Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File:                     mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier:          PvCl+wwWdZCtEUBdNhYvAoLEin6a9N01kOk3jRmYtJ8=
Subject key identifier:   DA:5A:3F:91:58:E4:55:CF:E1:63:66:E4:02:B0:88:EF:FA:1B:87:73
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer:       /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial:       01962F3DBDED1483624462AE0CD218A1F6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number:          094E
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: +wsOk/UrTv82/B9vR9i6tASQO/qcdqA6R4kM5NpF+Bo=)
                          2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bd:ed:14:83:62:44:62:ae:0c:d2:18:a1:f6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=da5a3f9158e455cfe16366e402b088effa1b8773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:e4:9f:e6:ce:e7:41:9b:93:c8:c9:88:e8:
                    07:24:49:e4:cc:4e:54:86:42:16:6d:51:ab:0e:71:
                    4d:47:90:fe:d5:6a:f2:5a:68:47:1c:90:13:42:07:
                    57:c0:cd:fd:90:da:2f:ae:27:8e:11:b8:03:3c:85:
                    ca:19:ce:ef:bb:6b:e6:ab:a5:a3:6c:44:f0:74:e6:
                    c8:44:2f:a9:f9:c5:02:cd:0f:36:6d:34:9f:d9:6f:
                    f6:5b:43:02:29:f4:7f:2a:a6:af:3b:a5:8c:04:a8:
                    d5:56:18:af:73:b7:7c:4f:74:04:23:0e:92:1f:a7:
                    3e:6f:02:84:4b:9f:c3:9f:d7:8d:d8:80:c0:77:07:
                    20:a5:ca:46:cd:14:dc:23:12:09:32:88:9e:6d:a1:
                    b9:7a:a6:6f:4f:19:a4:f5:9a:48:0a:5a:58:17:15:
                    32:6d:3a:b8:6a:26:fa:4e:b4:dc:13:26:02:72:45:
                    15:c5:1b:08:ca:7b:6a:b3:74:73:ee:84:58:76:bd:
                    7e:55:7b:06:18:ea:28:3c:b0:f8:8a:95:f3:56:97:
                    11:5f:27:3d:8c:1f:7d:ef:ff:e9:33:05:1b:ac:38:
                    0f:37:5e:75:2c:bf:a7:9e:40:f8:fd:de:0d:bc:71:
                    39:92:35:cb:fc:f9:7b:e2:cc:75:b1:63:65:65:ce:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5A:3F:91:58:E4:55:CF:E1:63:66:E4:02:B0:88:EF:FA:1B:87:73
            X509v3 Authority Key Identifier:
                keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:4c:42:95:50:0d:c7:97:d8:16:26:66:a5:5c:e3:bd:2d:
         41:41:91:51:b0:23:59:35:29:ae:b2:51:3a:15:b9:e5:10:c2:
         c4:ec:08:6e:74:28:09:69:71:8b:e8:1f:cf:54:ad:c6:85:82:
         cd:43:39:23:5c:59:58:d2:7d:b2:8c:87:5c:d0:c9:36:c2:8f:
         9c:4f:49:8d:5e:59:10:eb:41:13:c2:51:97:af:cb:6b:a5:64:
         94:28:91:22:68:e0:28:99:ab:13:4e:15:4a:d5:46:76:ba:5e:
         ee:aa:d2:70:94:d2:64:12:9b:1d:85:6e:98:9f:84:14:45:5d:
         83:89:4a:2b:4a:8a:46:ea:b2:b8:e9:8a:35:a2:ec:e9:8a:5c:
         08:fb:30:b2:bb:5e:ea:93:a0:7c:a2:ac:cf:72:aa:e3:2d:8f:
         e1:64:3d:33:5f:29:e3:7c:22:a7:e0:9c:f0:31:46:e6:fa:b9:
         93:4d:31:4f:3b:45:e5:40:6d:13:4a:2e:7b:d4:ca:69:60:5b:
         d3:7b:fe:07:f0:13:12:ff:80:2f:b9:d9:52:09:16:bb:2d:4c:
         7d:56:90:86:a0:d3:8a:04:89:87:97:cc:b8:2c:f2:f9:c3:b0:
         52:07:26:86:8f:d7:05:d0:04:e4:e3:c4:97:c8:9a:66:a4:f5:
         2b:4d:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----