Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File:                     1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier:          snlywOgVADwY/n+P477U7IPZ5kG6eDxBQHMQLrmZvxk=
Subject key identifier:   CC:E1:1A:59:7C:78:05:9E:75:FB:65:CC:4A:D9:9B:61:C7:07:2D:6F
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer:       /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial:       01962E2B1E998ED490B1372F072D47A8B9FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number:          0A31
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: qv6Cj9pasjsZEc3h7MnksKgbOZHkWHT30PzD1yoaaEo=)
                          2: It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa (hash: 7H+X0erT0owXhcTltBjLEsiIIl6BxhT41pVVMePz04w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1e:99:8e:d4:90:b1:37:2f:07:2d:47:a8:b9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=cce11a597c78059e75fb65cc4ad99b61c7072d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:ce:fc:b8:dd:86:49:3d:c4:c0:aa:44:56:
                    98:96:23:68:7e:3a:21:b0:10:4e:60:96:6e:3b:bd:
                    ed:ea:5f:53:8b:e3:81:1a:88:e3:ca:e2:20:57:03:
                    ee:2d:28:c1:bd:e8:05:af:4e:c9:d9:75:07:e1:8d:
                    c2:9f:76:cf:29:48:59:5d:d5:99:61:9e:5d:d4:0c:
                    e4:3c:21:cc:ec:da:42:f6:ac:b8:7a:8c:53:7a:14:
                    e4:fa:22:49:16:4e:be:32:d8:5a:99:63:2a:47:eb:
                    55:8b:ba:24:7b:a6:84:f9:f8:ab:f7:da:78:4f:8d:
                    b6:c7:81:c3:73:26:93:3e:ec:6b:86:d8:23:1f:82:
                    e8:60:a1:96:32:96:b2:26:1f:47:c7:1f:08:60:66:
                    08:78:d8:8f:9c:3e:db:13:c6:ce:36:68:cb:78:3f:
                    41:e0:1e:f1:39:88:40:01:94:92:fb:71:e8:43:7b:
                    3d:c4:6b:bb:1b:d0:a3:41:d3:6e:68:e8:48:ba:b1:
                    08:d9:1c:b1:1b:14:b2:9f:0a:fc:fa:51:dd:2e:91:
                    14:b1:7e:4b:bc:94:2d:8f:f1:01:d7:b9:83:16:c9:
                    9c:4f:b9:47:04:61:e5:3c:99:9e:ce:90:1f:13:aa:
                    cb:c4:ed:2f:b2:6b:d0:92:23:be:4c:d3:23:30:62:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:1A:59:7C:78:05:9E:75:FB:65:CC:4A:D9:9B:61:C7:07:2D:6F
            X509v3 Authority Key Identifier:
                keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:70:7a:36:0d:3c:dc:fe:b1:6d:bf:89:49:aa:66:18:3f:c7:
         98:9f:a6:09:a2:88:e8:68:89:35:0f:92:9f:2f:46:07:f7:84:
         ef:66:69:37:77:a9:75:ff:f7:c6:fb:d7:de:89:a1:de:9b:4c:
         7c:6a:f2:9e:b2:90:13:75:4d:a9:43:7b:77:92:fd:f4:5f:7f:
         70:5b:dd:83:0c:cb:18:a5:24:15:c8:69:e4:cd:32:fb:92:af:
         ac:08:6e:04:61:a5:26:d3:63:59:69:25:fe:a0:63:29:75:92:
         cc:44:ed:61:bf:bb:f7:09:3f:e5:6d:65:15:8c:c0:5e:b3:d9:
         10:2e:21:5b:15:47:29:38:64:b8:89:4d:14:2c:e1:54:fe:79:
         43:9d:81:6f:43:6f:81:85:83:c5:a8:bb:31:c4:6d:88:b3:7b:
         e3:d7:af:63:29:89:54:dc:2b:bb:d1:44:22:fa:c6:70:c9:41:
         80:1a:a2:3e:79:61:7e:e3:e8:17:5e:bc:e2:0a:cb:10:13:8c:
         71:80:5a:6a:b1:b1:2d:c5:08:bb:d2:a3:3d:00:c9:fe:af:cd:
         92:01:1c:3f:6a:ca:f4:83:6d:91:64:29:21:18:b4:65:9d:55:
         af:f5:92:a4:9b:5b:49:0e:18:7b:79:2c:20:1d:13:28:92:56:
         d7:7f:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----