Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
File:                     MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft (raw, json)
Hash identifier:          uubYwZMBhXZlzorAAkZXKl0ii2xNNmgWh46nv5bVgPs=
Subject key identifier:   C4:2E:50:F0:47:8E:A1:B7:E7:9F:8D:3C:75:D3:3A:02:90:A4:CE:B8
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Certificate issuer:       /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial:       01962FAB9FCFF4EEE531F12872FB0BCDB5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft
Manifest number:          0919
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl (hash: lJfWGLXVEWj8l10+FaYOxlF4zjMBbD4/kK+ERN2BHMM=)
                          2: hWRauvdDJQt-oDXnvWA4MwMmCao.roa (hash: XqDB4iBF4pQimyQpMd5E4c4AjMzIAL2t4iD/Z/oy7sk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9f:cf:f4:ee:e5:31:f1:28:72:fb:0b:cd:b5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=c42e50f0478ea1b7e79f8d3c75d33a0290a4ceb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:5e:11:05:df:a5:c6:2e:c1:df:63:c4:e7:
                    15:fa:34:e0:52:81:ae:0e:64:bb:83:9c:05:72:26:
                    04:34:c9:89:c7:21:a9:35:75:c0:9d:ce:c4:5c:4f:
                    dc:89:fa:64:1e:30:4e:77:c3:42:ab:76:1d:b2:db:
                    f8:54:39:e2:e0:c0:e0:0a:8c:cd:ca:8b:58:55:97:
                    a2:6c:04:25:fe:84:db:85:66:4d:7d:23:9f:84:b6:
                    51:bc:a0:50:af:8b:98:db:56:43:31:f0:71:ce:3e:
                    6e:e4:df:6e:1b:5f:31:cd:d4:6d:ce:94:11:f3:5e:
                    7a:50:b7:e8:4a:5b:c6:f3:c7:02:1f:3f:2d:1d:bd:
                    4a:2b:ab:27:62:97:bd:98:a6:fa:d7:e7:1f:ac:03:
                    84:82:3b:96:2b:97:c0:1b:0c:69:a3:ff:e5:8a:ab:
                    63:ab:a4:4a:7e:84:4c:04:fd:ec:ea:5a:eb:d6:05:
                    4b:fa:ac:da:e6:17:12:45:79:82:76:42:b2:4b:2d:
                    8d:ec:5b:7b:d1:a2:30:0a:dd:c3:c6:56:da:ba:dc:
                    98:b2:cc:ca:cd:90:2d:59:c7:58:54:3f:84:16:36:
                    a8:47:27:af:eb:05:1e:73:98:a8:2d:49:76:df:ec:
                    7d:49:87:54:a9:e0:94:5f:28:b5:9b:77:83:74:80:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2E:50:F0:47:8E:A1:B7:E7:9F:8D:3C:75:D3:3A:02:90:A4:CE:B8
            X509v3 Authority Key Identifier:
                keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8f:fc:82:ce:ff:f1:ad:13:ad:0e:d4:48:c0:ec:f0:10:03:
         ac:e6:24:b8:6b:f2:92:6e:f4:df:a8:5c:8f:10:d0:a2:f1:10:
         e5:41:4f:29:c1:31:3b:47:f1:cb:2b:28:e5:39:56:62:fb:a9:
         41:c4:3b:86:3e:8a:6b:98:02:fb:27:4e:03:e8:ff:65:2c:12:
         9f:54:67:b4:bc:79:86:71:39:55:1a:58:29:a4:0a:cd:ea:f5:
         f2:e0:97:39:43:5a:35:81:ad:6d:00:52:cc:e3:c5:94:b4:c3:
         04:9d:1c:5a:49:66:a3:32:b7:22:46:64:96:4c:b9:57:83:76:
         1f:e2:21:59:b3:a4:2c:ce:fe:c0:09:15:95:fa:3d:20:15:5c:
         ce:3f:21:25:4c:15:52:a9:7d:93:69:cf:a9:2b:c9:e9:ca:d8:
         fc:aa:2d:41:0c:99:df:8a:37:ff:7c:db:21:cc:13:74:d5:d0:
         3f:65:fd:99:67:0b:95:0f:f9:54:c4:c3:f6:a4:b7:c6:2b:61:
         25:87:26:21:64:24:30:c7:48:6d:31:7f:d8:50:05:74:c4:87:
         ef:e6:2c:47:50:a8:f7:d9:9d:ae:e2:17:1b:8c:64:a9:99:11:
         c4:46:76:6a:b3:fc:a7:71:45:d6:c8:ea:00:72:c7:08:fd:77:
         f7:4f:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----