Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File:                     MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier:          9k2nKmuMIZznnOqlHo6/h39ZOXQsFjqD52TWbJ/KM3I=
Subject key identifier:   2A:52:2D:1F:49:97:78:6F:30:8F:50:3B:58:01:FD:BC:13:68:66:F7
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer:       /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial:       01962DF410275F39924CD627E7F639C1AF42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number:          0CAE
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: HqEtipzQowxTqcDrA6YD2PAM22k.roa (hash: +TySDtYTZSAF4An5pdiKoQwn0LwGdYxQZAyZ18GrAFU=)
                          2: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: PMXYZXOUOcCNHPbLX+xnJjPKvGhXtpRIOsrEZuOonac=)
                          3: N-IkqmIl8KlWw01vFtAZ-uos0pY.roa (hash: YeMMYzZTCS8ByuvcJi0c6d7AtfKEEZ2nt+xBnMZjmqQ=)
                          4: SXPqMjJIqIiiKMiICnz-R2huK7A.roa (hash: VBPweWvhbagfxdIj/U/h3DiF8G4gGJiOVx2OPYGVAl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:27:5f:39:92:4c:d6:27:e7:f6:39:c1:af:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=2a522d1f4997786f308f503b5801fdbc136866f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:8f:7f:28:e9:ed:c8:88:b4:84:50:7b:7d:
                    81:50:b2:2e:5a:d6:0c:9c:7f:fe:43:9d:80:79:3d:
                    7a:90:54:49:53:40:c1:dc:b7:03:01:d5:d8:e7:8c:
                    ee:cd:45:bc:10:34:60:fc:92:c3:7a:86:9c:96:0c:
                    e3:46:b3:6e:19:5a:8c:02:0a:d6:16:61:70:7c:12:
                    c8:6e:22:b1:b4:95:33:78:95:7a:3b:11:16:bd:b5:
                    fa:60:08:2b:79:a6:58:4d:34:f7:0c:e4:02:6f:fc:
                    05:d8:5b:fe:55:1a:43:77:22:02:31:34:b2:89:96:
                    20:b4:0a:21:96:d7:a2:50:76:27:da:bf:35:e1:f2:
                    a4:dc:7f:71:0c:6a:9b:2e:be:d5:9b:67:c2:69:1b:
                    85:79:6d:bd:d3:7f:e9:6a:c9:a7:09:59:f9:63:61:
                    ac:93:3b:47:84:36:4b:21:e1:d5:09:19:68:e8:ec:
                    36:ff:41:d4:50:99:d4:68:80:9f:71:c8:96:e5:f8:
                    e2:98:98:ae:c8:97:5b:48:d8:a3:39:c2:80:e1:fd:
                    f9:74:60:c1:e5:f2:4e:b7:f2:a5:46:b2:c0:4c:38:
                    39:5e:8a:26:0d:8b:31:b8:4c:2d:d3:06:04:2f:65:
                    cc:e5:9f:a0:a3:49:5c:74:10:8b:34:38:85:43:70:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:52:2D:1F:49:97:78:6F:30:8F:50:3B:58:01:FD:BC:13:68:66:F7
            X509v3 Authority Key Identifier:
                keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f2:80:fb:71:42:8a:2f:5d:1b:8d:08:27:27:d6:2a:af:95:
         32:86:0e:7f:95:09:01:4b:31:c0:f8:62:2c:cd:06:18:d1:12:
         f6:e1:b3:4c:35:44:9d:03:3e:f1:6f:a4:10:20:3d:7e:c6:2e:
         58:72:fe:9b:36:1e:9e:91:3c:5c:06:32:bd:65:2c:e0:da:30:
         fb:f5:41:70:b2:1a:3f:a2:72:fe:14:84:f5:04:10:e5:a5:e3:
         65:d1:07:b2:a5:6a:ca:55:b3:46:48:a4:54:ae:42:47:8b:f8:
         8a:96:10:ab:c4:a9:1c:a6:78:6e:13:f3:1d:d8:11:b4:b2:23:
         4b:74:43:46:88:62:72:ae:5c:d3:7f:05:f4:90:16:5a:9b:66:
         2c:42:9b:87:68:e9:99:5e:64:15:26:48:17:fb:68:a3:e4:4e:
         b6:c4:71:11:f6:e0:ed:6c:cb:72:4b:c7:e2:6a:8f:2c:d7:ee:
         0a:c6:3a:66:f4:49:95:fd:4e:43:ae:09:b4:af:1b:d4:48:07:
         af:38:5b:69:a9:19:fb:2a:c1:70:b3:4d:e9:3d:98:80:2d:1e:
         26:a7:0a:9c:60:5d:40:6d:b5:91:f4:bb:9d:4c:2d:1d:37:26:
         dd:e4:81:d7:a1:c8:15:74:10:1d:fe:5d:98:d1:a7:cd:6e:c5:
         97:40:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----