Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File:                     mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier:          yA5CIliS0jBd1ms/YocC80pnEoXEdLUdxkUSN+H/TaA=
Subject key identifier:   10:31:A6:F2:84:67:5F:EF:6D:EB:58:88:57:D5:E9:49:0F:44:94:0C
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer:       /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial:       01962F069923EE41D5B023526513084771D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number:          04DF
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: gIuCfPNuBjSs7F3Q+kZkeeJe8yvKz/J5U76q6qhr09Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:99:23:ee:41:d5:b0:23:52:65:13:08:47:71:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=1031a6f284675fef6deb588857d5e9490f44940c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:86:c6:6a:3a:26:8e:f2:4b:58:3a:ab:44:
                    94:55:c0:76:28:3f:fa:09:ec:38:17:34:a8:0f:94:
                    1e:cf:a0:02:00:5c:58:29:86:20:f8:13:e7:d6:ad:
                    f8:2f:79:42:9e:ae:32:db:2d:63:fa:03:70:88:d5:
                    be:1b:22:5d:56:20:d3:f1:16:54:35:e1:54:4b:ce:
                    13:95:5b:fb:b8:a7:b6:b5:e2:dc:d1:c3:a5:b6:3a:
                    71:c8:ff:85:48:b4:18:6c:f6:2c:09:57:7d:31:1c:
                    bc:da:6c:ad:c7:e0:f1:18:8c:64:9e:b5:21:5f:35:
                    f3:74:92:e5:ed:05:47:90:fa:ca:72:fb:19:f0:01:
                    1c:0a:34:c6:7c:ae:f5:c1:14:ab:a7:38:30:81:9b:
                    70:d6:95:e1:27:5f:5c:22:e3:0d:a8:82:e1:53:1a:
                    15:d3:54:00:4b:4c:5f:eb:9b:56:93:1d:66:26:aa:
                    bc:ee:ec:65:c8:42:96:bd:86:cb:68:fe:ec:00:fe:
                    95:83:93:a8:b3:9e:4f:53:f4:ef:9b:2d:98:b2:e8:
                    0f:76:bb:81:58:54:61:fc:c6:c8:08:d3:79:a0:de:
                    ec:53:54:9c:75:e0:92:a6:4f:50:7f:38:9b:cd:92:
                    bc:f2:cc:90:43:24:cc:37:9f:57:81:75:da:1e:60:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:31:A6:F2:84:67:5F:EF:6D:EB:58:88:57:D5:E9:49:0F:44:94:0C
            X509v3 Authority Key Identifier:
                keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:48:26:f8:09:f5:b0:f6:e6:60:6f:73:8b:82:eb:c3:09:94:
         fb:d9:3d:b6:8c:14:a6:c9:df:2b:6e:e1:18:62:70:a0:eb:ab:
         43:08:f6:1b:9b:02:5b:c3:02:db:18:ba:88:d1:1e:cb:6f:a2:
         98:df:45:57:b4:0b:31:02:1d:9c:8f:f3:7a:32:57:f9:27:2c:
         37:c1:b4:2f:6d:d5:17:79:6e:1a:00:00:12:f6:03:f7:e5:61:
         97:0e:78:54:db:75:ba:ee:55:09:f7:43:31:49:c9:8a:48:4a:
         15:df:13:90:db:e7:8e:10:b8:ef:d4:db:36:0e:4c:95:1b:c8:
         34:5f:e4:12:69:52:34:2f:45:82:dc:8f:b3:96:2f:b7:d7:67:
         3a:78:1b:ab:8f:3d:1d:84:86:d6:c3:3c:ca:a7:ae:6d:1b:8b:
         ac:05:0c:0f:1a:ae:e3:5c:1d:bc:c8:2e:57:5c:9a:d1:e7:33:
         c0:1e:9a:9d:aa:22:17:b2:f3:92:bb:28:e1:06:f7:4b:a2:d9:
         46:cf:0c:57:6e:a2:28:29:37:19:b2:ac:78:c0:f2:38:4d:ed:
         32:2d:94:86:97:4c:13:f9:22:d0:f4:5b:f9:4b:d2:8e:6a:ec:
         88:b6:1c:16:17:39:1a:e8:8e:5c:da:f3:3a:1a:39:dc:66:a7:
         e2:44:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----