Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File:                     MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier:          wNxDuvsSOF6pCNsKA8eXHIe+0/zAYFRmMNf1xEvMKyg=
Subject key identifier:   FD:AD:B6:CF:84:87:02:80:9A:B2:59:E1:73:2C:29:20:53:37:DA:CB
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer:       /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial:       01962DF3A9EA0415ADF0E138C5A58872632A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number:          11ED
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: Yr9xRIKXrcpDalzjAT6kI8/HVqg2geazdG2q/9xMVGA=)
                          2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a9:ea:04:15:ad:f0:e1:38:c5:a5:88:72:63:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=fdadb6cf848702809ab259e1732c29205337dacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:40:3b:be:0a:36:a4:fa:0a:b7:80:99:9e:
                    27:a3:31:15:a6:98:11:0c:4f:e6:fb:e3:6c:35:55:
                    54:c8:57:9b:29:29:83:6f:c1:73:21:0c:4d:fc:93:
                    dd:2c:52:dd:75:b0:64:4e:77:ed:ab:15:48:74:e5:
                    1e:61:e2:52:0d:90:07:9f:02:6f:60:77:83:36:9b:
                    c7:0c:c4:94:16:95:74:4b:ef:7d:f6:90:89:99:3b:
                    7b:37:2a:f6:1f:bd:eb:cf:ac:68:1a:86:a1:e1:44:
                    1f:8e:5a:e5:e1:01:c6:ac:8f:8a:fc:a0:25:3a:88:
                    02:b5:f5:e1:fb:ed:60:27:81:00:5e:2e:32:fe:e4:
                    77:0f:2c:2b:21:b9:d6:74:2a:66:77:a6:71:c1:58:
                    d3:b8:77:64:4a:b9:2e:59:3b:a6:85:6e:68:a2:7d:
                    62:4c:ed:fd:e6:71:06:46:27:f8:3b:82:80:60:ad:
                    55:ea:83:21:d5:f3:28:ff:96:aa:71:0d:bb:3f:a0:
                    a1:f1:69:eb:5a:08:61:14:5e:af:31:98:d8:b8:39:
                    8d:7e:48:ab:dd:43:1e:0c:6f:60:92:93:86:d7:02:
                    46:b0:f3:34:88:d2:08:5f:ec:bf:f9:f2:02:65:fa:
                    eb:d6:df:82:81:ea:db:18:30:91:cd:52:89:d8:9e:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AD:B6:CF:84:87:02:80:9A:B2:59:E1:73:2C:29:20:53:37:DA:CB
            X509v3 Authority Key Identifier:
                keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:36:51:f7:86:57:aa:77:b3:5d:63:ba:be:61:25:aa:0a:2b:
         e3:66:12:f1:31:05:3e:a0:53:e9:a7:76:ca:9a:f1:5e:48:53:
         fe:fa:9e:b4:50:4f:58:c4:46:aa:17:9c:76:89:6b:ef:75:ea:
         15:84:74:47:09:33:2a:94:bb:5d:a7:e6:0b:6b:37:30:34:27:
         8f:4b:41:de:bd:ec:9e:a6:c4:0d:28:07:45:85:a9:6e:08:52:
         c9:18:29:6e:a6:5c:4d:99:b8:45:37:21:62:ef:86:df:08:72:
         82:14:2c:59:ae:fb:b2:f6:83:f5:f6:9c:82:2c:52:38:40:03:
         d6:1b:89:5e:46:ec:b9:d3:b2:4c:0e:26:e6:23:26:93:06:a1:
         6d:20:6b:ad:9e:5d:24:52:bb:5c:68:0e:06:66:07:f4:ea:fa:
         e4:ee:7b:27:27:3a:d1:2e:d7:9b:38:6d:fd:40:04:b8:61:0a:
         41:66:e1:4f:07:b1:e5:60:ba:31:4f:ef:46:8d:ed:b1:46:e7:
         f0:f8:36:4a:2c:f1:5e:21:4f:92:03:79:d4:61:2f:85:b4:5b:
         3f:c7:a4:26:e0:bf:d7:0c:05:80:87:d0:3f:02:e0:52:e9:6e:
         c7:5b:95:38:39:30:0a:d4:7a:87:7a:0b:93:bd:dc:a3:4d:4a:
         96:7c:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----