Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File:                     ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier:          558u+O4u2eu6anpfMd+p2rd1yWpVfRYceVPyFKYLdqw=
Subject key identifier:   3D:E6:B1:DB:2D:8A:3D:1A:F7:22:0B:3B:29:F1:7D:64:1C:A1:47:A5
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer:       /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial:       01962F3D9C1EB1FD0F29911E432B4799DD58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number:          09B5
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
                          2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: f8uQf6UJQr1KI3sJ3KB/eOw/eQ3bH2V+FqZKqiqX0MQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9c:1e:b1:fd:0f:29:91:1e:43:2b:47:99:dd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=3de6b1db2d8a3d1af7220b3b29f17d641ca147a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:86:12:3a:28:40:d1:af:a1:0f:6b:d3:39:
                    f2:9f:b6:95:1e:74:e8:58:5e:7a:70:15:28:00:cf:
                    55:6c:52:44:a6:53:a2:47:d7:bf:2d:3d:b6:ff:ca:
                    f9:7d:31:1f:cb:80:9c:64:74:a9:d8:03:2c:4b:17:
                    32:14:fd:6c:a6:72:4a:09:57:04:b5:2d:b1:a4:70:
                    09:79:5c:26:ff:4b:2f:46:ac:da:2d:6a:ab:72:de:
                    c6:64:54:63:84:ac:5d:40:f4:f3:c1:28:06:48:8d:
                    a6:75:8d:38:cd:8e:09:56:4e:46:f0:77:2b:ce:46:
                    3d:25:b6:64:04:a6:f8:4b:0b:6d:41:0d:d2:35:4d:
                    2f:5d:0e:13:a9:2c:5b:e3:77:c2:3a:56:cf:26:26:
                    d0:9d:e1:2a:e1:ef:e3:c5:ca:1b:f7:c6:4f:65:4c:
                    3a:86:4c:2a:9d:22:d8:7c:37:4b:28:81:05:aa:80:
                    8f:f5:2d:95:2b:52:fa:60:0b:0b:01:25:97:92:eb:
                    f2:1c:8a:32:ef:2f:cc:32:3f:6f:8d:6b:2d:20:71:
                    61:fd:42:e9:5b:f2:98:0f:cd:26:ea:6d:e7:d8:e9:
                    c7:a9:2a:d3:22:2c:85:20:20:aa:7b:65:d3:0d:48:
                    cb:03:53:7e:12:27:aa:cb:e7:7c:be:50:e0:3f:ad:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E6:B1:DB:2D:8A:3D:1A:F7:22:0B:3B:29:F1:7D:64:1C:A1:47:A5
            X509v3 Authority Key Identifier:
                keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:0f:df:22:b9:08:63:9b:2f:70:1c:d4:8e:da:bd:12:e3:
         b5:01:d6:8e:ba:53:bd:2f:91:24:c4:11:74:6b:7c:8b:ff:82:
         ea:b2:54:ce:7b:78:cc:76:65:15:f2:38:71:4d:85:95:04:13:
         82:63:43:e5:56:22:98:bb:64:5c:99:ee:7c:99:1a:2d:c1:6d:
         06:b1:ac:82:e1:f5:1e:c1:2d:1c:ba:31:7c:c5:d5:5f:22:4d:
         e1:d9:e6:a1:bc:31:f4:6f:f4:b0:cb:63:84:4f:80:ad:26:73:
         59:7c:e5:d9:7e:74:6a:6e:a4:42:31:3d:f5:bb:38:de:c5:63:
         1c:e7:cd:00:85:0b:40:af:f6:09:08:c0:22:e9:94:e9:6d:1e:
         b9:21:ee:23:ba:6c:1f:3c:ef:76:1f:cd:7e:30:af:7d:61:9e:
         44:11:71:63:eb:9b:78:09:2c:f5:5c:1e:6b:a8:88:a0:dd:ce:
         68:ef:63:16:ce:c8:be:71:b4:25:0f:aa:18:ee:43:a6:fe:41:
         d2:45:b0:39:f2:ff:72:1d:cc:e9:13:73:7e:1a:41:e8:03:de:
         69:7f:3a:f6:53:67:6e:aa:22:6a:c6:4c:a9:93:7c:6d:04:5e:
         2b:67:2c:a1:ac:19:e6:cf:1e:91:85:df:70:77:43:83:c6:c7:
         a2:8a:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----