Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File:                     MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier:          WDhOK7+DS/R1+xhSuXaWlON8vRTSDznZ+xz64OTsqoc=
Subject key identifier:   75:31:AA:33:17:DB:63:61:E9:BD:5B:91:09:40:9A:A6:F1:B3:CC:2B
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer:       /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial:       01962E996B9919FE94D1E5EDA7267E5F7BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number:          080E
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: RTiyt49l8yo6dCcuLpXz/nMwNtqCR/YiZsQkqZ0ZlwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:99:19:fe:94:d1:e5:ed:a7:26:7e:5f:7b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=7531aa3317db6361e9bd5b9109409aa6f1b3cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:60:14:7b:1e:71:99:1f:47:08:fd:6e:c0:
                    47:1e:01:9e:32:cb:ad:6b:32:ea:4b:e4:05:1d:27:
                    f9:84:94:a2:c9:68:04:a7:a3:9b:57:15:6b:df:3d:
                    c0:6c:79:d6:6d:1e:59:1c:a5:98:4c:eb:1c:1a:14:
                    90:a2:66:06:ce:34:2f:5c:58:3f:72:7f:51:3c:69:
                    af:4d:30:c1:a2:21:6c:c8:3e:e0:93:35:4e:b6:e4:
                    98:6f:93:2a:2a:e4:b6:45:ab:ed:fa:49:13:b9:6b:
                    e0:b3:d1:4e:cc:66:3b:0d:5a:14:58:d1:34:91:f3:
                    f2:2f:5d:b6:3c:fb:0a:b9:d2:d7:98:f7:e0:7a:68:
                    48:5a:d8:c5:44:d0:34:89:fe:d2:dd:1a:1f:d0:b1:
                    c1:fb:5e:3c:fb:5c:2c:50:9c:11:cb:ce:4c:b6:c7:
                    92:7e:ff:7c:86:f9:53:91:b2:3a:1c:59:1d:14:d3:
                    d4:03:16:86:68:e1:bc:d8:f3:86:74:16:df:da:78:
                    d1:1a:5a:d0:14:66:c5:0f:0c:05:2b:6b:91:09:82:
                    e8:9c:59:aa:77:df:9e:5e:e2:ce:d8:63:41:d9:1d:
                    33:af:bd:55:87:ef:b3:d2:13:00:f3:ce:21:de:cc:
                    1c:ad:58:26:bd:fe:4a:8c:b3:b0:c4:e3:3c:ad:22:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:31:AA:33:17:DB:63:61:E9:BD:5B:91:09:40:9A:A6:F1:B3:CC:2B
            X509v3 Authority Key Identifier:
                keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:27:9f:98:a7:6c:1d:b4:68:9b:ad:af:81:cd:48:57:4e:95:
         32:2c:ce:78:d0:c2:19:16:9b:63:5f:74:64:68:9f:f1:4b:f6:
         7f:51:5b:9a:1c:8b:93:a4:2b:4b:17:0e:2e:ce:87:cc:0b:04:
         7a:1a:32:bd:25:8c:49:cb:48:24:79:fe:c2:ee:b3:68:48:5d:
         0e:3b:82:1d:60:e9:20:09:aa:89:19:dd:31:bb:0d:9f:1f:d8:
         d3:72:87:5c:01:d9:10:f7:bc:81:8b:8d:b4:d5:f5:71:1b:9c:
         67:ea:2c:f6:c5:ae:3e:3f:b1:e4:21:dc:17:a4:e6:60:e6:a5:
         59:24:42:1e:67:4f:87:fa:67:40:77:c8:c4:8b:55:d8:04:88:
         17:cd:c0:70:94:b8:26:88:b5:53:4d:c6:6e:ad:a5:36:e3:33:
         f0:65:95:22:d8:c4:a7:b4:33:b5:08:19:85:20:25:14:e5:b7:
         6e:ab:44:aa:44:c2:51:5d:3c:25:a9:72:cf:4c:0f:36:e2:02:
         8c:27:a9:00:1f:6e:88:bb:3f:6d:e8:12:ae:1c:86:30:02:06:
         fb:7e:c1:d0:99:57:e9:f6:0d:4f:bf:a3:ad:e5:bd:62:e4:a5:
         19:66:69:b2:fc:b5:f8:f9:86:a5:29:be:93:50:ce:ee:58:35:
         86:de:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----