Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File:                     MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier:          pRjroUOUR+Tw5apbpzpFzH4vAMmtebImPCUn0b7/aMQ=
Subject key identifier:   0A:A9:D4:78:47:6A:DE:95:51:B0:B6:6D:62:85:00:47:6E:F3:78:95
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer:       /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial:       01962DF403E56263C391141B9D316F167047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number:          0714
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: j/qA69Q4z9nEj9dqmWzDrT92eNguLUF2CSbqyYmjCgw=)
                          2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:03:e5:62:63:c3:91:14:1b:9d:31:6f:16:70:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=0aa9d478476ade9551b0b66d628500476ef37895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:1c:a9:8e:04:87:08:47:d7:d8:7e:aa:19:
                    03:91:de:80:9d:20:ed:ba:47:d0:88:04:2e:65:dd:
                    75:9b:5c:dd:bc:39:47:a2:e2:44:90:5d:04:82:b0:
                    57:5d:76:57:43:e0:0d:7c:bc:e6:c1:ce:f7:f0:07:
                    6c:b0:68:24:38:c2:38:07:1e:12:61:44:a1:74:10:
                    63:f0:b5:dc:68:67:06:39:bb:8e:5a:10:32:62:9c:
                    18:cc:1c:9c:ee:67:fd:2d:1c:5c:0f:87:e1:ed:fb:
                    e1:9d:f7:e3:4e:85:6c:d2:ae:fa:2f:da:15:b9:27:
                    51:fa:2e:83:02:4a:b1:fa:20:7e:1c:4a:5f:cb:46:
                    4a:30:b4:93:19:78:53:e6:8a:f1:79:8c:a0:cb:7f:
                    87:0c:b2:6a:4e:df:5e:c0:3e:21:84:61:66:2d:1a:
                    da:2d:40:fe:2f:82:d3:83:e0:78:9b:8e:d5:51:b8:
                    f1:01:65:77:53:a6:8c:99:67:75:fe:24:85:69:58:
                    80:88:79:50:71:93:b6:ef:d6:e6:e1:64:42:69:e7:
                    9b:62:68:7d:97:b2:3a:87:34:74:83:a0:30:c1:08:
                    8d:b3:85:c9:37:c2:12:9f:f4:51:54:ca:37:c8:32:
                    32:71:74:40:94:79:61:38:7c:9b:5f:10:d4:a9:a9:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A9:D4:78:47:6A:DE:95:51:B0:B6:6D:62:85:00:47:6E:F3:78:95
            X509v3 Authority Key Identifier:
                keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:07:55:ff:74:a8:f2:9b:e1:b0:4f:f0:78:de:01:3c:78:5f:
         94:ea:c7:41:85:4f:8c:5e:ef:57:25:07:0f:6d:ab:d8:fd:5f:
         c9:fa:36:c0:e4:f9:78:44:b0:ca:d7:f5:ae:12:9b:57:70:fe:
         3a:ff:79:ef:dd:15:1d:06:67:ba:19:9c:96:ba:fe:fb:a2:fc:
         fd:59:65:b2:8c:22:f1:e3:bf:f6:e5:d1:e7:c1:91:9f:ff:c6:
         3c:f2:a2:1d:9c:f5:8e:7a:6d:e3:ba:0e:19:4d:c3:ec:17:45:
         6c:8a:0d:9d:0f:3c:60:53:1d:d1:65:ad:55:6e:47:60:b5:66:
         f6:b0:ec:5b:14:83:9d:d0:87:67:ff:fa:4e:7a:a6:b0:0c:27:
         d5:9d:1a:cc:4f:27:39:7a:84:52:4f:5e:15:3c:73:1d:05:76:
         0b:35:b5:5d:c3:1b:38:6d:dd:e9:dd:c6:d2:3c:c8:e3:9e:80:
         9b:48:3e:58:f0:eb:4f:6f:9b:93:7d:36:2d:3a:d3:95:9f:1c:
         11:da:18:d1:1b:7b:2d:02:e5:25:86:64:5b:ef:2e:ff:72:e4:
         b1:f3:fe:f8:28:67:85:94:5b:8f:13:89:c5:63:37:8f:ba:db:
         8b:26:84:12:f5:52:61:ef:0b:c7:cc:87:ca:2b:33:90:a2:fe:
         e8:36:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----