Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          E2B4QV/N6vnik0wohv9wBrH5N2zninKFKvzgbvWqQY0=
Subject key identifier:   6A:AC:26:CA:A0:F2:86:0A:AB:97:F1:5E:3C:F2:FA:07:EF:0B:4F:BC
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       01962DF3C2ADF4398307CD1F16C734A0B25A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          0D71
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: bDlp/QKHW950DHDdU9dQ2h2d7xZa6BCnred9WryqNko=)
                          3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=)
                          4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=)
                          5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=)
                          6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c2:ad:f4:39:83:07:cd:1f:16:c7:34:a0:b2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=6aac26caa0f2860aab97f15e3cf2fa07ef0b4fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:69:69:a9:55:03:d8:f5:24:a7:a9:f8:f0:
                    68:2d:e8:79:53:24:fd:92:b3:8a:44:0c:af:5c:40:
                    36:0c:89:79:fb:03:c3:c2:cc:9a:33:0b:7b:ac:3b:
                    ff:cf:e3:1c:bd:42:86:72:9a:2e:5f:9c:34:fd:6d:
                    c4:a7:31:c6:6f:3a:0a:4b:81:50:47:82:22:2e:d5:
                    17:d3:92:f5:ef:11:b0:cb:be:77:30:6b:d6:2d:f1:
                    fa:ca:f9:7b:bc:4b:8a:8a:25:3d:0b:5e:66:21:3b:
                    cf:d8:be:d9:de:4b:0d:88:42:4c:ba:2e:ad:07:86:
                    db:b4:95:8f:39:a1:a0:07:25:1d:3f:2b:09:cc:be:
                    6d:ac:8e:de:dc:fc:8a:3b:ea:b0:48:0d:39:07:8a:
                    e3:72:81:f1:ec:a3:b0:ad:4b:8c:91:f1:2a:35:61:
                    7e:44:a6:fb:2f:f7:8b:9e:de:c0:5c:fc:84:39:a1:
                    03:31:14:46:d8:73:89:b8:8f:e3:a5:5e:89:64:ca:
                    a3:03:a4:de:6d:02:11:fe:66:b7:eb:18:3b:ae:f4:
                    c6:f5:b7:2c:f4:29:5d:74:82:bc:09:d6:77:d6:29:
                    01:27:d8:81:6c:c7:e3:8d:4a:20:73:22:24:ee:f6:
                    c4:a0:40:60:bd:6c:eb:c8:33:42:a4:d1:08:a6:bb:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:26:CA:A0:F2:86:0A:AB:97:F1:5E:3C:F2:FA:07:EF:0B:4F:BC
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:83:e8:3c:8f:12:26:f4:8f:b6:44:be:90:d7:83:90:5f:30:
         4b:c3:8d:de:ef:f4:c5:cb:68:96:5a:eb:72:ac:84:3f:e9:67:
         e2:41:3f:d0:84:1e:5e:5c:52:ef:df:49:f7:90:62:77:ed:93:
         67:17:44:fa:d2:6b:dd:7b:6d:3d:eb:d1:6e:ef:eb:7b:96:b1:
         21:da:10:a4:a8:50:e4:c1:ad:7a:9c:ec:e0:63:b8:c8:35:4e:
         6b:62:7d:f6:9e:c0:9d:13:1e:bd:bd:27:c0:33:58:f8:12:a0:
         5c:cf:04:9d:43:f2:e7:e0:4d:9e:68:fe:df:86:04:18:27:9f:
         2b:a1:a0:f3:8d:a8:9d:99:3e:da:c8:3b:00:c3:49:75:b1:69:
         39:b3:39:c7:d9:f7:a1:11:6f:29:d8:15:4d:3e:a2:7e:9a:70:
         0b:4f:4a:03:13:b6:e1:44:06:f2:6a:97:e2:f4:36:9a:66:a7:
         25:6d:d0:e5:82:82:9f:0a:d3:9d:e7:54:bc:7a:81:2a:11:22:
         2a:be:c8:0a:eb:e3:a8:cd:81:9c:5e:3b:f8:0a:ed:3c:b6:c1:
         52:07:80:0c:ec:71:29:88:28:2b:04:70:86:b6:33:83:7e:ad:
         8a:2a:78:3b:64:29:65:07:fd:6a:95:7e:91:fc:21:ac:60:46:
         c8:7d:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----