Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File:                     oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier:          eFI3z2mCkMq/E50rWNNk45fmBKxi4uekH1HvIF+DxIg=
Subject key identifier:   AB:EE:61:5B:F3:7F:58:7D:20:29:9D:E2:2E:D5:35:5A:1F:A1:E6:46
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer:       /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial:       01962E987E141F3F496EB2D90411926B2CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number:          0488
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
                          2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: Er8HZY8ARIJgrL5LDksEQTzLf+5DhBh6UOI0ms7PnXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7e:14:1f:3f:49:6e:b2:d9:04:11:92:6b:2c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=abee615bf37f587d20299de22ed5355a1fa1e646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:af:06:a9:de:d2:d4:36:b6:88:62:08:b0:
                    3e:b9:fd:1b:0d:ec:e6:bc:53:d1:c1:4b:81:c2:e5:
                    e1:ca:7c:c6:8e:21:77:3d:97:04:75:fd:0c:f3:8d:
                    f2:cf:a9:98:83:35:79:3c:b1:e9:e1:6b:45:53:1a:
                    b8:30:25:7b:4c:38:0c:2c:19:16:0d:bc:e0:9e:ad:
                    ab:e9:24:11:48:31:ee:db:95:20:ec:74:83:d6:79:
                    9e:f6:02:4c:bb:3c:36:e5:af:82:18:1a:2c:68:f8:
                    02:7e:6e:69:b1:d2:33:56:45:45:b9:1b:1d:e8:af:
                    c0:c2:d1:4c:16:a8:6b:46:27:91:8d:a5:5a:09:24:
                    85:df:5e:bc:c9:b0:6a:45:6c:a9:c7:f4:17:8e:4a:
                    b5:56:18:7b:8e:38:42:12:9f:2d:85:4b:c1:48:d5:
                    94:d9:fb:df:5b:76:39:89:ad:33:ea:4c:68:ac:b3:
                    c0:e7:53:78:49:6e:82:8b:af:15:15:b8:53:5d:a9:
                    81:f0:88:0b:cc:48:f6:8a:0c:da:eb:a6:88:54:68:
                    04:ba:2a:af:d0:c9:bc:29:8f:90:e4:eb:1b:c1:b4:
                    2f:02:97:1b:e5:07:fa:94:40:85:e0:82:d7:f2:cf:
                    f1:f7:93:35:a8:fc:ae:be:8c:60:cb:a2:31:80:7e:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EE:61:5B:F3:7F:58:7D:20:29:9D:E2:2E:D5:35:5A:1F:A1:E6:46
            X509v3 Authority Key Identifier:
                keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d5:f6:4e:9f:6f:58:4c:e0:09:96:a2:0a:f3:06:79:0e:54:
         33:61:d2:e8:35:a9:4e:df:4f:04:f3:01:77:5e:7b:33:fc:45:
         7e:3b:47:49:d8:21:5c:cb:f0:bb:b9:59:5e:f1:0d:ac:57:07:
         22:59:e4:24:c5:1f:ee:fa:f1:5a:11:73:4d:5c:e6:d1:4b:98:
         12:c5:41:6b:f8:6f:3e:7a:a9:4e:25:f0:19:c8:f8:ab:c8:5c:
         06:6d:32:bb:7c:a4:ec:53:3b:b1:f7:db:b3:29:71:ad:68:ac:
         0b:ac:d7:ea:11:34:ba:16:4f:06:9b:73:65:c3:56:5b:6d:be:
         c6:bf:71:6d:d5:08:b5:59:42:c7:75:c8:c0:47:db:f3:6e:8d:
         44:60:e1:29:75:68:3a:fb:57:dd:84:c3:ba:04:6f:43:b4:6b:
         a6:8c:0d:8d:25:c6:0c:57:df:d2:24:a3:08:a2:eb:49:d3:14:
         16:55:a1:fa:e6:58:d2:7a:38:cc:b6:85:ab:8c:53:61:73:c1:
         07:bb:1d:08:31:11:c1:1a:0c:c3:5e:f4:66:40:90:bb:76:6a:
         aa:d7:94:cd:1e:59:4c:12:32:d6:1e:cb:45:1b:89:af:a9:73:
         b5:c7:cc:3b:4b:c8:73:f8:b6:26:59:8f:23:cb:d3:b1:c2:8d:
         56:02:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----