Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File:                     MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier:          qTYwAqiVw/bqOSNe2dfwnqtoowP88qS80exEIk7hY6E=
Subject key identifier:   35:53:AF:4F:F9:69:F3:E3:76:84:97:71:7B:2D:91:BD:BC:09:0E:5B
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer:       /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial:       01962E61A1B4048FBBC7F97095D404B9DB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number:          1292
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: AaZqekVqXMtY7zZxpFlHfm5QAjY.roa (hash: sZGw/ceX9GbcsyDNRtsXxQmamgue/4b7o8nJC51Ghrc=)
                          2: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: dy9EPiFCgoozVTC6D1PcTisWuEgcodtJUjwITyQIIHE=)
                          3: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (hash: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=)
                          4: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (hash: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a1:b4:04:8f:bb:c7:f9:70:95:d4:04:b9:db:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=3553af4ff969f3e3768497717b2d91bdbc090e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:7a:5f:fe:6b:5a:34:15:ed:28:17:50:21:
                    89:35:e4:46:95:1d:65:8c:45:c2:2b:0c:96:d8:1e:
                    35:bf:31:24:84:3a:37:a1:9a:dd:a3:2d:15:d4:63:
                    29:df:fe:f1:92:8f:bc:55:89:3d:89:72:b1:f1:69:
                    50:89:97:80:63:ba:5c:b6:1b:e8:1a:06:43:9f:cd:
                    f8:9f:ad:df:8c:2e:bf:4d:9e:f8:50:64:c8:55:57:
                    b8:01:3b:c0:e1:8f:79:cf:b0:84:31:48:67:55:c9:
                    60:8c:a2:1d:8e:bc:37:38:8a:eb:48:31:34:5e:e7:
                    49:34:33:a7:4b:f4:ad:68:20:4d:a4:5c:8e:15:64:
                    7c:38:fd:53:c1:e7:1d:5d:f7:a5:46:04:c4:db:05:
                    68:a7:a1:80:a1:e3:46:0f:f7:79:a8:22:43:ee:81:
                    59:34:a0:ae:4b:49:20:30:c8:0e:0e:60:96:ed:40:
                    d4:0e:f7:ab:c0:c7:c5:38:18:46:ad:11:04:a2:c1:
                    01:76:95:d9:95:92:1e:9b:f8:d0:af:d3:8d:61:52:
                    cf:0b:90:6f:54:46:63:bc:48:db:ed:18:3f:da:2e:
                    e5:05:ba:f2:43:b2:68:05:2f:2c:8c:36:2f:af:c7:
                    66:e6:85:8c:c2:fa:64:95:fa:43:55:77:e4:ad:96:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:AF:4F:F9:69:F3:E3:76:84:97:71:7B:2D:91:BD:BC:09:0E:5B
            X509v3 Authority Key Identifier:
                keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:f6:87:2e:0d:49:6e:6b:bc:49:8d:59:9e:8a:00:b6:27:
         ce:03:29:ee:05:76:96:55:eb:40:7e:30:fc:3f:0f:00:0d:36:
         61:26:8c:32:9b:95:3f:7d:21:8a:c2:c3:00:f6:a2:1a:4a:61:
         bf:05:eb:c9:91:01:07:e3:60:7d:6d:43:95:e5:12:5e:f4:74:
         5f:62:39:ea:74:4d:ab:20:6d:74:4f:00:ea:f3:b1:06:6f:58:
         84:7d:98:d6:ed:4a:7e:83:6b:37:c0:85:5a:87:bf:2c:e0:cc:
         cb:4f:32:5b:3d:64:ba:bf:96:57:62:e3:d2:6a:4a:2f:2c:69:
         db:31:38:6e:36:77:e1:63:74:4a:52:9d:ef:0c:9f:0f:75:de:
         9a:e2:9c:6d:bb:e9:4b:05:be:92:af:d4:0d:0f:92:f8:bd:40:
         a9:b2:d6:32:0e:f4:3a:33:38:15:fd:22:4e:38:c6:f0:38:68:
         a4:20:bc:03:7d:9f:9b:a0:28:bb:74:f4:ea:1f:58:82:05:b8:
         2e:21:c1:05:94:8c:49:08:d6:d2:e4:0e:b7:17:8d:d1:0d:bf:
         24:4c:4e:fa:c6:06:9e:88:cd:4c:50:87:13:91:42:0c:5c:b3:
         d4:02:c8:7e:3b:b3:a1:e5:ac:7c:ae:90:b8:9b:02:fd:22:8b:
         f8:46:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----