Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File:                     MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier:          GnkL/+Cjx3en5DkhN87rmSKoVFWALpU9YtXdyUc8UF4=
Subject key identifier:   04:5B:A4:E6:7C:7F:FB:7B:04:71:43:5B:0C:FC:C5:A1:78:DD:A3:39
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer:       /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial:       01962DF3BC6066A65F7364B8E73396DE80ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: zcMAWCM/WIvJbnp8nLKhbzlR47V2RGZQmStpWDloF8U=)
                          2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bc:60:66:a6:5f:73:64:b8:e7:33:96:de:80:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=045ba4e67c7ffb7b0471435b0cfcc5a178dda339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:bb:d7:3c:c1:2c:f3:1b:94:ec:2a:5b:aa:
                    2e:31:b1:93:ca:6b:2b:ee:e0:f1:f3:c6:6c:85:a0:
                    ee:4c:06:0a:22:a9:79:35:7e:1c:a0:61:9b:bf:dc:
                    34:39:c2:5c:39:54:84:55:24:3f:1e:46:fa:77:30:
                    2a:3f:a8:cc:92:d6:73:4a:a4:ba:d2:4e:cd:d8:59:
                    cc:4e:fe:7b:5d:2a:47:92:08:30:da:fb:f4:07:5b:
                    8c:11:5a:75:dd:80:08:56:4d:19:b4:89:11:f2:ad:
                    96:76:80:7f:a8:b1:25:da:69:9f:dd:6a:fa:9d:1e:
                    9b:5c:a7:37:02:69:7e:70:87:15:af:1c:4c:de:cf:
                    13:c6:e8:eb:a9:c1:78:c4:66:56:80:5d:a3:a2:da:
                    ab:ab:1a:fe:32:df:5d:42:13:89:7a:27:f6:96:55:
                    0e:cb:9d:4e:e7:30:8d:9e:cc:b1:18:19:52:2b:28:
                    0b:b1:bc:4a:db:93:d8:6c:da:58:20:13:ed:61:88:
                    65:31:32:ed:af:38:b0:bd:d1:ba:49:4b:e4:72:57:
                    61:a3:c2:f8:2c:9f:07:a0:c9:32:e0:ce:44:03:c4:
                    31:0e:21:74:f6:be:fa:19:59:06:a0:6f:92:73:93:
                    44:49:84:fc:25:27:d1:0f:7f:5b:1a:d8:81:ee:21:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:A4:E6:7C:7F:FB:7B:04:71:43:5B:0C:FC:C5:A1:78:DD:A3:39
            X509v3 Authority Key Identifier:
                keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:45:0a:96:ea:ef:2c:84:9b:9c:ac:36:90:93:fa:63:bb:
         d1:52:20:11:23:97:08:14:cd:b0:2f:45:15:bd:0a:82:fd:e5:
         cc:44:61:f2:54:c5:ac:e1:0e:66:29:69:81:0b:8a:7b:b0:8d:
         01:59:01:13:3e:af:79:34:83:d9:73:3a:b9:46:cf:5e:e1:c2:
         ba:d1:5a:0a:d8:c0:06:a3:45:96:3b:a9:45:f0:c9:e3:a9:f5:
         9d:26:b1:51:b7:05:01:d5:26:8a:b1:94:3c:b7:01:1b:43:89:
         82:c8:5a:65:ee:9f:5a:94:ab:ff:83:14:f7:6b:2d:bb:57:49:
         89:0f:8f:db:83:17:f4:bc:47:59:d8:96:46:bb:78:1d:db:67:
         39:1f:64:95:81:91:05:cd:4f:d5:54:99:62:e2:b2:1f:31:82:
         05:98:5a:08:d9:ce:3a:4a:1c:7a:ab:7f:d2:6a:64:a3:cf:14:
         b7:1a:5c:e8:b0:3a:bf:c8:28:3e:59:ff:2d:1b:ee:41:f1:b4:
         c0:9e:b4:ad:be:78:46:05:63:39:c8:fb:6d:43:69:bc:b6:b3:
         ea:c1:c7:69:a9:c3:74:2c:e0:d7:56:99:f6:d3:bd:be:d2:ea:
         87:80:b8:2a:19:73:bd:90:c2:3e:ad:2d:f0:57:94:47:63:0f:
         06:7a:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----