Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.mft
File:                     MCbiQi-nIkVOYIMX0hhitmqjfTM.mft (raw, json)
Hash identifier:          z8RDVWPmLwTmLNsMLKllaTBtOMqpafiqASv1Ro9aS5U=
Subject key identifier:   B8:9E:A6:B1:06:03:96:8C:93:77:8E:B4:F3:D6:B2:99:55:17:34:17
Authority key identifier: 30:26:E2:42:2F:A7:22:45:4E:60:83:17:D2:18:62:B6:6A:A3:7D:33
Certificate issuer:       /CN=3026e2422fa722454e608317d21862b66aa37d33
Certificate serial:       01962E98D1651A9D113696B87054D0C8CE3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCbiQi-nIkVOYIMX0hhitmqjfTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.mft
Manifest number:          143A
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: MCbiQi-nIkVOYIMX0hhitmqjfTM.crl (hash: o4R4KATiskzxs4aKkM5VJutYSAsBNX5mR8vA5N2OLA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d1:65:1a:9d:11:36:96:b8:70:54:d0:c8:ce:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3026e2422fa722454e608317d21862b66aa37d33
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=b89ea6b10603968c93778eb4f3d6b29955173417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:d2:3f:b2:85:d3:36:50:f0:f0:74:44:40:
                    28:a3:35:65:9d:63:ac:75:51:42:b8:0c:4d:9e:c9:
                    47:51:85:cd:37:00:b3:c9:14:4b:af:2e:b8:d9:54:
                    a2:57:35:32:9e:6d:ee:4d:ee:3b:09:b3:ec:a5:10:
                    2e:21:9c:ae:b3:88:ad:cf:06:dc:84:62:0f:13:18:
                    53:ce:0f:e0:2e:5b:da:b0:e2:da:51:0a:b1:7e:37:
                    75:ca:ad:1c:f9:bc:37:87:6f:37:85:2d:08:4f:30:
                    56:27:66:69:47:c4:f8:1f:2e:4e:26:89:e1:b4:da:
                    ae:16:b7:89:ef:07:2b:29:a7:4a:59:e6:ef:27:fc:
                    10:3d:4f:95:b1:82:63:9c:af:3d:b5:6a:4d:52:33:
                    76:b5:0b:ee:b5:c0:19:77:95:e8:e1:1c:a9:94:14:
                    ce:d3:62:dd:91:3b:37:32:3a:08:67:1b:f8:d1:fb:
                    60:58:2a:8f:c3:d3:4d:54:fc:41:a6:f1:5a:3b:e2:
                    5e:26:77:2e:f6:11:a4:5d:77:a8:fb:20:92:73:b2:
                    4a:d8:f6:28:7a:63:36:ff:54:fa:1a:e5:c7:a9:5a:
                    55:a3:3e:b7:d7:ff:27:8b:6e:2e:c5:ed:00:52:92:
                    51:7d:a7:70:1d:79:29:a3:da:e6:9e:21:d3:5a:2c:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:A6:B1:06:03:96:8C:93:77:8E:B4:F3:D6:B2:99:55:17:34:17
            X509v3 Authority Key Identifier:
                keyid:30:26:E2:42:2F:A7:22:45:4E:60:83:17:D2:18:62:B6:6A:A3:7D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCbiQi-nIkVOYIMX0hhitmqjfTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:d0:f2:db:59:bf:2f:be:4c:bd:b5:44:7b:0d:f5:f6:fa:
         9b:9e:87:02:f6:92:43:6f:b5:c4:17:49:13:25:71:6d:13:ae:
         ba:5e:34:06:5f:1c:5d:d3:cb:9a:f4:b9:d3:db:58:ff:c8:1e:
         42:f7:b1:6f:59:0d:54:3c:20:95:a0:fc:f3:31:ef:c8:ab:46:
         15:10:08:61:58:c8:11:13:3a:32:44:bd:87:13:b2:fd:b1:01:
         50:4b:01:57:3f:de:ee:c1:fa:11:5a:bd:f9:7e:c1:d1:cd:02:
         47:a0:1e:5f:27:d8:a7:8b:7c:d7:83:fe:27:cb:2a:b2:a2:cc:
         eb:d6:b4:b8:df:f2:5a:1c:ea:f8:b3:34:e6:ad:58:20:2e:f0:
         07:08:b2:b4:d5:e3:77:74:fd:d2:7d:92:c9:02:2a:66:66:b0:
         f9:ca:1c:ba:b6:42:75:4e:c5:28:ec:3a:6b:04:f0:99:61:d0:
         87:57:b8:fb:73:22:08:2e:17:d6:41:2c:b5:da:1c:35:c3:d3:
         47:a5:62:9f:a2:92:f3:a2:9b:f6:17:3e:46:f1:56:f0:9a:b4:
         4d:d0:2f:85:e7:bc:fd:97:91:97:2f:e2:1f:07:4e:fa:11:5f:
         0a:d7:af:a8:54:a2:17:b1:8e:97:3e:a8:08:22:d8:74:db:ae:
         b8:44:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----