Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File:                     MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier:          c7+Z+7O2UU47+eznm6rTA0ohS3bFdRCBZpTruIF/UrU=
Subject key identifier:   C0:B4:2F:8E:BC:78:9A:F1:6F:47:C3:7D:BF:13:F5:19:12:90:2E:AE
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer:       /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial:       01962F3D9018E00F6C0B5A27A25F239CE349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number:          1395
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: FuPHG/JMJS1CHdBLdA8hpPSwzR0d6I2gsp34IDcfosw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:18:e0:0f:6c:0b:5a:27:a2:5f:23:9c:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=c0b42f8ebc789af16f47c37dbf13f51912902eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f3:27:74:14:d0:25:45:c8:ed:9a:d1:25:18:
                    4e:e4:23:57:1b:10:99:34:65:ea:7d:72:9d:cc:8c:
                    1b:fb:10:96:38:b3:8b:82:2a:f8:f0:f0:ac:7d:36:
                    e1:7c:5d:52:ee:b4:de:83:19:98:9c:5b:a9:ac:d2:
                    d1:38:81:7e:60:d9:6b:8e:39:7a:e8:a3:2c:ae:de:
                    be:3b:cf:70:83:49:a7:78:70:74:61:47:f4:7f:f6:
                    e6:88:b4:96:b0:9c:b5:3e:b8:30:24:37:f2:98:52:
                    58:a4:23:bd:af:50:93:64:ba:ed:c3:07:b6:82:71:
                    ba:71:35:9f:54:ce:0e:34:c4:19:9c:8b:00:a2:63:
                    09:e0:13:e8:53:6a:93:4e:a1:c1:fe:a2:7e:d5:4d:
                    b5:1f:c0:32:b4:a9:f1:a4:7e:d7:5b:e4:78:ac:b9:
                    b0:ad:d3:ac:ea:84:df:57:73:05:b4:57:2e:fa:9b:
                    23:17:5d:17:b5:a8:52:1d:05:c7:d6:ec:d2:30:48:
                    d2:94:d5:49:28:78:bc:21:35:67:eb:04:4e:18:7c:
                    69:17:5d:af:0b:d6:94:34:15:64:66:fa:c1:68:65:
                    af:81:87:0b:d8:df:8f:23:43:0c:ae:16:a6:d7:e0:
                    65:42:1d:58:08:00:c5:9f:bd:57:7f:e6:5d:85:2c:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B4:2F:8E:BC:78:9A:F1:6F:47:C3:7D:BF:13:F5:19:12:90:2E:AE
            X509v3 Authority Key Identifier:
                keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:40:8a:5b:fc:4b:2b:34:df:d5:44:39:15:13:05:7d:27:60:
         9e:f9:ce:fb:15:88:a4:1b:ce:f3:ba:1b:c1:cc:f7:79:69:66:
         e6:db:97:e1:66:95:73:65:70:08:90:48:84:26:a3:aa:d1:54:
         1f:a3:84:d8:20:9f:9f:a3:05:b0:a4:e4:16:1f:3b:17:f5:a7:
         08:1d:99:f1:00:56:35:e1:c2:30:ce:8b:bd:3d:c9:32:25:17:
         6c:7a:92:7c:da:84:45:1a:45:92:95:56:2c:8a:3f:e3:d9:4d:
         fe:9f:2c:37:50:6d:09:bc:4f:34:6c:20:de:01:90:7c:a8:16:
         9a:19:08:0a:d2:a8:14:7b:c0:c5:a7:dd:d5:58:b8:f5:e4:b0:
         00:47:8e:bb:6b:22:83:4e:2d:f4:24:21:93:87:ac:d3:32:8c:
         0e:aa:d2:f8:89:29:f9:1e:70:d6:79:ad:32:d7:5e:38:f9:15:
         5a:96:d2:37:d2:73:8a:99:41:d5:ee:a5:a9:fa:48:a9:6a:97:
         3e:58:72:15:0a:1b:cd:4c:d2:8e:dd:c5:4b:e1:76:f0:55:71:
         30:95:e5:3f:b6:2e:43:fa:bd:7e:75:a1:4f:2a:48:24:37:b0:
         22:29:fd:7d:fa:ba:72:47:64:6e:2d:6c:51:e9:ad:60:d4:49:
         8b:85:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----