Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File:                     oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier:          LyIk3duygUnI+/lKanQ05JkrdsOArMkl3bxBSS/PdIg=
Subject key identifier:   98:E0:5E:D1:F2:93:29:35:3D:8F:F9:9C:FB:14:4A:B0:5E:83:E6:BA
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer:       /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial:       01962ECF8D0BC553AFEC6450CC379433A8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number:          0520
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=)
                          2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: AldK2IOhAhfv98SF0EoJfOMplj3AztWu6B+3lwFa+5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8d:0b:c5:53:af:ec:64:50:cc:37:94:33:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=98e05ed1f29329353d8ff99cfb144ab05e83e6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:d7:5b:ab:76:27:cd:97:64:13:ce:30:55:
                    70:b3:06:72:2e:00:36:30:49:51:bc:d6:2d:8f:2c:
                    a3:a3:60:3d:e6:61:cb:0a:59:5d:07:91:6d:f7:f9:
                    9a:5f:5a:ae:6d:39:6e:0c:42:bf:36:df:4e:ca:57:
                    55:f9:09:d8:dc:a9:3a:28:ab:a5:dc:79:a0:a6:80:
                    a0:6f:71:b7:4e:84:c0:f2:45:e5:73:54:f6:53:45:
                    8a:5e:70:fd:a1:b4:82:d4:2d:a6:51:b2:d9:9f:ad:
                    b6:21:21:4c:fc:bf:de:dd:fb:15:27:f0:53:e2:dc:
                    d3:d3:98:6b:91:d7:94:26:83:37:37:c8:f0:e7:76:
                    0c:21:b2:3e:da:7f:10:38:74:ce:9a:01:77:ee:ac:
                    94:9b:c6:27:9a:96:f3:f2:bc:af:73:47:8c:89:79:
                    66:59:7a:2b:a6:a6:82:bf:c0:31:de:16:60:48:5c:
                    9a:f9:ba:ea:b6:40:ea:ca:4c:54:db:00:df:66:1c:
                    75:ce:35:d2:16:3d:93:81:42:96:c5:9d:f2:72:83:
                    df:b7:30:8c:b2:04:bf:9f:94:a5:3c:a3:cc:6d:8a:
                    2e:c9:3f:1a:d0:89:d6:fa:cc:e0:4e:9a:8e:c7:fe:
                    76:10:3f:15:c8:83:d2:4a:c2:d6:f6:ff:fd:bf:e9:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E0:5E:D1:F2:93:29:35:3D:8F:F9:9C:FB:14:4A:B0:5E:83:E6:BA
            X509v3 Authority Key Identifier:
                keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:16:ab:60:76:ee:29:d7:a3:04:04:a8:2a:41:04:8b:a8:61:
         64:3b:3c:a8:a1:26:45:16:c1:95:c8:0d:6c:3e:eb:86:25:77:
         48:21:41:c0:70:a0:4a:1d:f2:85:f4:c3:a1:53:64:72:af:95:
         88:f7:51:a7:25:a6:f6:de:fa:b8:16:ac:75:22:77:20:65:57:
         35:62:c4:33:5f:43:9d:c0:87:fa:5b:68:82:98:cf:37:56:fc:
         1e:7d:36:c2:ab:1c:7f:cd:af:9c:ec:8e:c8:b0:d7:e3:10:67:
         0c:a6:fd:10:9b:32:47:83:ef:cc:e4:88:67:03:04:a7:ca:1e:
         b6:e5:ae:c3:a7:ca:47:0f:5d:64:7f:f8:d2:28:32:05:b7:27:
         31:db:6c:74:0a:f6:ff:e3:d0:2a:95:ab:85:6d:27:fb:67:ab:
         17:29:30:bd:07:e3:a8:11:ec:b4:5f:cc:df:86:a3:0f:de:dd:
         61:0b:96:e3:85:82:65:c0:bf:b8:4c:a7:67:50:63:ba:7e:91:
         00:35:21:35:a7:c3:00:bf:9f:97:f2:7f:d2:04:d3:43:9b:09:
         d6:2a:8f:92:fa:3b:1d:06:0e:9d:7f:91:ce:7a:6b:c5:8d:b0:
         98:d0:bc:8f:d9:08:4c:57:fe:d2:40:4d:1e:07:07:43:8f:44:
         8a:59:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----