Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft
File:                     OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft (raw, json)
Hash identifier:          k4CC9r7tQf1Oo4AkpbwdiVggFcE48l5aPEZl/+PYxKU=
Subject key identifier:   A4:7F:DC:44:A6:EC:D3:13:C8:7B:62:84:7A:E5:52:FE:C4:23:5C:19
Authority key identifier: 3A:6B:08:44:26:D9:DE:0B:10:E0:14:1D:1D:E4:3C:76:29:C1:96:82
Certificate issuer:       /CN=3a6b084426d9de0b10e0141d1de43c7629c19682
Certificate serial:       01962F74A1543114739C9AFBEC13AFF49361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft
Manifest number:          0B9E
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: OmsIRCbZ3gsQ4BQdHeQ8dinBloI.crl (hash: HLG8Q3/skhcZS7knRjs0C9jgNZSHiwFIYM8NR8aFx1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a1:54:31:14:73:9c:9a:fb:ec:13:af:f4:93:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6b084426d9de0b10e0141d1de43c7629c19682
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=a47fdc44a6ecd313c87b62847ae552fec4235c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:99:50:74:2e:3e:74:17:ce:f5:c4:57:42:
                    85:4f:d7:ba:5d:19:82:12:83:44:19:2a:50:0a:09:
                    bb:d9:27:2f:d7:5c:fe:16:88:05:77:15:d4:07:5c:
                    c4:1a:23:b0:b0:ca:ea:f9:1a:07:76:00:f9:c9:77:
                    23:c9:55:b0:b9:f2:3d:13:a3:7f:e1:5b:eb:c0:27:
                    53:e0:71:5d:e3:bd:35:e2:ce:68:5a:ab:f2:d7:67:
                    1a:d0:f5:d9:c1:56:01:83:38:76:86:28:74:c6:6e:
                    ac:7c:15:07:8f:e7:3e:3c:85:d7:c0:79:9b:d9:bd:
                    58:84:e9:e7:f5:2f:b9:6c:5f:c0:8b:74:44:4d:c2:
                    60:ea:a5:e1:f3:98:93:cc:87:6c:48:aa:66:61:01:
                    ec:c6:0f:3c:b4:ae:b3:9e:63:9a:10:e1:79:bb:63:
                    fe:41:91:d1:49:d5:1a:f8:cb:f2:96:c0:a6:5e:d4:
                    1a:3d:96:0a:b4:b7:58:f4:c2:0b:9a:f3:33:e4:df:
                    20:0a:70:1a:37:88:d2:87:82:78:02:cb:5e:44:29:
                    e4:1e:17:a9:fa:2b:67:25:1b:40:8c:26:f0:ad:bf:
                    70:84:c9:1f:34:95:b0:e6:2a:e5:52:e4:a9:e1:c6:
                    5f:b2:cc:ec:7a:fb:b1:3d:5b:71:9e:62:a4:5c:5c:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:DC:44:A6:EC:D3:13:C8:7B:62:84:7A:E5:52:FE:C4:23:5C:19
            X509v3 Authority Key Identifier:
                keyid:3A:6B:08:44:26:D9:DE:0B:10:E0:14:1D:1D:E4:3C:76:29:C1:96:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:06:ea:8f:8b:8e:60:b9:79:ae:df:fb:a1:69:36:1d:2d:
         ad:10:53:55:c2:f5:bc:57:20:12:05:53:06:fe:de:2c:74:e6:
         13:ac:57:b0:8c:47:72:50:b9:68:a5:77:a4:d1:24:6e:72:42:
         c8:ee:87:2a:13:31:2d:dc:70:76:20:d5:c6:1f:01:86:14:da:
         0b:64:d8:34:cf:e6:9a:9a:1e:1e:7f:31:d7:2e:34:44:56:d0:
         bf:8b:26:3a:df:31:65:b2:37:f3:14:07:b4:b0:84:67:55:cd:
         93:d4:f5:62:46:b1:9a:bd:4b:59:4e:c8:3c:77:9a:c2:a0:5d:
         af:3c:1f:d0:8b:f9:4b:71:fe:75:14:65:3d:be:18:bd:7d:36:
         c4:98:7c:a2:6c:f3:0e:ae:d7:53:a2:03:9e:2e:1b:76:d5:46:
         fe:b9:9a:90:86:60:d8:37:56:83:04:c8:ef:d9:93:53:71:12:
         c7:fd:08:25:f4:87:98:0d:f7:af:c7:34:b1:b7:9b:0d:8a:ee:
         74:64:1a:74:f4:24:a2:f6:02:8c:0a:3b:01:41:ae:ab:11:9b:
         10:24:0d:d7:e1:e2:97:86:ea:3f:10:6b:9e:46:f8:46:4b:98:
         dc:0d:2b:14:ac:2c:7c:2c:92:54:0d:1b:60:dc:57:2f:a2:20:
         7b:f1:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----