Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File:                     MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier:          jJBBjpmeF1y5EmgLp01LM5wCVP3N5veKdexIh1a2rcM=
Subject key identifier:   3C:DC:C8:32:8E:6E:B6:3E:B4:AD:FB:27:6F:17:A5:EC:C0:EB:F6:44
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer:       /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial:       01962E2B001F9535FD963A5ADE9794B5E684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
                          2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: a0OkkfDBg0NrP5vEd7Vinct8l3QFgVJ2BRvKybxnlEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:1f:95:35:fd:96:3a:5a:de:97:94:b5:e6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=3cdcc8328e6eb63eb4adfb276f17a5ecc0ebf644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:d1:59:2e:2b:9f:a4:e8:3b:bf:72:cd:8a:
                    68:d1:89:b6:36:cf:16:e6:e6:c9:00:54:3f:c8:32:
                    ef:0a:8a:3e:29:70:48:7c:79:31:0e:5a:a5:e2:19:
                    41:02:c0:56:32:08:94:d2:5e:bb:f2:2d:9a:31:ae:
                    d0:fa:9a:f5:dc:81:39:71:59:a4:b8:dd:36:e9:0b:
                    eb:f9:f4:6b:47:fb:50:1a:3f:12:b9:d0:9f:4d:e5:
                    f9:c9:a9:26:81:dd:bd:be:e0:c4:63:c2:85:c5:d8:
                    b2:6d:21:97:ac:27:ac:db:3a:b6:3a:9d:15:b7:d3:
                    9c:07:9e:24:03:a2:56:d2:32:ee:06:e0:cc:20:66:
                    93:66:64:d7:be:74:08:6b:ae:a3:5e:ea:8c:58:07:
                    84:0d:0f:72:d5:7f:94:e5:e7:d0:d4:48:6b:f9:9d:
                    5a:00:41:92:22:83:a9:8d:16:f4:55:ed:3c:63:e0:
                    fd:64:48:e8:59:32:8f:1b:55:99:fc:b8:26:80:7f:
                    a2:c1:a9:eb:bf:08:d9:3c:f0:6b:d9:be:00:9f:81:
                    ec:08:79:a3:6d:f9:72:09:f3:93:91:bd:6c:a1:7d:
                    d7:85:06:6e:8d:0f:68:f8:45:ea:25:c2:02:e2:a8:
                    bb:0c:8b:47:7f:6c:f3:b7:27:4a:c2:c9:3e:e4:3f:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DC:C8:32:8E:6E:B6:3E:B4:AD:FB:27:6F:17:A5:EC:C0:EB:F6:44
            X509v3 Authority Key Identifier:
                keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:a1:7e:af:00:ff:83:4d:bd:9c:4d:16:cb:99:ab:76:13:17:
         65:1f:c2:89:a0:a2:eb:31:3d:85:2a:e7:39:73:5f:56:01:a5:
         cc:a7:ad:c7:7e:b0:41:c9:70:31:00:e1:2e:ee:6c:6c:29:88:
         83:12:02:8b:2b:aa:ff:73:02:f4:6c:61:cd:3e:72:df:2f:20:
         07:08:87:99:c1:a2:f1:27:e0:c9:54:d5:fb:9b:cb:c9:6f:c5:
         06:38:cf:c1:d8:b8:1f:43:63:dd:5f:cd:7a:d8:ff:ee:b4:c1:
         b4:33:11:e1:50:bf:e8:a9:33:05:93:4f:44:73:81:5a:29:a6:
         4c:b1:0c:46:ea:1c:5a:49:20:e0:ed:c4:a6:b1:fb:b2:cc:2d:
         fc:ae:b6:8d:29:bc:b7:10:42:91:09:c3:09:45:68:f2:c1:e2:
         b3:c1:2b:7c:c8:98:e3:49:84:92:b2:e0:4a:56:ca:83:d2:cd:
         b6:96:b5:62:8f:8d:38:84:9e:37:f0:68:b6:49:b8:18:d4:29:
         eb:bf:d1:90:7f:22:f9:26:1e:8a:e5:cd:89:8e:40:9a:ec:22:
         d4:f8:70:02:f5:73:23:35:53:72:27:e1:8f:f0:7e:ae:fe:5d:
         d8:6a:7f:67:0b:3c:9a:4b:3f:8e:2d:94:90:f6:1e:05:b1:9a:
         2b:7a:c8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----