Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File:                     MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier:          dYQf/Pcg+OhuqGA6ON7kyxq5AodZsxDcqb8oJq6ULBA=
Subject key identifier:   6E:DC:64:C4:F1:D5:5B:94:91:B3:CC:F3:42:69:C9:9F:09:3C:18:C0
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer:       /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial:       01962F0703892B6270CD95015BC2C62B07F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number:          0BBC
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
                          2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: 4M59hdhKeKePLD+Xa9rOdKptbAQnFoki1gjD17H+jys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:03:89:2b:62:70:cd:95:01:5b:c2:c6:2b:07:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=6edc64c4f1d55b9491b3ccf34269c99f093c18c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:0f:f0:13:bf:74:72:c3:be:0e:a7:20:7c:
                    fd:1f:11:a0:ce:49:2f:99:0a:b4:f8:c4:3f:50:09:
                    96:11:0f:70:dd:53:e9:a3:c7:d7:de:fd:bf:11:30:
                    b9:5d:61:0a:63:fe:e1:68:d3:09:7f:f0:33:40:ba:
                    44:f4:6c:72:4f:0b:d5:79:f2:56:51:32:5e:a9:d2:
                    b2:43:51:c4:22:0c:23:3c:34:67:74:f4:85:bf:20:
                    1f:04:78:ca:97:00:0d:29:f9:65:cb:65:ec:d9:dd:
                    32:ee:d9:b2:f1:57:ef:16:95:46:20:0c:cc:b9:c8:
                    95:7c:96:5f:c9:48:a3:e4:be:31:dd:b8:c1:4e:de:
                    3d:52:1c:e8:f0:ff:1f:cc:9b:43:fe:09:01:af:88:
                    15:fd:74:1d:1d:09:7f:6c:fa:65:fe:a3:0d:42:be:
                    e2:fa:99:af:02:df:f3:82:b9:8b:27:c8:6f:02:a7:
                    4d:70:0f:86:d4:50:8c:b4:8c:29:35:f4:7e:07:9b:
                    9e:6f:40:7e:cb:37:df:5a:79:3d:6c:84:89:33:55:
                    74:a2:df:7b:56:35:0b:99:30:d3:96:cf:cf:03:43:
                    75:b5:4a:75:2f:3f:c3:01:84:8e:01:db:60:1c:fb:
                    33:6a:e0:66:a3:70:2d:ce:40:fd:1b:81:ea:4a:a0:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DC:64:C4:F1:D5:5B:94:91:B3:CC:F3:42:69:C9:9F:09:3C:18:C0
            X509v3 Authority Key Identifier:
                keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:71:b4:95:00:c3:cb:d4:79:60:4d:ba:86:f9:eb:4c:38:
         c5:0b:71:d5:ae:b5:70:f6:1e:9b:8f:96:12:d0:0f:83:5d:a5:
         54:30:fa:ae:73:8c:07:bb:96:07:d0:42:94:5c:16:0c:ee:17:
         55:0a:81:9b:1a:92:46:14:6d:3f:3c:fe:71:61:61:a9:3c:9e:
         4c:05:6a:a2:7d:6a:3b:d3:a9:58:12:6d:7f:10:1d:16:2f:5a:
         38:37:cd:c0:19:2e:04:06:82:a5:8f:03:f4:c6:f7:87:d6:6c:
         fa:a9:14:8f:6d:3d:7c:4a:af:f3:90:21:0b:be:27:e8:c0:42:
         8a:16:62:94:01:62:23:f0:58:e3:e7:ee:ed:31:12:84:51:c6:
         b8:9e:c6:02:1a:0a:99:7d:7a:ce:90:8f:56:a9:e0:3d:42:fd:
         59:a8:ad:c0:10:6b:52:00:04:95:dc:03:1a:d2:9e:02:4e:22:
         cf:40:80:e6:a9:3d:22:79:1e:fe:15:7e:ae:48:dd:83:1f:a3:
         63:06:07:f3:3c:0d:a9:68:1a:23:20:9e:97:60:84:4c:83:43:
         98:6e:56:b5:82:f7:9b:51:c9:6c:06:f9:17:89:3f:5a:e4:38:
         5e:de:1f:71:dc:ea:68:b4:da:72:a7:50:5e:bd:25:3f:31:45:
         66:3c:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----