Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File:                     MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier:          WsY3FYK6OqhaHPvoeB21/gY2JI8cf6FxnDQyOqZpb5M=
Subject key identifier:   B2:83:A1:3B:BB:8A:37:7E:3A:48:EB:1C:A5:1F:6A:99:06:DD:1A:71
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer:       /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial:       01962DF447FCF58DF67CF994974848368278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number:          0B62
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: lu0870ztQlWFhhZrz7Dt/JCQrcqD+l/pWaveRlxCOYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:47:fc:f5:8d:f6:7c:f9:94:97:48:48:36:82:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=b283a13bbb8a377e3a48eb1ca51f6a9906dd1a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:4f:31:c6:1f:41:4a:03:be:0f:54:c7:d3:
                    61:e3:38:94:d2:1d:db:f3:28:15:b0:25:e8:58:70:
                    3a:3b:c0:0c:13:93:18:d0:cc:85:9f:f6:fe:5c:0f:
                    05:1a:00:d9:c3:be:49:ea:0a:f4:92:6a:71:ad:b9:
                    73:73:a5:86:12:04:ff:c7:e3:4e:9e:c7:1c:99:4c:
                    68:b5:23:84:03:13:2f:d5:5e:d3:ca:a6:8f:9d:72:
                    70:76:4f:4b:ce:7a:c1:dc:16:1b:27:fa:0f:6f:ba:
                    2b:c2:17:5e:46:62:70:98:65:89:dd:67:07:90:71:
                    0c:b9:b7:15:06:f2:b8:51:4a:23:7a:c2:15:3d:bd:
                    ff:5b:e0:75:61:95:2c:2d:99:60:9b:35:a6:19:24:
                    79:33:a5:f0:28:b6:ec:e8:93:f1:1c:e6:7c:a9:c1:
                    49:9a:83:97:0a:d6:1a:14:0b:bc:eb:a1:3d:f1:b4:
                    63:4d:1f:fe:20:43:e2:97:95:96:03:d8:3b:cc:d4:
                    6b:fc:9c:dd:c3:10:ca:59:7c:5d:a0:ab:67:de:4f:
                    7b:d4:43:f7:d4:58:7d:2e:76:c4:be:02:4a:fc:ed:
                    8c:aa:50:99:40:fe:1d:23:ff:87:0c:0a:eb:4d:03:
                    a3:19:66:c6:c1:30:0a:96:f6:84:1e:b4:c0:48:a3:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:83:A1:3B:BB:8A:37:7E:3A:48:EB:1C:A5:1F:6A:99:06:DD:1A:71
            X509v3 Authority Key Identifier:
                keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:85:cb:b6:04:72:72:cf:53:a5:6f:64:e7:f1:e6:70:a8:0a:
         ae:5e:1f:f5:c0:f1:97:a1:bb:22:5c:b4:d3:ab:f9:64:9f:d9:
         41:ab:73:bd:d6:df:e6:e3:a6:fc:de:17:c2:6d:7a:70:40:b6:
         57:d9:e0:10:f1:f3:52:7b:39:6a:ed:50:47:5b:1e:57:29:08:
         eb:d3:3a:64:5f:30:e3:fe:f3:2e:90:e6:af:29:1f:90:30:24:
         4e:e0:95:cd:70:33:1f:a8:e3:c1:00:07:79:0a:8b:cd:6c:dd:
         97:9d:08:75:59:29:c3:14:d7:a2:ba:7e:60:c1:3f:93:ba:ba:
         44:e8:20:ed:d5:45:b1:aa:2e:2d:58:ad:65:c8:de:4d:a3:d0:
         5e:94:e6:fe:8c:78:7d:1b:0d:1e:ac:f6:cb:b9:4d:1f:9b:31:
         da:43:8a:e2:f3:7e:3f:8c:23:c7:e7:06:55:82:b1:73:68:7f:
         e6:02:0f:17:b9:1b:c6:6d:94:3b:e5:f6:0d:8b:90:35:53:f3:
         98:ec:ff:e0:a7:b2:05:85:79:ea:32:fc:4a:75:04:ad:8b:69:
         93:7e:ae:f4:e1:66:04:6c:c3:2f:ea:78:3d:c1:65:35:43:6f:
         64:df:60:f0:c4:d0:7b:79:52:44:09:bb:b5:f8:10:c3:b3:f3:
         b5:4a:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----