Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File:                     MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier:          G3hMoMwi3GySVUbMHWq1cO8Pf6RWvUOHN3OcbV4qrtk=
Subject key identifier:   88:40:BF:C5:1E:67:FC:07:C3:36:6A:20:45:A7:DC:EF:81:DB:88:AC
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer:       /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial:       01962E98EAE5EA7CFDAF8CE29D0F47BC541D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number:          0EC4
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=)
                          2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: xngmRyNhQB4rxuC/dG7gidtaCO7vstK8nYB3t9xla4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ea:e5:ea:7c:fd:af:8c:e2:9d:0f:47:bc:54:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=8840bfc51e67fc07c3366a2045a7dcef81db88ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:31:74:da:c9:8a:34:a2:27:d2:06:9e:cf:
                    3b:5d:85:1a:db:7e:f0:47:bb:d5:6f:71:49:c0:ae:
                    40:f1:79:54:ab:db:52:d7:2e:c0:f3:33:d2:82:a6:
                    7a:cd:b6:43:7a:d9:a8:2a:fa:45:75:33:49:31:49:
                    b6:38:d4:98:c8:ed:1a:94:54:97:6d:99:31:1d:25:
                    3d:78:50:b5:11:39:4d:ab:ed:8d:e2:12:4a:08:fe:
                    74:d3:7b:83:b0:a4:fa:4e:fb:d5:61:27:d8:f2:12:
                    27:6f:87:ae:2d:29:97:e2:a0:18:9a:1d:ab:7c:50:
                    bd:49:5b:22:cd:41:21:15:3a:c1:8f:c1:9c:e0:2e:
                    78:6e:2c:a8:3e:58:8d:1d:6b:b2:23:86:f6:55:c6:
                    ea:c4:6d:ca:5f:7a:ca:50:07:38:2f:2f:ee:a9:45:
                    d4:94:33:54:b2:90:8b:e5:c0:15:96:99:99:89:a8:
                    ba:3a:91:4c:bf:dc:21:d4:b2:be:e6:70:f5:81:ae:
                    c9:38:c9:aa:dd:46:d2:2f:47:d8:22:f2:73:40:08:
                    4b:4e:9b:fc:2b:f9:0d:57:ba:08:b0:05:18:34:26:
                    12:9f:df:be:ec:13:ec:12:4e:c9:16:8b:a4:6f:e8:
                    c3:a1:1f:7b:15:eb:27:84:79:2f:12:f6:8c:3f:23:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:40:BF:C5:1E:67:FC:07:C3:36:6A:20:45:A7:DC:EF:81:DB:88:AC
            X509v3 Authority Key Identifier:
                keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:36:bf:d7:32:df:73:c5:07:ad:72:de:30:23:ad:98:89:71:
         12:2d:ff:49:0c:5d:ba:48:39:f5:7d:71:f7:96:a7:cc:e0:92:
         98:26:08:42:6f:64:31:64:92:c9:01:c0:e4:1f:84:86:23:74:
         82:22:a7:d4:6f:5c:bb:c4:f7:f5:2a:d3:31:87:ed:c1:0f:7b:
         0f:07:d8:8b:cd:07:e0:31:be:24:7c:e4:bc:91:77:f1:10:1b:
         61:e0:90:5e:b9:6e:12:a5:18:7e:3f:b6:0f:d4:cc:98:32:7b:
         09:e4:68:b5:9c:06:05:25:50:85:e8:d5:52:ee:4b:ba:85:21:
         80:a5:fa:54:d5:b0:b3:9f:3e:2e:a2:8d:a7:cf:81:d8:e7:73:
         76:b3:e3:3d:ac:dd:7c:46:e2:2f:ab:07:9d:ea:2c:ef:64:73:
         41:08:65:9f:ac:1a:01:a9:d5:bb:b5:c2:34:6e:f8:2f:46:bd:
         38:53:84:66:2a:3f:2b:26:f9:a9:52:61:e3:3f:f3:b0:1c:ef:
         fb:ee:a8:30:76:52:4c:c7:6d:66:27:0d:58:d1:9f:1f:1a:26:
         13:f9:82:5e:9b:6a:99:ae:6d:7e:ac:a8:b6:4c:1a:ef:13:9a:
         3f:94:86:6b:51:13:15:8f:7f:8a:db:3d:5c:a6:85:f0:3b:ba:
         34:52:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----