Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File:                     ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier:          x8j56vZvD0P+sxtDoQYLcShUeRwpPJqeWuqnn2mpg1M=
Subject key identifier:   61:63:EE:A3:FB:42:F4:21:83:83:88:8F:23:CC:4E:15:B2:AE:9B:A1
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer:       /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial:       01962FAB57868F6F3D81CA698998D4424832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: oB3vMIRV4vlr2We7rp2wX6r3oNBVneKxssQywqk3LhE=)
                          2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:57:86:8f:6f:3d:81:ca:69:89:98:d4:42:48:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=6163eea3fb42f4218383888f23cc4e15b2ae9ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:51:82:7b:b4:3e:73:71:f4:19:ed:ef:9c:
                    88:84:30:3e:20:1b:ba:63:0f:a0:a5:17:39:12:2b:
                    f9:33:40:bd:d7:45:f7:81:6a:27:0d:b2:82:a4:9c:
                    24:5f:05:e2:d0:bd:18:9c:18:ba:0d:da:df:d7:70:
                    82:ec:ed:b0:40:f4:60:a4:6b:1d:a4:ce:2e:af:7f:
                    e7:89:4f:7b:07:eb:47:32:db:a1:af:75:a6:42:5c:
                    1c:bc:9a:cc:4c:43:1d:38:00:20:e3:b8:c0:5e:2e:
                    42:d9:7c:ff:d3:72:d9:cd:4e:e3:02:fb:83:1d:ea:
                    1c:97:9d:ed:73:e7:7a:2d:fa:96:95:72:47:dd:ae:
                    ce:60:24:96:2b:db:f1:1c:26:c3:a1:01:10:0c:4f:
                    d8:8c:2e:db:51:f6:dd:ab:da:79:2e:4b:c3:07:52:
                    40:94:d5:b7:f8:61:06:38:7a:bf:2d:3e:a3:98:c0:
                    14:b0:e5:eb:db:7b:92:d4:02:0a:72:1a:44:c2:5a:
                    a4:9f:9e:01:d6:9d:56:8b:d5:be:54:1d:d9:86:2b:
                    3d:8d:51:76:1b:07:03:57:cb:57:7b:5d:52:a8:63:
                    38:2a:b7:b2:4c:02:a5:1f:98:ed:ee:29:95:66:41:
                    cb:75:46:40:e5:26:09:9e:3a:b0:eb:63:f4:1d:bb:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:EE:A3:FB:42:F4:21:83:83:88:8F:23:CC:4E:15:B2:AE:9B:A1
            X509v3 Authority Key Identifier:
                keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:10:61:ed:26:7e:a6:79:8e:9a:0b:f4:a2:d6:71:37:6c:69:
         1e:fd:b9:14:bc:f1:00:56:48:aa:e7:43:5d:d5:d1:3b:c4:68:
         63:3d:e9:a2:ac:91:32:83:bc:1c:ab:71:51:e0:b0:ec:c0:65:
         cd:b7:3a:02:78:7e:21:e7:dd:9e:a6:d0:a8:a7:d9:ba:0f:0f:
         8c:31:2d:3f:61:d5:3c:ae:49:6b:c6:90:da:13:db:ec:40:6a:
         7d:2a:df:04:63:f9:f6:fd:27:f1:c2:52:93:81:80:62:5b:a0:
         27:0d:e6:8e:74:64:23:e1:3f:75:68:d1:0a:93:b2:02:e3:6b:
         7c:36:4f:73:bc:ad:11:68:33:3d:6b:15:af:a6:db:46:20:b3:
         44:5a:82:4a:57:05:e0:16:b2:65:50:9d:1d:4a:ef:75:fe:b2:
         fc:a4:9f:db:c7:e0:2e:75:46:0d:87:47:02:d3:d8:3f:f6:13:
         a5:9d:59:af:cd:0a:39:66:03:78:5f:cd:9c:60:3c:4c:73:8d:
         45:37:d0:06:87:4e:ee:1c:4c:0d:02:de:2e:b6:dc:ac:d6:18:
         21:1c:ff:5d:3f:81:73:2a:b7:83:63:fa:31:b0:42:76:d3:1a:
         bf:c0:42:fd:e0:5d:20:eb:c4:40:9b:06:80:b9:56:4a:47:e7:
         af:2f:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----