Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File:                     mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier:          be7fiS/YN9mEqxbN7teuzPDo1bWZZ+74kpH+UskK1h4=
Subject key identifier:   50:FE:42:69:5A:6D:6C:64:9A:75:A8:8C:FB:0A:A9:D0:4B:21:1B:DF
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer:       /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial:       01962F06A9B87FBBEA9668F98EDFDC24B8B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number:          1225
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
                          2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: ifo/lqaX4T7KsOt8ZIBUm5ZwmYcm+zXUaBmbmVcGXeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a9:b8:7f:bb:ea:96:68:f9:8e:df:dc:24:b8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=50fe42695a6d6c649a75a88cfb0aa9d04b211bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:de:9b:e9:11:2f:45:14:15:69:91:72:19:
                    16:92:15:66:e7:a2:3b:5a:99:c7:39:3e:64:c8:72:
                    3e:c7:aa:90:62:1b:77:5c:d7:66:b8:c7:ac:6e:9a:
                    18:23:2a:5f:79:07:53:12:c1:40:5a:df:03:39:ca:
                    fb:c4:9b:4c:f5:f9:2e:32:7a:eb:0c:20:ff:b8:ab:
                    00:62:3f:6c:eb:0b:11:74:35:60:cb:8c:57:a1:58:
                    54:e2:ac:9d:22:d4:11:aa:25:26:7e:06:18:c7:29:
                    33:ab:d2:31:b4:42:2b:03:c8:7b:ea:10:b1:0a:63:
                    70:e0:68:4b:0a:58:d7:e8:9b:a9:cb:28:0e:8e:02:
                    4c:61:d8:3e:0e:3e:ff:0e:7e:74:11:65:cb:3f:aa:
                    1e:a7:fa:85:e5:8a:4b:c5:04:99:c7:57:45:a3:f0:
                    93:92:b4:b1:c7:79:ec:49:c0:a1:f7:39:07:0f:32:
                    d4:a4:a5:5e:9b:95:79:cd:df:d6:8d:c7:85:a2:0c:
                    09:45:5f:9c:b6:b8:9a:3e:32:98:e1:e4:a6:98:e3:
                    2e:a3:9e:e8:61:e2:2e:71:39:50:42:ef:f4:f1:2a:
                    2c:32:68:88:09:99:a5:02:6d:eb:1b:00:0f:dc:ba:
                    29:32:05:01:de:2a:a5:d9:db:ae:b2:c6:08:18:9e:
                    c0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FE:42:69:5A:6D:6C:64:9A:75:A8:8C:FB:0A:A9:D0:4B:21:1B:DF
            X509v3 Authority Key Identifier:
                keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:00:19:9e:d9:e7:10:2c:ee:12:79:33:8f:73:3f:9c:24:6e:
         24:3d:f5:27:37:26:71:70:cd:56:c6:7e:bf:22:91:98:97:4a:
         46:63:07:04:87:f4:8e:6b:1e:1e:2a:e0:fc:ec:a3:e2:48:9a:
         fb:73:c0:3a:0b:07:34:1c:2f:63:2d:b5:42:b9:b0:8f:dc:1c:
         ca:fb:48:f5:37:a2:d3:38:56:2b:40:34:6b:63:c5:27:c2:e1:
         6a:8c:63:7c:16:88:e1:8c:4f:ef:83:7a:ef:a2:26:4c:be:41:
         a5:e0:5a:cd:89:9c:89:4f:58:d7:d7:e8:dd:a2:c1:aa:6e:c4:
         67:de:75:d1:b3:3f:f2:38:f7:30:29:b2:a7:7a:2d:88:01:04:
         63:dc:5e:55:32:73:10:46:13:8d:63:eb:cd:06:f6:8f:6c:92:
         fb:88:cc:d9:0d:ad:8c:32:72:ed:cc:f0:67:14:47:91:a3:62:
         51:d4:3e:2a:24:90:01:23:a1:bc:5f:f0:26:a4:7f:19:8b:2b:
         54:32:08:d8:de:58:4c:19:eb:57:52:3e:09:48:3a:1c:72:bf:
         46:e5:e3:22:05:43:8e:b4:0a:77:05:8f:a9:ad:57:27:ed:63:
         3a:7b:2f:8d:4f:36:bc:3e:de:d9:e6:09:ac:ce:4d:32:9a:fc:
         11:05:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----