Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File:                     OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier:          SwjIuegVX7vOjoWLyW/wAZiQoX3u5aEaqGbujK8myhk=
Subject key identifier:   2F:83:71:85:03:02:CF:9F:83:3D:26:D0:37:68:E5:81:8D:CD:B7:68
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer:       /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial:       01962DF3CC245A09385C5EBF73642919EFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number:          0338
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: CORsIwZ8XpmIq5zjRr1eiE3A/4kU2xtR8X8koArbBIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:24:5a:09:38:5c:5e:bf:73:64:29:19:ef:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=2f8371850302cf9f833d26d03768e5818dcdb768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:0b:06:bd:90:ed:8d:35:0f:62:ae:77:0a:
                    2d:16:25:45:72:d1:8c:42:1e:98:79:e1:a3:ec:9b:
                    02:08:d1:15:b8:0c:e3:1e:d9:9e:19:55:0e:2d:f6:
                    1b:92:a2:c2:85:26:31:7a:1b:90:e0:11:92:53:47:
                    98:34:82:c4:81:16:e6:0f:2e:76:92:87:c4:7d:12:
                    c6:8d:f0:fc:99:47:c8:69:10:d0:1f:eb:0c:59:e8:
                    2f:61:70:2c:d6:f3:b8:a3:b3:d3:6a:9f:de:61:3d:
                    f6:70:69:9a:99:58:cc:21:a2:81:aa:22:18:5e:d6:
                    1c:ab:1b:fe:56:49:ec:4d:9d:9c:2a:db:85:24:a7:
                    38:b0:18:1b:d2:db:f2:16:66:18:5b:5b:24:03:65:
                    94:f6:64:28:ba:1b:c7:42:92:b7:4a:cd:42:83:77:
                    17:76:12:70:95:30:f4:31:fe:a8:03:02:51:5d:a2:
                    a0:24:95:be:50:ed:87:d6:d9:24:bc:48:13:60:19:
                    48:5d:9e:a1:96:aa:f8:95:86:d5:9f:c0:bc:4f:3d:
                    35:f4:1c:f4:9f:4c:cd:c8:b4:c6:eb:88:2b:66:ba:
                    16:23:1d:45:65:47:ed:21:b9:00:e4:40:bd:fb:2f:
                    c2:96:2c:9b:e3:97:7a:c1:10:35:a6:a3:2a:96:61:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:83:71:85:03:02:CF:9F:83:3D:26:D0:37:68:E5:81:8D:CD:B7:68
            X509v3 Authority Key Identifier:
                keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:49:21:7b:cb:33:16:5e:05:fd:8f:59:5d:4f:c8:f6:36:19:
         55:9f:ca:5b:5d:57:a2:ca:64:05:f4:09:d9:0d:b0:72:e8:e1:
         46:8b:7a:24:d9:3d:2b:8b:19:4d:09:3d:3f:8e:b0:a0:f9:7a:
         c4:f0:9c:da:e3:da:e2:3d:b3:55:2f:ea:bb:e6:b0:a3:89:f6:
         4a:27:8d:4c:75:bb:47:2d:bf:04:a9:a3:64:a1:1f:d0:33:ed:
         f9:65:35:ac:d5:6c:24:f0:80:a3:e2:b5:44:41:ea:7e:55:25:
         6b:1f:3d:6d:1b:b9:bf:f3:17:6a:56:37:4a:cd:46:e2:f5:ae:
         99:b3:f0:79:f6:5c:9f:e6:45:32:b9:46:ad:fa:9f:bb:9c:5a:
         15:7c:b9:2a:d6:bc:d8:01:fd:28:b7:b0:31:dc:64:18:b8:04:
         5e:fe:5d:fb:dc:5b:f6:06:91:f8:77:1d:04:55:62:59:7e:ae:
         9e:ad:31:40:a3:8c:aa:a1:8d:be:5c:d5:8d:eb:02:35:b8:27:
         d7:c2:ea:72:5f:f9:ea:a5:83:ea:cf:f4:cf:e5:6d:2e:41:33:
         88:40:0c:bc:e8:fd:c8:a0:87:20:41:52:26:24:49:ab:3c:32:
         12:77:02:bc:5f:23:59:10:6d:bc:d5:ea:05:f0:bf:33:2a:0d:
         52:bc:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----