Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File:                     MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier:          kVYyfDrUTqVprK7Ld4ZWhRBkmQBW+zhXhMn51hBTbMU=
Subject key identifier:   B2:A2:E9:41:AB:BB:F7:10:9E:B4:8F:23:9A:A6:33:80:FA:B5:CC:8E
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer:       /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial:       01962F74E6B5039A93767D8087AFA7E4634E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number:          A7
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: vMYAsbntn69l/pq7Rv5WAKxbQtgBexGVv36l33GNTQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e6:b5:03:9a:93:76:7d:80:87:af:a7:e4:63:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=b2a2e941abbbf7109eb48f239aa63380fab5cc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:e7:1f:02:08:21:2e:b0:bb:f4:4c:12:72:
                    93:eb:c5:f4:2d:36:94:62:75:ba:82:7c:b0:c8:77:
                    e3:e3:25:d2:3a:8a:f2:aa:2d:95:9a:65:93:51:e7:
                    91:d9:22:98:f6:de:05:c4:ac:c9:e1:34:80:03:c3:
                    ac:88:24:52:bf:0b:52:d0:a0:6c:9d:d4:23:f7:dd:
                    d1:39:6d:12:ee:6d:1e:84:fe:52:0c:eb:af:ba:6d:
                    81:d7:bd:12:c1:c6:9f:c1:c3:3c:16:54:e9:9d:39:
                    8b:bf:25:86:d1:81:f5:9d:4f:eb:27:a4:2e:11:31:
                    96:58:e9:50:aa:42:1f:07:63:36:81:87:69:0a:77:
                    4a:4f:ff:65:cc:06:3a:18:e5:13:76:16:69:ff:fc:
                    9a:3e:87:8b:11:d1:96:1d:df:0c:fe:e0:2f:16:d4:
                    19:85:3b:22:82:1c:d5:23:04:b6:a2:1e:28:07:e5:
                    7a:3d:53:6a:c5:e0:2a:1f:8b:70:4e:23:7b:7a:50:
                    90:61:44:67:9f:ec:dd:08:b3:a9:f8:44:49:94:fe:
                    6d:3f:4d:7e:fb:6e:eb:55:af:3c:5f:42:b9:d9:6d:
                    c0:66:82:ab:d3:e1:6d:75:b3:f3:4a:cf:50:ac:53:
                    3d:fe:41:b8:42:e3:a6:e9:1e:e8:03:05:f1:7b:fd:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A2:E9:41:AB:BB:F7:10:9E:B4:8F:23:9A:A6:33:80:FA:B5:CC:8E
            X509v3 Authority Key Identifier:
                keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bc:f9:5e:bb:48:31:aa:d2:07:e6:7f:90:81:0d:cc:28:6d:
         96:90:53:63:1a:df:11:53:04:5c:fc:dd:42:b5:88:63:00:cf:
         36:c4:24:bc:78:aa:93:b5:27:6f:4f:f0:2c:9d:41:0b:d6:2c:
         e6:9f:80:b9:23:bb:99:52:74:ab:b1:b6:d8:88:a3:e6:e6:ac:
         dd:99:80:05:11:04:79:6c:e0:6e:c0:9d:88:ae:dc:d8:f5:35:
         f0:85:3c:69:40:7c:af:63:ea:69:63:e3:eb:96:80:e1:33:e9:
         72:63:f0:76:cc:56:32:76:ce:32:40:20:d3:76:5e:84:c1:47:
         3e:c8:31:30:c6:b2:67:d9:cf:16:9f:1a:37:68:27:4f:c7:a6:
         4a:a0:10:d9:73:fe:cc:21:6c:d5:09:0a:d7:6d:90:cc:0b:94:
         1b:4e:cf:13:21:ff:9f:a6:c2:b9:05:45:96:ff:27:c0:77:f4:
         29:5c:81:71:c8:65:2a:42:d7:32:39:95:16:7d:7b:8c:e5:41:
         02:5a:26:6b:c6:a3:dd:6d:f7:7a:84:d1:10:68:95:e9:03:32:
         45:cc:46:48:d6:ea:0e:65:7b:38:77:5e:a2:d0:d5:23:c3:4c:
         03:bf:a2:a4:09:a7:a2:b2:9d:c8:b9:c5:b9:91:5f:2e:13:92:
         e2:3a:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----