Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
File:                     MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json)
Hash identifier:          BF78rtCUhIEajOW9PWs29GqDoC6+0vC5U6S5eANZ2I0=
Subject key identifier:   64:D0:C9:B2:84:E2:1F:3F:E2:FA:72:64:E1:DC:57:87:AA:EF:7C:14
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Certificate issuer:       /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial:       01962E2B00CFA9AC41E8CFC2824B360050A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=)
                          2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: lcTCfOi71rc3/fkAtJD0f28X0033ns9KTNshK57jFZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:cf:a9:ac:41:e8:cf:c2:82:4b:36:00:50:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=64d0c9b284e21f3fe2fa7264e1dc5787aaef7c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:2f:a7:31:3f:d5:bf:e2:8b:64:1a:5c:ff:
                    b0:41:ba:19:3e:5f:e4:8d:71:e7:05:58:b3:1d:fa:
                    4e:63:7d:81:7a:33:2f:0d:cd:0f:af:87:b6:29:79:
                    9a:66:35:28:5e:c5:bf:47:61:68:8a:ba:44:cc:3c:
                    3e:e2:12:3b:3e:b6:d1:08:c7:ab:b2:e6:e0:50:4d:
                    d3:b6:62:c6:31:15:59:fb:eb:a0:68:2f:5d:32:9f:
                    3b:7a:44:87:cd:cc:67:23:ce:8b:e5:b6:7a:84:36:
                    44:ba:2e:1c:ed:60:23:21:a3:1c:93:5b:68:3f:90:
                    c0:cd:dd:00:fd:58:40:b2:92:29:46:64:4c:cd:b3:
                    cc:34:3a:d0:d9:75:60:79:5b:3b:d7:ed:94:3f:5e:
                    e0:40:97:43:26:77:61:07:73:fc:eb:2c:49:9e:16:
                    5f:70:88:09:dc:06:f1:1d:d1:4c:f3:8f:ff:ee:18:
                    64:2d:55:9c:78:dc:a5:36:b2:7c:79:32:06:11:86:
                    6a:57:bf:79:32:bb:e2:f2:dd:fe:52:3a:fa:56:0b:
                    7f:2b:ad:2c:3f:25:b5:e0:b1:1e:67:82:d3:c0:45:
                    0c:a9:6c:f5:70:77:76:91:f9:60:d0:b1:fb:7d:49:
                    be:14:ca:1c:a1:59:4d:b5:90:0c:d2:5a:b4:0e:ac:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:C9:B2:84:E2:1F:3F:E2:FA:72:64:E1:DC:57:87:AA:EF:7C:14
            X509v3 Authority Key Identifier:
                keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3e:77:28:48:c5:24:5e:6b:80:6b:35:8f:b3:ac:f0:f5:e7:
         17:f5:f0:2b:92:65:6f:c3:d1:c1:a4:25:84:3b:69:26:2b:e3:
         ac:47:e1:ef:57:3e:08:fc:38:2c:f9:2d:f6:dc:d3:f3:62:49:
         54:52:e1:7d:60:ab:10:95:54:be:38:68:7c:01:7c:cf:15:51:
         b0:b2:b4:f5:0b:26:f2:a0:3e:ea:ec:b9:e6:c7:99:81:b2:a9:
         3d:a8:72:3b:6c:86:e8:84:af:07:a2:7e:b4:4e:1b:f5:d7:41:
         0e:c6:4c:10:3b:5b:86:29:83:a0:89:3c:6c:57:92:91:a4:72:
         83:e2:75:50:26:4f:8b:22:cb:b2:10:c0:c1:fc:9a:35:5d:14:
         83:5a:66:da:7f:8c:18:f2:f3:49:64:80:08:96:c5:85:97:29:
         6e:f8:73:ca:0e:95:5c:4e:ee:85:6e:a7:b4:4c:a3:cb:bf:3c:
         35:00:48:8b:a6:63:89:1a:a8:fc:b8:05:49:06:1e:9a:84:60:
         a1:c0:d3:a9:38:4c:8c:86:be:86:29:1b:34:df:ce:44:60:3b:
         b0:69:cd:44:e3:2c:56:37:c9:ee:b0:62:a3:63:e3:12:a9:06:
         d9:7f:1b:c7:d4:42:23:25:30:fc:dd:7c:63:1f:63:a7:9e:de:
         bd:5f:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----