Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
File:                     oDavImaRg7om8jl2Uw40mzRlGWg.mft (raw, json)
Hash identifier:          TfRalgbC/qm/o80Vyj/9IrpMu4p0mG9yfGxRHW0IeGM=
Subject key identifier:   E1:AB:9D:A2:15:67:D8:AC:68:2E:C7:E7:19:15:AF:21:F8:32:1D:BA
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Certificate issuer:       /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial:       01962E9998C9E9701F3619EBBE42A046AD49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: oDavImaRg7om8jl2Uw40mzRlGWg.crl (hash: z1MoLU26htMuNLidr8MXJrx1fsQ8h/FtGLLfvwEwaV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:98:c9:e9:70:1f:36:19:eb:be:42:a0:46:ad:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a036af22669183ba26f23976530e349b34651968
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=e1ab9da21567d8ac682ec7e71915af21f8321dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:84:3f:c2:8e:b7:4a:6e:57:50:4d:16:1f:
                    84:1e:4a:5c:51:13:00:4f:96:61:3c:c7:4d:1c:67:
                    10:a1:d4:a7:75:01:a1:80:98:22:10:cf:da:8f:e3:
                    1c:cb:88:7c:a6:dd:21:e2:82:23:5d:8a:cd:a3:c6:
                    76:ac:e8:fe:9e:a6:c8:51:31:cd:d6:6c:7f:59:63:
                    38:fd:66:96:27:49:4f:04:3b:a0:49:0a:e3:be:9f:
                    36:03:99:9f:44:1c:cb:2f:ac:df:6f:88:ff:80:11:
                    9e:e7:48:d9:99:76:58:f1:9a:32:d6:db:ba:8d:48:
                    99:a9:24:b5:9b:8d:c8:f3:cd:99:ec:59:4e:49:0f:
                    01:65:47:15:8d:d8:7c:01:29:60:3a:0f:4f:76:dc:
                    f5:27:23:07:de:60:ac:6d:40:5e:55:92:ca:61:bb:
                    9f:d3:55:dd:e8:b2:ba:92:a3:bd:4a:50:92:6a:a2:
                    2c:a0:f9:40:94:be:22:7c:a5:a9:2b:ca:85:f8:30:
                    76:f8:a6:7c:c2:1e:cf:ee:e2:52:5a:07:d7:ca:28:
                    5b:fa:dc:ab:5b:72:7d:05:e1:ef:ac:05:5a:31:67:
                    2c:90:e5:55:d2:ac:22:54:ed:9b:aa:a8:43:5c:06:
                    87:f0:5c:77:44:b9:67:e2:4e:06:e3:3b:37:af:3c:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AB:9D:A2:15:67:D8:AC:68:2E:C7:E7:19:15:AF:21:F8:32:1D:BA
            X509v3 Authority Key Identifier:
                keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:8f:ce:15:49:1f:fc:2f:ab:b6:31:16:44:bd:b5:5a:f0:
         c8:8d:c5:e6:6d:b9:ea:18:81:67:5f:c0:6f:5e:d3:37:f2:b6:
         c9:fd:ce:9e:a3:ef:77:71:7f:9f:da:92:fb:66:8e:67:e1:73:
         d8:d2:0e:c5:74:28:29:d0:cb:c0:fe:18:f0:2b:ca:aa:69:df:
         5f:04:f6:5d:b6:79:d8:d9:b9:ca:a9:e6:83:1a:d0:c7:fb:38:
         43:32:a4:a1:bf:af:81:08:60:23:e5:2d:21:d5:d4:a7:60:a5:
         2c:bb:bf:13:9f:65:2b:4b:df:42:ba:dc:c2:2f:77:05:b4:cc:
         53:fe:bb:e4:54:20:76:7d:a6:98:2b:dd:ca:03:09:14:66:80:
         a2:1b:a6:c4:ca:d0:27:b5:63:e6:c6:76:ba:0a:a8:00:ae:dd:
         71:28:9b:06:18:ed:c2:ee:88:f9:71:a5:2a:4b:36:c8:d0:fc:
         6f:aa:32:ef:b5:5e:bf:a2:fd:d9:41:c6:a9:82:06:78:c5:38:
         98:49:6a:d0:ca:c2:eb:e7:2e:12:72:25:d3:af:63:05:cd:86:
         e8:7c:da:3d:c2:a7:13:10:25:ba:6d:79:f7:50:40:e5:c8:b5:
         99:24:d9:5a:7d:e0:60:88:28:c9:18:ba:c3:7b:2c:bd:a6:df:
         5c:05:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----