Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
File:                     MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft (raw, json)
Hash identifier:          5TeiL3aKVUud4R/GsjMO3ZQXtG0QfpN5LLZl0fSpF7Y=
Subject key identifier:   1E:C9:54:89:7C:5E:91:87:89:CF:22:A6:4F:F2:7C:6F:FD:63:A3:52
Authority key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
Certificate issuer:       /CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Certificate serial:       01962F06FE3AC6E4F027CF2EACDF902240FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
Manifest number:          07DB
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl (hash: VLo/Zam3mfEC5HUpLDAZ+aDv73QeTMz2H3wPtuVIscI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fe:3a:c6:e4:f0:27:cf:2e:ac:df:90:22:40:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=1ec954897c5e918789cf22a64ff27c6ffd63a352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:79:ac:a3:be:fd:b5:4a:4c:e2:35:cb:3a:
                    4e:99:37:35:cf:2f:f3:35:56:7b:d5:2f:3e:f0:7d:
                    8b:7e:d5:6b:ac:8d:ba:ee:01:d8:2b:d5:da:f2:37:
                    b1:e2:a6:4e:a3:32:56:54:65:3e:aa:3b:3c:bc:8b:
                    8f:38:5d:92:29:e4:6b:ad:7c:5f:53:c9:b2:d7:ae:
                    7b:c9:1f:bf:89:5b:37:ed:c0:ea:5a:ec:9c:e2:e4:
                    ed:ce:a8:3c:ce:c3:5f:74:65:51:2e:d2:62:18:7c:
                    0b:33:ab:fa:5a:be:5f:ff:8c:22:ae:bf:fc:fa:a3:
                    72:e5:a9:3b:67:dc:97:f2:7a:79:85:01:5b:94:b2:
                    10:6b:48:b2:9b:b1:21:27:1c:b3:5d:19:ee:e5:69:
                    d5:41:19:43:a2:77:ea:a8:e7:10:9e:8a:f5:04:f1:
                    b2:fd:db:9f:7a:40:8a:3b:d7:55:28:d0:da:17:41:
                    05:5c:b9:82:ca:50:29:e1:f3:0e:93:f9:ab:fe:e7:
                    e3:3d:44:71:8b:59:d5:07:84:f6:fc:ea:e2:57:27:
                    ab:c2:34:de:db:d4:79:3c:4c:b4:c7:f4:32:c0:01:
                    fe:74:5a:8f:10:fc:41:8b:47:7d:fe:da:c2:b3:e3:
                    9b:4f:b1:53:65:65:cd:22:0c:8f:fe:80:bc:9c:c3:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:54:89:7C:5E:91:87:89:CF:22:A6:4F:F2:7C:6F:FD:63:A3:52
            X509v3 Authority Key Identifier:
                keyid:31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:af:3b:54:ac:23:12:ac:bd:44:28:d4:27:a4:53:4b:fa:f2:
         da:19:8d:1e:f6:93:2a:24:58:27:fb:a0:b6:05:48:32:f1:b0:
         e4:ad:4f:bd:91:cb:da:7a:6b:d1:8e:c3:65:a3:fa:89:0d:3d:
         41:37:7c:57:82:49:a2:d6:2c:33:24:88:d5:55:d3:9b:fd:09:
         6b:ce:58:86:72:02:ae:31:90:63:74:5d:ac:8c:99:cc:88:32:
         37:19:fc:2f:51:0d:c0:a3:95:a6:eb:3a:65:96:62:a1:61:28:
         29:9f:5e:cb:62:fe:05:1a:44:1e:ea:ca:1b:8c:d1:20:4d:66:
         14:8f:c2:41:c6:0b:9c:b4:1c:56:f6:a7:82:6a:0d:b4:70:cc:
         ec:7f:4e:5d:3d:e6:aa:eb:4b:2a:d4:f6:8b:43:23:84:b8:7a:
         80:51:bd:41:4d:46:e3:23:c7:4d:7d:62:93:37:16:df:6b:29:
         55:e9:64:ca:e4:09:94:b7:f0:0b:44:05:25:f4:ac:cc:3e:16:
         b5:8b:bf:90:f3:53:8a:8b:c5:8c:b0:59:29:b6:74:f2:db:1a:
         f7:a8:6d:88:1a:bd:13:c1:0b:ec:6b:c7:3e:c2:c6:77:c8:56:
         93:d7:cb:4c:34:60:73:d1:a7:e3:a3:72:ea:86:4b:f3:82:d9:
         c5:35:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----