Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File:                     MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier:          8guP/nTcQ+Cj1HBM222ami4MAPKzB5ncNiNdUhH5hns=
Subject key identifier:   41:D2:BA:5A:9B:2A:3F:DF:8B:5F:35:E1:CB:54:39:92:FC:B0:FE:9E
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer:       /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial:       01962DF3C03867D848FD98E791C9BA69E2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number:          08E0
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: 0r1CfNnTtIc0nB5OubVgNBljyGohg0rslqNRZ1WFRpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c0:38:67:d8:48:fd:98:e7:91:c9:ba:69:e2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=41d2ba5a9b2a3fdf8b5f35e1cb543992fcb0fe9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:2c:f2:23:03:cf:51:53:7b:f4:f7:71:8d:
                    a8:d0:40:cf:2e:ba:6e:0e:34:0f:d6:59:4e:83:2c:
                    0a:d8:94:58:65:99:e4:6c:07:3f:67:65:92:40:55:
                    99:98:0a:3e:ca:f6:1e:ae:42:58:b6:34:b4:29:e3:
                    ef:be:6d:35:0b:09:1e:9e:46:23:79:61:42:22:69:
                    f8:43:a8:db:0d:a1:6f:ee:c6:39:3d:3a:1a:af:3c:
                    7b:96:3a:d3:51:8d:9d:38:a5:43:fc:9a:d2:89:31:
                    c7:c3:d8:5d:ef:78:cb:41:3d:96:31:61:85:bf:c2:
                    9d:38:6a:90:1b:12:68:4c:42:cf:6a:44:13:22:c9:
                    64:66:3a:18:68:5a:9c:4e:2a:54:3c:53:4b:3a:59:
                    af:3b:be:79:8a:7e:b0:ec:61:8d:af:a2:17:9c:54:
                    6f:dd:c8:81:b4:9f:63:de:fb:0f:37:8a:42:ac:a7:
                    83:2b:47:6e:1f:7c:15:b5:d0:23:ea:6e:05:02:e5:
                    3e:a4:26:95:9b:25:b9:ff:98:37:2f:36:ce:66:52:
                    c9:c6:a2:78:3c:99:92:14:9a:1c:88:aa:5a:15:ae:
                    08:d2:2d:79:20:73:84:0a:46:da:a0:c3:28:dd:36:
                    9a:bc:ef:36:74:9c:39:9e:af:db:1e:95:57:b7:60:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D2:BA:5A:9B:2A:3F:DF:8B:5F:35:E1:CB:54:39:92:FC:B0:FE:9E
            X509v3 Authority Key Identifier:
                keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b1:bc:56:bd:d7:47:cd:2c:53:29:a1:a6:5f:28:b0:7e:71:
         33:31:36:4d:b0:6b:69:fb:c4:7c:60:b2:de:41:4a:1d:69:a7:
         59:a2:ee:8f:1d:2c:86:a9:4f:7c:96:f9:df:bd:f4:1f:5b:d0:
         a7:eb:36:76:58:ef:e9:9a:de:52:c1:e7:3a:78:86:6e:3c:e7:
         be:b4:f7:58:24:1f:ac:51:d1:6c:cf:94:b4:b0:41:84:7a:f1:
         95:85:8d:a7:7c:e7:25:00:27:da:cd:8e:02:5c:1d:da:e5:02:
         22:4b:e6:a8:7f:19:fe:ca:f0:9b:56:fd:f5:34:c6:07:a8:20:
         66:ea:0c:d1:69:d9:4c:ae:1c:07:11:d1:b0:d6:45:ce:a2:b6:
         53:53:da:4a:8f:01:a7:67:98:b6:6d:34:5e:0a:04:e9:03:85:
         7f:71:cd:a4:85:35:33:74:a8:f2:0d:08:c0:88:d0:d7:6f:74:
         07:59:cb:a9:7d:6a:5a:e0:29:1f:01:a1:ae:f2:30:71:f6:25:
         3d:94:3c:63:9d:33:52:0d:35:ab:dd:e6:dc:49:4f:b7:94:4d:
         fe:b3:92:e8:71:23:af:cf:03:f4:b3:29:53:db:f7:28:21:51:
         5e:2b:a3:e1:29:2c:1c:45:77:b6:c1:f2:43:e6:cd:94:4a:fc:
         f5:9f:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----