Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File:                     MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier:          8D94cum3mc4zF0CgQCBkfTo77l9dYURxi6qL63uEiPM=
Subject key identifier:   0D:F5:7B:22:F0:4D:14:B7:55:8B:3F:BA:0A:87:DB:2D:AA:51:89:E1
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer:       /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial:       01962F748FEF76BFFEA5F6700BCE069981FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number:          0955
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: /FnypoKUER5T33+jLCy8eWL4D/AoRSCDZSu0xwnkdsE=)
                          2: TFll5ENpjCR3fFAI_0E-ikt6_GM.roa (hash: cdCSDqZSpIOGUxCTSX+KjodpOB497W7vlYLMjlGxydw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:ef:76:bf:fe:a5:f6:70:0b:ce:06:99:81:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=0df57b22f04d14b7558b3fba0a87db2daa5189e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:94:e7:94:2d:7b:7c:15:e4:14:93:28:71:
                    4b:9d:8f:26:2e:98:74:41:ba:29:a2:b4:ce:1b:2d:
                    c2:11:92:9f:45:29:09:6f:ab:30:24:76:95:4d:32:
                    0f:67:d0:61:2e:21:ef:52:92:75:cb:a0:fa:bf:2f:
                    40:f6:0d:ed:87:76:dc:9f:80:0c:0c:48:70:5b:5b:
                    32:1b:e7:e0:6a:90:27:69:8e:1f:df:92:28:4d:0d:
                    87:40:de:df:7d:56:e4:b4:0e:ee:ab:e9:cf:8d:5b:
                    ef:3b:7a:89:55:ea:74:cd:10:b6:de:82:07:25:2a:
                    24:af:71:3b:e3:ff:53:38:1e:d3:dd:51:4b:b8:6e:
                    f8:9e:4e:f4:58:25:fc:dd:d9:2e:88:4e:91:0b:c4:
                    3f:d8:a7:e7:e7:fc:62:eb:1f:9c:e3:da:26:bc:ec:
                    d7:94:f3:79:74:32:49:a4:95:63:36:be:d0:e5:c9:
                    54:b5:15:7c:a5:68:cf:73:88:2e:78:81:08:12:f7:
                    db:cd:52:02:88:b0:96:93:6d:d0:e7:4a:1e:ec:ac:
                    83:7b:4f:c4:d7:da:e3:1a:18:43:ae:67:95:85:9e:
                    30:b9:45:b9:03:08:ca:45:04:20:08:3c:34:9a:9c:
                    58:cc:12:45:c4:d0:be:8b:97:99:90:af:28:87:85:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F5:7B:22:F0:4D:14:B7:55:8B:3F:BA:0A:87:DB:2D:AA:51:89:E1
            X509v3 Authority Key Identifier:
                keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:fb:f3:95:93:a8:ca:af:80:87:7f:59:18:aa:cd:a9:5e:
         cd:2e:90:cc:29:96:97:20:f2:e0:f7:61:3d:6d:01:2a:b9:41:
         45:cf:80:cc:33:e6:a0:6f:92:84:aa:da:50:f2:d9:db:c0:78:
         5b:3f:96:4c:a7:21:87:09:26:1c:ed:23:f9:22:72:15:9f:0c:
         14:7e:49:91:89:14:1b:90:3c:9a:f6:6f:2e:49:69:af:65:71:
         21:ef:42:a9:36:14:d2:52:fc:1c:d4:af:30:0b:72:d6:89:21:
         41:88:01:c1:22:47:7a:13:61:5b:70:72:a3:00:1a:ad:30:ab:
         9a:30:94:fb:ad:6c:72:08:c5:07:01:07:a9:61:90:92:6f:d7:
         ec:87:42:2b:cd:6b:8a:9e:90:ba:6d:1c:ee:14:9d:40:e4:81:
         aa:2c:7e:09:10:36:ce:78:f3:b9:10:65:4d:4f:a5:15:f1:f7:
         58:19:aa:ac:0d:40:fe:69:ff:ae:63:d5:3d:cc:14:bb:cb:80:
         2d:da:fc:9e:08:06:ea:0c:0b:82:29:ad:d8:30:b9:1a:8b:27:
         94:af:1d:5e:2a:23:a5:1d:ae:4b:a3:2c:25:bc:9d:33:b6:56:
         ed:cb:02:f3:e6:82:b8:9a:c6:3f:bb:23:d2:3e:1f:3d:6e:9b:
         31:f4:e4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----