Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File:                     MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier:          p/VWz/ZX4lPfri1VqzYRqJVasUajFzVWYuS2eu3bM90=
Subject key identifier:   F3:42:3D:33:F6:C1:7D:0C:05:E2:EB:4C:AD:36:66:8C:D9:ED:A2:B4
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer:       /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial:       01962DF4015A8609B4474F879EE0727ACD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: e7og/reXC725ao8eIsto0V6HfEQKjOZsP2SEh/KfhgI=)
                          2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:01:5a:86:09:b4:47:4f:87:9e:e0:72:7a:cd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=f3423d33f6c17d0c05e2eb4cad36668cd9eda2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:02:50:f4:b2:45:15:65:e0:8b:c6:48:bd:
                    3c:41:d1:15:ec:b7:38:7c:2d:62:94:1e:6b:b9:31:
                    1a:39:d8:88:de:a9:05:c7:da:c6:de:44:e8:54:9a:
                    d7:5c:61:7b:24:18:bd:a1:d5:d2:a9:af:8f:1a:d7:
                    bc:b1:10:63:14:4f:58:6b:51:29:21:9f:f1:e8:f1:
                    7d:90:6b:1d:f9:e3:6b:2f:45:ef:ef:59:35:46:b1:
                    10:a7:e6:78:ab:e9:6e:f8:70:1e:5e:b9:44:eb:56:
                    38:4d:94:fc:09:8d:b1:44:19:1c:a5:54:e7:49:6e:
                    49:b7:56:5a:0d:e1:7c:73:89:bf:39:c8:d1:ca:a6:
                    ea:f3:b5:88:32:c0:30:c0:67:93:02:71:31:0f:5f:
                    d9:5d:87:c7:71:24:eb:f7:0a:72:41:2f:89:c8:9a:
                    ef:06:f2:0b:7e:9f:58:e5:e0:ae:8a:e1:13:46:f2:
                    3d:87:b1:11:34:1a:80:a8:da:81:26:af:30:2b:4a:
                    3a:c7:19:ce:b5:92:17:0e:c2:76:e1:c3:e1:ab:b8:
                    2b:4c:b7:60:a1:c3:fa:37:9d:46:27:92:43:ee:f0:
                    f1:f9:80:c9:d9:ed:94:0c:c4:e1:1e:55:25:5f:6f:
                    81:e6:7d:fa:ea:2c:69:70:a7:b1:9b:ea:c6:71:cb:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:42:3D:33:F6:C1:7D:0C:05:E2:EB:4C:AD:36:66:8C:D9:ED:A2:B4
            X509v3 Authority Key Identifier:
                keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:70:08:a8:59:91:20:6b:1f:5a:94:3c:af:47:3e:b7:4b:ce:
         16:10:9d:00:94:4a:bc:44:ff:2b:40:76:84:5b:fd:5c:06:3d:
         5f:68:6f:75:7f:c4:d8:65:db:f7:20:32:e0:89:bb:c1:a6:45:
         72:99:ba:4c:80:14:10:4d:36:74:13:3e:57:f2:85:43:b1:19:
         20:09:ae:ee:db:55:d0:2f:75:e4:a5:f4:ce:cb:8c:f1:d1:3e:
         c9:52:14:62:0e:98:63:39:f1:ce:2a:46:f7:0a:94:73:c7:6e:
         9e:b3:9b:05:6e:82:0b:54:37:cd:a5:8e:42:2a:81:a8:41:ee:
         69:c8:25:d0:f5:5f:20:2e:f6:65:ca:45:cf:6a:65:96:aa:c0:
         fa:54:7b:21:90:8d:a1:d4:db:6d:52:97:90:e4:83:1c:ef:58:
         1e:ed:56:24:aa:e2:34:12:3a:7d:59:ac:3d:09:ef:26:3b:d2:
         32:45:83:b5:55:91:34:3f:97:9b:5f:7e:e1:da:b2:43:51:f6:
         a1:8f:c4:16:26:5c:b2:be:6f:f8:58:3e:fe:9a:1b:af:68:b3:
         01:93:84:e9:83:97:56:aa:5b:b2:4a:ba:c1:e0:5e:18:8d:70:
         11:06:5e:a4:76:3e:65:39:c2:f3:25:6e:35:83:87:00:1f:99:
         0b:23:ac:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----