Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/MgREwMKZCxN0nzBEZiKX6oJNUGQ.mft
File:                     MgREwMKZCxN0nzBEZiKX6oJNUGQ.mft (raw, json)
Hash identifier:          CMq9B9bh4PAq9gb0MPBUfAjD68ax5BWwBFwlokp2D8g=
Subject key identifier:   B2:12:0A:5A:21:03:7F:49:B0:F2:BC:66:D0:42:CD:6A:D8:8C:DE:5D
Authority key identifier: 32:04:44:C0:C2:99:0B:13:74:9F:30:44:66:22:97:EA:82:4D:50:64
Certificate issuer:       /CN=320444c0c2990b13749f3044662297ea824d5064
Certificate serial:       0190BA58B4C1478B566C520737BEF982F4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgREwMKZCxN0nzBEZiKX6oJNUGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/MgREwMKZCxN0nzBEZiKX6oJNUGQ.mft
Manifest number:          0710
Signing time:             Tue 16 Jul 2024 07:01:33 +0000
Manifest this update:     Tue 16 Jul 2024 07:01:33 +0000
Manifest next update:     Wed 17 Jul 2024 07:01:33 +0000
Files and hashes:         1: MgREwMKZCxN0nzBEZiKX6oJNUGQ.crl (hash: MBIzjef0y57xDwNJ8UlISaKCxLX6c1MGPCrvsqdbeYo=)
                          2: mPgJTgoVl21WJBAVCL8pfeL_CJQ.roa (hash: J2j85/1krlbl5Sv293Sc7e4uqVo05Sx/gfgxGm5v+8Y=)
                          3: qOmLt1HGw8d7UdA3hbTJDSkFTBk.roa (hash: smNNCDZu0Ify7Nd/LLdkARqPgEy2ScrxfAEtR/JGOQM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ba:58:b4:c1:47:8b:56:6c:52:07:37:be:f9:82:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320444c0c2990b13749f3044662297ea824d5064
        Validity
            Not Before: Jul 16 07:01:33 2024 GMT
            Not After : Jul 17 07:01:33 2024 GMT
        Subject: CN=b2120a5a21037f49b0f2bc66d042cd6ad88cde5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:5b:a1:3b:8c:1b:7f:d0:63:f6:be:7a:a3:
                    9e:69:b2:5d:3e:06:8e:0f:f0:5c:ff:c7:50:9d:ea:
                    28:46:98:c5:11:3a:fa:8b:8e:a9:94:a5:fa:9b:49:
                    ab:75:38:b6:0e:82:c8:71:3f:83:50:1e:83:07:61:
                    f9:2f:46:f0:3a:5a:f6:06:dc:51:79:65:b1:87:c6:
                    a6:56:a5:93:c6:7a:7e:0b:8a:87:cb:86:5f:47:18:
                    2c:db:dd:f7:4c:8e:81:0a:c8:03:3d:40:a8:50:7a:
                    4c:82:6f:e0:48:b4:56:a7:f4:c2:80:c9:3f:d3:58:
                    c6:94:57:6e:a5:5a:fb:d7:d7:d8:93:28:22:36:04:
                    87:ce:39:cc:e2:e4:2a:79:b0:fc:99:0e:88:db:1f:
                    aa:27:4e:e2:d1:33:09:1e:92:c2:6c:52:dc:55:89:
                    4e:29:b3:db:b4:70:aa:11:59:57:ab:a8:e1:5d:51:
                    5a:f8:9a:c9:23:0e:f2:a3:63:7b:26:ce:b7:26:5b:
                    9a:c7:30:68:75:5d:ed:6b:68:dd:c1:9d:22:81:dc:
                    fc:56:56:a0:45:dd:b3:c6:37:19:0c:07:99:c9:02:
                    c3:3e:67:16:04:93:be:13:b9:a8:d6:72:06:24:c9:
                    95:a9:7b:fe:d9:4b:9a:36:73:88:52:2b:05:f2:89:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:12:0A:5A:21:03:7F:49:B0:F2:BC:66:D0:42:CD:6A:D8:8C:DE:5D
            X509v3 Authority Key Identifier:
                keyid:32:04:44:C0:C2:99:0B:13:74:9F:30:44:66:22:97:EA:82:4D:50:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgREwMKZCxN0nzBEZiKX6oJNUGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/MgREwMKZCxN0nzBEZiKX6oJNUGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/MgREwMKZCxN0nzBEZiKX6oJNUGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:bf:9e:5e:2e:91:7e:52:de:f1:d6:1e:41:47:41:81:e2:
         c0:27:17:ed:3b:0c:7c:bc:c0:d7:e7:22:dc:d8:0c:42:9d:66:
         f2:54:ed:c2:ca:70:ad:1c:04:77:38:74:e8:53:35:19:74:48:
         11:fb:8d:bf:a1:28:1e:50:47:5a:2f:33:b8:4d:83:bc:df:94:
         4e:69:2a:cd:96:8a:d0:9b:c9:56:e0:54:00:46:e4:11:c5:15:
         d9:1d:16:8c:57:16:2d:62:54:c5:fe:2a:4c:bb:77:fd:79:c1:
         60:42:f3:98:bc:a2:f4:ed:e3:c5:0f:a9:f3:03:e5:52:70:ee:
         0c:07:41:29:96:18:a8:30:56:d4:66:1e:3b:3c:84:56:0e:3a:
         88:71:f4:5d:ad:c3:c9:14:51:6d:3d:00:b1:a2:79:31:ae:5f:
         8c:42:8d:0f:30:aa:d3:eb:40:e4:f6:41:4b:81:f1:dd:55:b2:
         6b:1e:cb:de:71:c3:ef:e7:38:a3:84:fa:ae:67:32:ae:70:c3:
         c3:b5:b7:eb:4b:49:53:dd:82:33:77:37:e0:23:ea:a0:35:e1:
         7b:07:b6:f1:dd:f5:ca:b2:b7:97:2e:88:3e:05:d9:14:39:3a:
         49:fd:ad:5b:ca:80:a5:ad:5b:b3:82:85:0b:8c:5c:cb:19:2a:
         aa:1f:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----