Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File:                     MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier:          jjWLzKmBnn47dflGKCNDAqqOq8NHewiLOpioONZyzpw=
Subject key identifier:   36:48:4D:8F:4E:CD:E5:5F:3F:C4:BF:63:AC:0C:87:04:D1:F4:20:91
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer:       /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial:       01962DF3944638257F10FADE369F18DA2717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number:          01BA
Signing time:             Sun 13 Apr 2025 07:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 07:00:59 +0000
Files and hashes:         1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: bxraLK6O+NyC/r6D+uLs6pfs7VHxD0ulYfq82+jtjx0=)
                          2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:94:46:38:25:7f:10:fa:de:36:9f:18:da:27:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
        Validity
            Not Before: Apr 13 07:00:59 2025 GMT
            Not After : Apr 14 07:00:59 2025 GMT
        Subject: CN=36484d8f4ecde55f3fc4bf63ac0c8704d1f42091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:48:c6:7b:3f:a9:5a:36:4f:53:74:2e:08:
                    d1:4d:52:83:f3:7c:70:10:76:d0:3c:d5:07:b7:2b:
                    0c:3b:9a:d3:19:d6:18:9b:0e:f9:b1:6e:1f:0d:25:
                    af:7b:1c:e0:b5:fa:02:5e:86:7e:93:60:30:c3:51:
                    60:19:29:f2:1c:fa:5a:1b:34:71:19:eb:69:c7:d6:
                    01:5e:a6:9c:ce:a4:7a:56:a3:5b:e3:5f:17:7d:42:
                    97:a6:a8:6c:3d:58:5a:f2:91:91:e0:7b:49:df:3a:
                    a2:cc:8a:f3:c5:c4:4b:32:32:c5:b2:f5:88:da:33:
                    74:06:54:80:69:0f:fd:db:0c:f7:db:ea:f1:37:a2:
                    60:b2:f5:79:03:30:a9:b6:5b:f5:07:12:43:c3:3d:
                    22:4f:ea:09:c2:1f:be:c1:89:ed:02:c1:00:87:db:
                    c0:e9:55:e8:88:69:aa:cb:08:2c:b0:bb:b1:35:6e:
                    a2:8a:97:b5:16:67:e1:de:68:94:65:ac:9c:c7:58:
                    12:96:d3:27:e6:e5:39:8d:f1:33:e1:d6:e1:56:32:
                    63:1d:58:6b:93:5a:ab:3a:c4:e1:4c:74:11:9b:fa:
                    46:e0:51:d4:26:96:4f:15:da:82:ab:fd:c7:bd:b9:
                    dc:32:ac:e2:12:95:50:09:1e:51:46:6b:ed:34:63:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:4D:8F:4E:CD:E5:5F:3F:C4:BF:63:AC:0C:87:04:D1:F4:20:91
            X509v3 Authority Key Identifier:
                keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ad:bc:7e:ac:9d:c1:70:fe:d9:bc:85:6c:c5:49:c5:03:ae:
         6b:5f:66:94:d5:65:4c:a7:40:60:83:28:f3:ed:89:b9:04:d7:
         ea:5f:88:c5:58:08:ef:15:63:6a:36:1c:16:8d:15:97:87:6a:
         96:02:55:7d:c3:15:3a:d2:36:d8:35:7e:d3:de:04:d9:ad:97:
         5f:bd:64:4e:75:b2:4c:17:d9:95:ce:b6:bf:70:d2:6c:40:bc:
         bf:aa:64:42:f6:e1:53:3a:30:02:cd:a3:05:8a:e6:04:c8:6d:
         0e:56:f1:d3:93:02:82:48:f0:57:6a:bb:f5:7e:cb:35:5b:ef:
         65:d7:ed:18:ce:44:c9:bb:e3:d6:1f:51:71:48:69:8a:50:96:
         25:d1:aa:6e:fe:ea:51:80:77:8a:c8:78:ea:6d:67:86:ba:c7:
         5c:8a:ff:83:05:b2:35:9d:5c:b2:a5:20:93:85:cb:63:2d:c8:
         1d:b4:68:d9:95:87:ff:9c:fb:09:ef:d0:7a:e8:1c:a0:4c:01:
         53:5a:39:2d:60:38:80:9e:1c:06:04:8a:cb:e0:d0:ed:1e:7c:
         51:9e:95:72:34:21:1c:ff:e7:81:09:b8:72:29:28:17:38:bb:
         f0:17:bd:d0:d8:e9:7a:7a:5c:2f:04:2f:3b:d9:3c:79:5e:38:
         86:6b:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----