Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File:                     MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier:          L/XUnpaAz7MU6b/yj7YDvQw5my3OBk/Gj+hQfb3xp1g=
Subject key identifier:   82:87:01:39:F4:1A:2E:A8:29:03:84:A5:F5:34:57:C0:92:6B:C8:2E
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer:       /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial:       01962FAB4DD7B66FD260E25782F6536E440E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number:          0392
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: qpOhoNlAiE+tJcgLZRJaFz0bISJ7P51t85Nox3lGFWI=)
                          2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4d:d7:b6:6f:d2:60:e2:57:82:f6:53:6e:44:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=82870139f41a2ea8290384a5f53457c0926bc82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:06:75:95:bc:a4:65:aa:6c:41:ca:5c:f8:
                    bd:89:24:a4:ba:19:12:89:43:24:c7:10:d1:cd:a6:
                    7e:57:26:66:fc:15:b0:5f:ff:48:4f:52:44:0a:78:
                    d3:04:dd:a6:72:14:d8:3f:82:ac:1c:8f:52:eb:d2:
                    38:cb:63:eb:51:6c:e3:7b:db:4d:2a:35:33:19:ec:
                    2f:a5:8b:40:71:52:09:9b:3a:b8:47:34:41:6e:d7:
                    2f:80:91:ae:a7:66:10:cf:e8:a9:a8:1a:62:30:99:
                    ae:e3:2c:8e:3f:12:12:96:ce:b4:29:44:a7:82:bb:
                    b3:f1:2f:7b:4c:d3:61:f5:aa:b3:0d:27:08:c2:c3:
                    68:07:95:db:34:69:2d:1f:e1:7f:67:a2:b0:25:a9:
                    cd:45:e8:8a:bf:5e:a7:27:ef:34:5c:5f:16:93:c2:
                    b0:67:43:8e:3c:30:30:8d:c6:e2:8c:05:18:6a:f9:
                    6f:8e:45:02:70:3a:18:92:e2:d3:86:07:86:d9:3b:
                    5d:4d:72:6e:0d:2e:5f:e9:d0:65:29:a0:fd:83:00:
                    d0:15:8d:f1:c8:1b:9c:5f:79:27:26:b6:93:b0:ed:
                    fd:43:b6:70:8c:fa:87:22:dc:1d:be:83:67:e8:6d:
                    e7:05:ea:d1:ef:3f:13:c9:2b:c4:0e:72:43:7c:35:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:87:01:39:F4:1A:2E:A8:29:03:84:A5:F5:34:57:C0:92:6B:C8:2E
            X509v3 Authority Key Identifier:
                keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:37:bd:a1:64:01:92:27:5f:97:38:ca:4e:99:d7:b5:05:
         ff:35:24:db:e6:b4:e8:0f:2d:bd:f3:e2:a3:0d:22:b9:06:b2:
         f6:ba:cb:86:2b:2f:c0:9c:da:20:5c:1f:3c:03:44:df:e2:83:
         f0:66:90:23:2e:37:e5:ac:b2:0b:08:ec:3a:39:69:75:0c:ef:
         80:0f:45:75:52:a4:b4:9c:b4:1b:98:e1:0f:97:1d:d6:8d:16:
         20:9c:14:01:83:56:b2:70:c7:b7:5c:8b:ba:1b:96:63:7f:17:
         ff:5f:38:e0:a0:2e:f3:f9:68:cc:b5:40:71:fd:41:f5:ee:a3:
         1e:ab:4d:61:b1:76:d2:13:65:51:34:8f:92:4c:cf:b2:5f:b5:
         7a:53:64:15:10:a6:dc:5f:aa:72:03:7a:9d:81:93:ee:41:16:
         49:76:31:45:4b:38:35:f4:30:a7:61:41:31:0d:72:c4:2d:68:
         8b:49:cb:6c:e9:6d:25:7d:52:fa:a4:28:00:6d:d2:a1:a8:35:
         56:71:93:0f:79:54:3e:76:81:2d:4d:35:11:13:31:2e:62:3d:
         33:92:35:45:82:58:32:24:65:98:ee:76:80:25:52:00:b2:0d:
         1c:d2:42:a0:47:e4:40:2f:83:3a:21:d6:14:46:65:e1:45:11:
         06:5f:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----