Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
File:                     MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft (raw, json)
Hash identifier:          34CZwDoaE1uLi9VTCiFnujyLc0hL2ZmbLTiZLAd2UuU=
Subject key identifier:   93:89:08:5D:FA:D0:44:68:11:FE:7E:A9:7E:77:77:49:C4:D4:1F:2B
Authority key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
Certificate issuer:       /CN=32b1b94b073c547991c20f842eadec167ec19e34
Certificate serial:       01962E998ACA295B2C513E18481B50846035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
Manifest number:          0160
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: HTiETFMnseisEeoALFIWItsK6gc.roa (hash: iulklaFZv7FQZ4kyFEEaoOlUffIGv7CCXTbtxR93AS4=)
                          2: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl (hash: jF3t50U2zP31+cU+EMuQYQlLLzwVdXPhaI/ljnncSz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8a:ca:29:5b:2c:51:3e:18:48:1b:50:84:60:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32b1b94b073c547991c20f842eadec167ec19e34
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=9389085dfad0446811fe7ea97e777749c4d41f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:26:ab:a2:35:67:94:dd:26:ec:46:27:68:
                    b3:d8:7f:4e:f1:80:18:6b:07:2a:59:32:f8:cf:1c:
                    f6:28:fb:ae:be:40:90:7e:67:f1:3f:c3:0d:5b:10:
                    d4:87:89:f8:db:65:1f:67:18:22:4e:b3:05:36:9d:
                    2d:d9:2c:1e:38:ec:af:59:a3:3b:86:9b:78:89:71:
                    7f:9e:95:5c:26:79:a3:fc:7d:25:38:27:e3:8e:7e:
                    24:c7:91:e8:37:8f:c0:53:cd:d1:fb:2a:bc:81:82:
                    87:62:6a:69:c5:4e:fb:52:46:03:36:9d:88:af:f9:
                    da:5f:92:8d:7f:1c:1b:95:81:70:31:65:c8:a5:b3:
                    e4:7d:74:40:ef:52:c9:40:52:ec:f6:6f:6b:ff:8b:
                    7b:e8:90:c3:71:3c:e2:fd:b7:34:10:ef:e4:d2:97:
                    1c:e9:d9:1d:ec:e9:12:22:96:d9:37:87:d6:8c:96:
                    34:58:ac:cb:b5:d3:90:37:8c:3c:f7:8a:4f:c2:4f:
                    16:98:30:7d:c9:92:60:d1:d8:7e:5c:ae:80:ce:4d:
                    87:3d:8f:a3:93:b5:f0:d7:39:37:e1:62:09:71:3b:
                    dc:e4:af:d3:f1:76:a0:20:c3:cd:12:8c:ab:1f:d5:
                    ad:26:55:29:a3:ae:55:8e:f4:2f:54:01:73:94:3e:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:89:08:5D:FA:D0:44:68:11:FE:7E:A9:7E:77:77:49:C4:D4:1F:2B
            X509v3 Authority Key Identifier:
                keyid:32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:c5:b1:ce:88:0d:63:28:04:25:59:d9:02:d5:dc:02:4c:
         17:02:3f:2f:93:ad:40:0b:87:c2:c3:dd:eb:52:46:82:06:ac:
         b1:83:60:f3:45:82:96:f0:40:f3:83:a2:fb:69:68:bc:48:6a:
         3b:7c:21:64:ba:db:70:34:73:b6:0b:1d:0a:3e:a4:eb:67:10:
         da:74:d9:31:6a:f6:ae:98:c9:42:b3:16:5d:10:29:d1:21:58:
         e3:7f:e0:dc:a5:e4:e7:9b:b0:55:df:4d:4c:05:39:ce:d1:ec:
         f1:7b:b5:b5:c4:19:34:f6:bb:0d:22:10:a9:ea:51:9b:65:3b:
         1b:45:d0:38:db:87:fc:e0:a8:60:e4:27:b1:65:95:a7:75:14:
         25:14:5a:84:af:40:62:d3:02:f4:94:99:63:22:c0:7d:d6:19:
         59:f9:18:38:d5:83:34:8f:e4:d2:ab:82:fd:c2:93:22:c4:b8:
         dc:30:aa:35:9b:bd:b9:9e:8d:34:58:fc:6b:64:83:50:44:86:
         ec:22:0e:1e:99:96:26:0e:2f:e6:17:b4:a9:1c:a0:22:60:0c:
         b8:d7:be:1a:68:9b:d5:4c:77:ce:b7:9f:4d:cd:80:c5:08:bc:
         78:f4:84:c7:c4:ea:06:78:cc:6d:12:39:fc:09:0b:2d:58:06:
         ca:30:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----