Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File:                     MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier:          35GisZSnG0iNIbmCqb0JRuKO3q6dq0AmnzIzquTh5nM=
Subject key identifier:   10:3D:BB:3E:BC:62:76:11:45:B4:6A:68:2D:5E:B9:D1:C7:8F:C9:3B
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer:       /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial:       01962E9946918BFE9B2965FDA3337FD6503A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: l0DM9h4UhnP0bWb9cOLMC43k2a2lR0tfwwa7kEmgE+w=)
                          2: a9vur_G-Sv_-WDNvoaN6FO-mp_Q.roa (hash: 5mLv65w3uElW3I7UtSlBFzQFnR6wfzkGH2z+n02Go3s=)
                          3: ckPg9sFMxT2re8tM8nExJep_9Qs.roa (hash: DU25ajodIpeW2jQoXz2wnkJ8CRhq6NHvl6w7hFsUi60=)
                          4: yFSjMkcgtQ4jugHf3jpWTH9Nbv0.roa (hash: hqHHntvNx6acptoTgy50EVxfDKrmw52pRvx+yFRJ3nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:91:8b:fe:9b:29:65:fd:a3:33:7f:d6:50:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=103dbb3ebc62761145b46a682d5eb9d1c78fc93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:26:3e:93:a3:72:1b:7f:2e:c8:e4:3f:16:
                    1b:28:51:fc:24:78:83:29:8c:8b:d4:77:ec:4b:8e:
                    30:94:b8:17:af:bc:6f:be:ff:43:8c:af:3c:a9:0f:
                    c8:da:de:1b:3b:e4:86:7d:85:d1:2e:68:53:dc:72:
                    8e:c2:f1:1c:cf:82:5f:57:21:a2:a9:7b:07:64:4d:
                    ec:53:2b:7f:3b:87:af:c6:60:c6:46:aa:9b:0e:63:
                    30:98:5b:d5:d2:bb:3b:ac:ab:59:49:23:b8:cb:11:
                    f7:f5:f1:84:30:31:d9:d9:e2:9a:eb:24:3d:29:39:
                    aa:09:01:31:c3:dd:f4:dd:a4:2b:47:18:b5:f4:2b:
                    a6:22:62:b8:27:b1:d1:e3:a9:b6:28:b0:35:0b:f6:
                    99:1e:93:64:b5:b6:e1:61:04:3e:67:cc:48:11:bd:
                    a9:ee:74:5a:5d:f4:72:0f:76:fc:a6:6a:53:4c:d1:
                    a4:e0:d9:76:25:9d:3d:f8:69:2a:82:3b:0b:b1:7b:
                    27:78:19:5c:14:a0:ea:02:f9:c8:0e:f5:d2:25:25:
                    34:18:ea:af:9d:34:ec:f7:d5:41:ed:4c:3a:3d:c5:
                    68:35:3b:a4:fb:a7:1d:ef:1c:9e:99:5e:67:4f:8a:
                    74:50:37:33:14:57:8c:3e:df:2a:19:55:0d:39:a4:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3D:BB:3E:BC:62:76:11:45:B4:6A:68:2D:5E:B9:D1:C7:8F:C9:3B
            X509v3 Authority Key Identifier:
                keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1a:06:df:16:ba:56:03:3e:0e:1e:19:d2:92:40:b1:2d:e4:
         37:50:a4:29:5a:11:a0:97:83:4f:45:93:26:25:fb:bf:55:bb:
         51:24:1e:a0:91:43:d6:a3:88:8f:56:51:72:4b:d8:9e:bd:b8:
         1e:9d:65:89:76:96:bc:52:f7:2d:3a:bb:07:61:37:c2:0b:d2:
         65:35:6b:68:7b:27:60:7d:49:41:d9:28:75:14:99:f0:df:c7:
         f0:16:61:f8:5b:29:18:b6:9a:70:b9:81:f0:e0:0c:97:45:cc:
         34:56:69:e6:06:5e:a4:5c:12:29:4b:78:76:7b:6d:97:b5:c2:
         7e:8a:78:f3:84:cf:6b:19:68:56:ec:8a:56:4e:e3:5b:bb:46:
         70:40:ea:42:74:a9:e8:3a:f8:e3:c9:75:88:b2:7b:4b:70:44:
         db:67:f4:9d:72:7e:fb:d7:f7:da:0b:ec:e6:94:77:c0:6c:b1:
         19:c7:3a:c9:0d:c6:08:7c:fd:fc:8e:0a:c4:14:7f:3d:12:12:
         8d:23:bc:b8:5b:d9:76:8c:bd:c9:94:76:4b:2a:a7:6a:54:c2:
         b1:59:86:46:5f:ea:a1:ae:ad:27:c6:85:bd:3f:7e:d1:76:24:
         30:0c:be:e3:1d:c0:dd:56:2d:e9:59:e7:00:b3:5b:8f:5c:b8:
         25:08:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----