Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File:                     MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier:          +6ejDVlg1KGRQncIP27OdqkNAr9FnTTxMNBevLXQR3g=
Subject key identifier:   FA:A6:A0:A1:AE:5C:A2:4E:F2:A6:C0:50:A1:4B:CE:79:C6:71:B2:41
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer:       /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial:       01962E997C57C57497E1CB6EBF24E78112AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: VdOMQ+K2ixUL/kGlvA7DYoM3FEGFFz7XgINlWjA8UXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7c:57:c5:74:97:e1:cb:6e:bf:24:e7:81:12:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=faa6a0a1ae5ca24ef2a6c050a14bce79c671b241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:fc:7f:98:ab:ac:ad:88:24:e6:ab:2d:dd:
                    27:b2:e1:b5:41:84:c0:35:be:c4:34:a0:6f:a7:07:
                    2f:13:b7:ce:2c:d2:5b:e9:7f:58:f6:0b:04:33:54:
                    83:15:7b:9c:8b:9b:99:48:7a:b0:76:ec:5e:a7:97:
                    ec:fe:6c:86:46:c7:d1:1b:c1:7d:7a:52:d1:c8:e5:
                    ff:17:2f:85:1e:f9:13:da:37:28:3c:60:45:87:b9:
                    77:b7:35:97:f9:1f:4a:2f:7f:0a:89:e1:1b:a3:87:
                    45:13:45:d7:e2:3f:e8:bb:81:d9:a7:f0:a9:8c:cd:
                    04:77:65:11:48:42:7b:84:86:4c:51:35:ad:95:5b:
                    d2:e1:41:09:bd:9e:39:3e:5b:07:6d:0e:ab:dd:dc:
                    80:27:24:2e:d1:b2:68:2f:1c:a1:22:e6:6d:2c:76:
                    c5:2d:52:44:b1:11:b9:47:b6:3d:79:51:75:90:89:
                    5d:83:c0:3a:07:b0:2f:62:7b:b6:9a:7a:a9:a0:92:
                    fe:a4:ce:93:6b:b8:d8:e3:57:68:b8:aa:b7:fa:a0:
                    31:99:f8:e1:12:e5:65:5c:97:db:20:dd:35:ef:23:
                    8f:39:f2:8b:b4:95:e6:24:7a:fd:3a:84:b3:71:71:
                    f7:b1:bf:87:f8:48:b4:2e:47:40:05:30:d8:63:6d:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:A0:A1:AE:5C:A2:4E:F2:A6:C0:50:A1:4B:CE:79:C6:71:B2:41
            X509v3 Authority Key Identifier:
                keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:18:66:01:9f:a4:b5:31:7b:90:e4:9a:8f:9e:f2:fc:48:
         7c:d7:65:cf:f0:71:50:a2:bc:2e:0b:d4:77:36:07:f6:ca:f8:
         ac:a9:81:f4:d3:94:62:63:d7:ad:a8:0a:6c:42:53:a8:0d:6c:
         55:e3:c9:7f:cf:cf:2c:91:c9:02:0e:5f:a9:93:e3:0f:cc:4c:
         22:f0:f0:1e:37:5f:23:c5:fb:37:21:62:7b:43:9c:17:78:6f:
         f8:16:36:67:a8:e0:1c:83:e5:04:3e:0e:92:e4:45:35:d6:60:
         d1:7c:3f:bb:7f:f0:da:1b:eb:72:de:05:76:cb:9e:67:91:a4:
         a3:05:5a:b0:05:9c:d8:b2:7e:2d:d9:9b:5e:6e:1b:3b:2e:99:
         48:a4:7e:fa:0c:61:93:96:4f:34:6d:1e:1c:0a:63:d4:16:48:
         5c:35:18:8f:39:62:01:90:95:22:88:b5:27:15:26:1d:51:8c:
         a5:43:b4:9e:50:71:20:a1:9e:b4:7b:ed:85:6b:ac:80:f7:28:
         74:c3:a2:fe:21:b7:dc:98:f7:de:31:60:71:d4:8c:31:41:dd:
         52:99:eb:fd:14:10:5a:9e:20:67:56:33:43:cf:37:57:a7:97:
         45:ea:c7:92:3f:fa:f2:44:4a:a0:68:73:a4:01:74:2e:2f:87:
         ca:c5:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----