Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File:                     MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier:          Zn/uyd+k3vDrs7karxKntjh6D9ZsjfT956J72fpRsW4=
Subject key identifier:   78:88:0E:FD:89:35:17:47:ED:C7:BF:37:D9:0E:23:2B:6C:7E:31:B0
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer:       /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial:       01962DF3E80DC61B54B47C595F93B8436EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=)
                          2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=)
                          3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=)
                          4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=)
                          5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=)
                          6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=)
                          7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=)
                          8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=)
                          9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=)
                          10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: VtZu5UjY5DrQ1DFUwERTCWwUujlwVU12TX4PK4Mt0gU=)
                          11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=)
                          12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=)
                          13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:0d:c6:1b:54:b4:7c:59:5f:93:b8:43:6e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=78880efd89351747edc7bf37d90e232b6c7e31b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:54:f7:c2:2e:f4:b7:31:c1:22:4a:06:4c:38:
                    33:b5:f2:b4:83:50:57:c5:0a:1b:6c:ea:3b:28:e6:
                    de:7e:eb:9a:9e:20:1d:71:c9:72:6f:72:dc:e0:19:
                    21:89:de:52:f3:d4:e6:d0:1e:5c:4e:29:61:7d:17:
                    8e:31:7c:1a:6b:5f:7e:35:c6:64:23:6a:d5:4b:34:
                    cd:fb:94:3f:0a:43:90:5d:68:6b:f7:d2:fb:66:aa:
                    e8:50:4d:ba:9d:72:df:b1:1f:27:13:11:38:7a:cd:
                    0f:65:83:5e:46:77:eb:33:07:11:f5:91:a5:d3:5f:
                    4a:08:91:52:64:bc:16:67:e1:39:a0:d7:31:51:d5:
                    d3:e5:54:b9:7e:26:be:32:06:da:d9:26:80:d6:cc:
                    87:74:15:7c:62:79:c7:c1:c7:b9:8c:8f:4c:31:82:
                    dd:5b:e2:0b:40:6e:7d:0c:f6:52:42:c7:52:77:37:
                    10:b0:6e:75:a4:2b:f7:6e:69:89:a2:72:a5:9c:fd:
                    e8:e6:98:c2:be:27:e1:81:29:50:e7:df:32:e4:4a:
                    bf:bb:85:fa:5f:98:28:e1:33:e3:4f:f3:3f:bf:99:
                    93:24:00:40:c6:4d:b8:b9:80:cf:10:c9:8d:a4:0c:
                    cf:07:18:8f:5a:8f:1b:8a:a5:d8:90:f1:00:a5:37:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:0E:FD:89:35:17:47:ED:C7:BF:37:D9:0E:23:2B:6C:7E:31:B0
            X509v3 Authority Key Identifier:
                keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:6b:c2:42:6f:a4:7f:49:80:1d:b8:1c:71:ef:a0:22:3f:
         fa:ee:e4:0a:f6:19:db:34:d7:20:cf:29:4c:35:f0:1c:9d:57:
         c6:74:be:6d:9e:b2:b1:17:16:c4:54:0c:3b:b1:c4:78:52:96:
         92:1c:5a:d3:9f:28:4f:a1:ee:6e:e8:5c:01:94:fe:4a:35:71:
         a8:2a:5d:be:69:19:39:28:e9:97:d2:7c:e0:fa:3f:de:30:85:
         38:86:e8:b5:43:22:0b:3f:d4:c2:e5:7c:d8:72:a2:2c:0d:dc:
         62:4e:67:5d:e2:4b:14:7c:cc:19:12:29:46:d2:1f:b9:d0:2e:
         29:d2:df:87:9d:03:b7:16:6e:5e:f3:72:ce:27:66:22:8d:69:
         b1:26:48:11:c7:2e:fa:f9:13:92:1e:02:31:b6:ab:87:7e:3c:
         4b:39:38:34:1b:34:04:27:0a:9a:c7:a8:d3:05:e4:71:15:fa:
         50:b8:a0:9e:a6:e4:1f:91:b1:99:82:26:97:53:18:34:25:74:
         f6:a1:dc:90:1a:f7:2f:85:ba:f4:ca:ca:16:af:6f:80:8f:1b:
         4c:b3:a6:f5:cf:04:d0:9c:84:1e:02:e7:ce:c9:7e:58:91:7f:
         73:e5:93:ff:93:72:cb:45:9d:08:d6:48:31:59:88:e1:78:74:
         b9:ae:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----