Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File:                     MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier:          CgO79i7eB51Y21B1GuEmMUzL7Ejuwvta1z0SlyE3M+c=
Subject key identifier:   69:9C:9B:D1:7A:94:3F:D3:CF:34:CD:EE:69:DC:D0:42:77:AB:B7:8D
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer:       /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial:       01962E2B3997082A60193A0E6497F11C1CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
                          2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: 7is30/FEzPJ4A2C+zHsQb4mrKu+JTzerqWhpg1ous4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:97:08:2a:60:19:3a:0e:64:97:f1:1c:1c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=699c9bd17a943fd3cf34cdee69dcd04277abb78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:2d:1f:91:18:5b:c1:40:a2:82:37:1f:b6:
                    97:90:00:7e:45:c1:42:f4:f0:a7:3b:ee:3e:b4:54:
                    9c:b1:79:33:3b:32:33:7d:4c:13:27:73:c4:08:cc:
                    26:59:20:b8:23:8b:ad:79:02:79:6c:bc:6b:ab:63:
                    b3:fd:88:c2:32:03:86:f3:1c:4f:15:7b:74:87:48:
                    18:a1:26:c2:8d:ad:50:c7:61:4f:4e:85:4a:e6:79:
                    1e:26:5c:89:92:71:9c:94:dd:e4:08:c5:5a:83:a3:
                    d0:e3:a7:79:85:ac:fe:cd:22:c3:85:1d:6d:5d:e8:
                    f1:b0:c3:a0:3c:32:0e:c8:66:7b:eb:29:ec:fd:0d:
                    62:44:8b:17:f6:32:b6:9e:b0:e7:f8:f3:2a:05:53:
                    46:b6:7b:0e:3d:02:ed:ad:b2:67:3c:df:92:89:0f:
                    4b:c1:72:2c:a3:c5:40:b9:ff:71:01:b3:d5:01:7b:
                    c6:38:3f:19:e2:e1:87:90:7e:9b:c1:95:41:3e:df:
                    1d:55:b7:2e:c8:36:98:f0:5e:7a:6c:c9:2b:7d:08:
                    64:b0:96:cf:62:d3:91:3a:4f:01:4a:fe:36:b7:2d:
                    52:71:c7:35:51:1b:1e:e0:de:07:2d:e3:7b:34:a6:
                    25:bc:46:7c:b0:b8:bf:f2:45:10:57:54:cd:8c:04:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9C:9B:D1:7A:94:3F:D3:CF:34:CD:EE:69:DC:D0:42:77:AB:B7:8D
            X509v3 Authority Key Identifier:
                keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:61:10:a5:80:ad:c9:19:b7:09:d4:75:62:b0:a5:2a:be:
         9c:cf:61:51:ea:28:58:6f:c0:35:3e:8d:77:c7:79:e3:f5:b4:
         ce:b3:cc:54:da:15:f1:09:a7:26:6a:54:ca:79:88:06:ff:5d:
         1f:dc:9c:52:ed:c3:a3:c3:91:99:90:95:6a:32:95:53:22:13:
         3f:8e:f4:82:c8:64:5d:9e:1f:45:97:ec:60:3d:0f:24:71:21:
         4c:de:f5:7d:f2:84:d0:2e:8d:71:79:f1:ad:92:55:c3:b7:89:
         ea:af:b0:f2:e6:cd:17:a8:86:2c:bb:db:69:10:bf:4e:94:e3:
         a3:ce:cb:b4:07:df:9d:50:5d:c2:a2:74:91:18:a6:d7:69:88:
         e5:78:ac:28:fa:75:08:58:c6:0a:85:f3:f7:23:69:ea:7e:25:
         81:9e:6a:e7:96:27:be:b7:ae:cd:c9:99:90:bc:b3:64:37:fe:
         f3:02:08:c4:7d:21:4b:3d:cf:9a:25:28:a5:6a:b1:f4:fd:a2:
         2d:2c:0b:7d:29:c3:c2:9c:a4:51:5d:01:60:e8:75:af:e1:0d:
         06:63:f7:b6:97:92:1a:5d:e6:2d:bf:cb:04:3d:fb:78:ea:7f:
         2e:47:ea:c7:27:6a:d4:11:1f:5a:c5:b0:22:72:1b:0a:c1:5f:
         64:21:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----