:f6:d4:ff:18:33:8b:1d:25:90:1e:4a:83:76:
                    2d:01:c2:9b:d1:cd:87:77:81:aa:52:4d:a8:ac:35:
                    eb:cd:17:28:35:ea:35:c1:76:42:55:56:fb:52:14:
                    da:b4:02:5a:45:bd:23:16:d5:d5:2b:2b:96:a5:d7:
                    61:20:21:4f:f6:dc:f1:cf:ca:3e:ab:9d:53:d8:87:
                    dd:15:49:55:b9:02:08:3d:73:ab:9c:94:2e:86:38:
                    aa:df:34:17:e4:3b:66:66:8a:12:81:ba:71:a9:c8:
                    4c:0e:cd:3d:69:be:b4:53:b8:3c:6d:1d:48:cf:0b:
                    ec:80:0e:ad:46:7f:89:f6:e2:04:34:ef:d1:9f:33:
                    9f:f2:cd:e5:89:bd:44:7f:e9:4f:f8:1b:ef:bc:63:
                    03:96:92:a9:a8:a0:d0:6d:9c:8d:89:7e:fc:f0:fd:
                    c1:2f:44:74:9e:be:16:44:e2:37:a7:6a:90:6e:3d:
                    3c:81:90:96:17:02:29:c1:77:73:12:cb:c3:d4:76:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:B9:15:C2:A3:73:FF:35:DF:12:FA:C3:20:08:0C:48:51:C5:02
            X509v3 Authority Key Identifier:
                keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0f:c0:f8:02:7e:64:42:14:c4:42:59:b4:19:7d:8c:a6:3b:
         d1:7a:08:9b:3e:af:4c:c9:f8:cf:06:85:06:b4:54:e8:7e:9a:
         b4:57:51:ac:a5:0d:b4:8b:2f:2d:0a:ab:12:9c:b8:7e:bc:f8:
         40:4a:2d:8b:d6:a2:57:1f:f9:24:f8:35:d7:c5:48:f7:3d:f2:
         d4:e5:6f:5e:2e:2f:88:26:b7:37:4b:57:53:01:df:66:80:7d:
         11:ad:49:55:03:2a:26:de:37:21:e9:77:61:66:c5:1b:10:1b:
         e0:bd:36:bb:fc:9b:43:aa:aa:ba:52:59:b1:14:ec:ff:13:e3:
         d9:3f:fc:98:b7:b1:70:bc:5d:c6:f5:e3:93:fc:5b:cb:01:9e:
         93:d1:f0:0e:ec:e3:49:1c:0f:0b:2e:5c:3f:d6:2c:f8:5a:eb:
         16:b2:1a:04:48:48:17:42:a8:2f:6f:22:9b:5c:25:de:42:b7:
         5c:e6:e8:ed:57:ac:47:a0:4b:a9:45:57:00:fb:54:fe:9c:c8:
         58:17:4a:ef:ee:6f:b5:08:e8:06:60:8b:98:1c:7c:51:c2:13:
         70:d1:86:65:a4:6a:93:39:bb:96:fc:6e:9b:8f:b1:a0:17:9a:
         8a:56:5d:7c:b7:cb:3c:57:28:28:ee:2e:d7:5f:11:a5:95:b9:
         65:c4:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----