Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File:                     MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier:          WX4tW4eVQX1FKjKLTI9aPPSgJ8af6etfSs1HYN9gcA8=
Subject key identifier:   F9:B2:4A:F1:FB:52:F0:F9:C4:A8:D9:BA:B3:40:F0:4E:0D:E0:61:D2
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer:       /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial:       01962E98CD7755682A9C2D124C30B8EE5C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number:          0AD3
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: +9PhyP2vOavLwL2CTijJ4F85ej+8CXIIr2i5G7BFRCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:77:55:68:2a:9c:2d:12:4c:30:b8:ee:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=f9b24af1fb52f0f9c4a8d9bab340f04e0de061d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:67:fc:a9:22:10:00:7d:86:bd:14:19:f6:
                    a3:3a:27:a4:3d:0f:df:3f:cd:2a:b2:b6:e6:e8:86:
                    9a:e0:df:f8:73:d2:be:9b:9c:ba:7c:15:12:55:cc:
                    78:d1:a8:33:26:02:ea:cf:88:4d:3d:23:39:62:f6:
                    ef:ff:18:22:45:ed:84:9f:1a:c6:15:82:78:6e:42:
                    ea:e2:ea:02:08:1e:c2:53:dc:9b:37:35:5c:95:bc:
                    87:9a:bc:33:0a:92:51:ee:41:db:51:15:b7:22:a5:
                    69:a7:b3:00:3b:33:20:28:e1:f9:dd:16:68:5b:25:
                    c0:7b:38:75:30:b4:cf:49:59:43:fd:86:a8:5c:0b:
                    d4:e3:58:d4:0e:e5:92:a5:6b:80:5d:ae:e5:4e:02:
                    49:cc:f8:26:24:85:41:40:e8:21:57:4b:44:85:5d:
                    d7:b2:bb:27:b2:a0:39:33:c8:a3:e2:29:e1:f1:86:
                    e8:2b:17:bb:8f:6d:66:16:4c:4e:31:67:0b:c3:69:
                    91:3b:d1:a3:10:59:cd:29:a5:c8:e8:09:d7:13:cb:
                    f2:15:32:5b:6d:65:8d:d7:a8:83:ec:aa:97:5a:7d:
                    cc:a4:bf:c1:bb:f4:40:63:71:28:a8:6d:11:00:a4:
                    37:d5:1b:6f:0a:5c:d8:cc:62:aa:b0:d6:aa:31:25:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:4A:F1:FB:52:F0:F9:C4:A8:D9:BA:B3:40:F0:4E:0D:E0:61:D2
            X509v3 Authority Key Identifier:
                keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:f7:5e:94:76:86:5d:38:37:03:88:e4:33:68:28:b2:4c:
         7e:fe:82:bc:91:b5:2c:8e:e0:cc:28:4f:0b:ff:c4:c7:43:61:
         2f:6b:1f:bd:60:b8:7c:61:d7:7d:27:b8:1f:03:18:b5:74:a9:
         94:85:58:3a:cd:00:91:7d:5f:a4:74:62:ec:56:1e:38:5c:85:
         60:99:f2:a3:fb:63:b4:ae:71:b4:a1:9f:91:da:d9:ec:88:43:
         8b:cb:e6:15:75:62:c9:06:d0:2b:1a:b2:90:1a:ca:94:0b:91:
         8c:2e:82:2b:07:99:50:19:af:b5:6d:96:a6:de:ae:76:3b:6b:
         6a:a1:48:bb:3a:59:6a:56:ae:c8:63:05:58:b2:e7:d8:b2:1e:
         12:a6:61:72:11:46:8c:5c:ce:cb:37:4f:48:bf:e5:6f:12:31:
         39:4b:3e:26:0d:f8:bc:c8:a8:81:af:18:a4:bd:87:24:f0:c0:
         74:64:6f:30:41:b4:bb:07:c0:d5:cd:a6:ba:cc:ab:2a:cc:d2:
         a5:03:c3:7a:eb:f5:19:8d:4a:51:f1:65:45:e9:e9:60:39:c2:
         89:cc:1a:aa:e3:17:ce:3e:3f:7c:de:60:f5:7b:6c:ea:b9:91:
         f3:18:dd:f2:8a:09:21:39:f8:86:22:20:7f:e5:b1:aa:59:3d:
         be:d6:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----