Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File:                     o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier:          ZM3Qqe3fDVI0qeB7/SvMaK8OKp+HiIqDsu7X+ruKJ7k=
Subject key identifier:   F8:3E:FA:31:EB:38:F4:E3:34:BA:57:07:0A:04:1D:0D:89:96:27:70
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer:       /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial:       01962FAB493A20416C8BD061AA7DF0122848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number:          0B0A
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
                          2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
                          3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
                          4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: u6pcNmFJjTzXBKaGJdd9/lyXJvVL7fng2ZiF1khMc6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:3a:20:41:6c:8b:d0:61:aa:7d:f0:12:28:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=f83efa31eb38f4e334ba57070a041d0d89962770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:ad:3f:d5:13:a9:79:30:15:05:65:99:03:
                    c8:0d:45:74:a8:4a:78:e5:d5:12:33:8b:0c:8b:7e:
                    62:56:a4:e1:c7:e6:1b:2b:12:3b:b4:b2:a9:70:98:
                    2b:6c:07:ec:30:f7:ed:a9:e6:10:9a:49:b6:1a:08:
                    66:8c:c9:a3:a0:b7:5a:54:f5:f1:a1:3b:15:b6:32:
                    9c:4c:78:9e:20:d3:55:2d:0b:c5:2f:d4:00:98:28:
                    c9:c4:fe:4e:b4:8c:48:63:ce:79:76:3d:14:f4:81:
                    ce:c1:ab:59:fc:f2:0b:46:ae:7e:7f:5b:fd:12:52:
                    8e:f6:11:47:30:87:63:91:38:71:e9:7c:57:9e:0c:
                    56:1b:7d:0a:69:62:e5:4c:c8:da:96:ee:42:f9:0d:
                    f5:87:4b:2b:78:fa:79:cb:3a:44:3b:74:88:f4:80:
                    b5:00:0e:69:55:40:87:82:8b:e7:98:30:df:b1:81:
                    b2:d4:7b:5f:b4:d0:d8:a5:1c:f0:f9:44:c9:f5:48:
                    ed:77:74:14:d6:77:cf:0c:49:44:73:8b:4b:a7:60:
                    eb:1a:da:39:ed:cc:75:2a:81:2b:7c:5d:10:07:20:
                    c5:1d:3f:5d:ae:72:4c:5a:b9:8f:d8:57:51:bf:ca:
                    0c:8d:0d:2e:d8:c1:21:7b:82:d8:09:f2:7b:59:34:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3E:FA:31:EB:38:F4:E3:34:BA:57:07:0A:04:1D:0D:89:96:27:70
            X509v3 Authority Key Identifier:
                keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c8:4b:89:4c:11:a0:f9:3e:b3:ac:b5:03:87:e2:c9:9e:e3:
         3f:d5:43:94:29:78:9a:e0:76:23:46:e7:16:66:74:7d:7d:aa:
         9c:13:af:62:59:cb:8c:2c:a7:00:86:ce:e3:4e:75:78:aa:bf:
         c5:9b:bc:d4:a1:3c:21:e1:e2:a9:ab:7b:3b:8d:59:9b:01:3d:
         e9:5b:61:6a:fa:4a:30:5d:b4:96:7f:88:ab:16:56:9c:1c:61:
         b4:bf:06:52:69:fe:7a:0b:cd:9a:cc:04:86:85:09:34:56:1d:
         50:91:85:fb:f3:f5:cb:f6:f0:f9:8c:b7:29:65:63:b6:6b:c4:
         cb:e9:8a:80:f2:b8:32:4a:e1:04:ed:22:25:b2:1f:5d:2f:3f:
         63:d7:dd:51:a9:0a:e9:b1:d0:11:df:3c:ec:e5:8a:32:78:af:
         77:36:ca:03:71:03:40:e6:87:d4:bc:40:7e:63:34:f5:c6:0f:
         b2:15:13:55:42:14:e8:06:09:33:0d:a5:9c:c5:aa:0f:60:7c:
         ae:d5:de:a9:cc:88:09:a3:19:e7:cb:23:82:78:8a:3b:b6:27:
         ea:80:b6:27:09:ee:37:97:21:07:ef:c3:b8:34:0c:57:9c:22:
         e1:79:48:82:9d:ae:9d:7e:31:68:7c:4c:38:58:ae:0a:44:65:
         ee:97:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----