Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File:                     o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier:          PyhnbBPP+oTYvnY1eLe50B31ePqDsF2UEhd9j0VLWHU=
Subject key identifier:   11:DF:30:E3:76:1F:E3:79:AB:15:2E:D9:73:56:1A:E7:43:CC:C2:F5
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer:       /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial:       01962F3DAA96AA22F9CE9742CA323F3B7711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 1-9Z39awtCUNqeCcuYwIOQubEoEY.roa (hash: AJvelHrJ42adBWeCqNbgdbqaGB/A4YMI32J/x3+LlBI=)
                          2: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: 4BUz7t9JEDMLr+3mkJhv8KfxBblrcCpvcp2m4u4+Qfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:96:aa:22:f9:ce:97:42:ca:32:3f:3b:77:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=11df30e3761fe379ab152ed973561ae743ccc2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:09:9d:49:a1:97:74:d3:79:d4:2f:ee:98:
                    58:86:36:fd:df:51:c2:1b:a5:e0:21:d2:53:16:4b:
                    b6:a7:b0:49:d7:04:3d:ad:72:90:7f:2c:6f:77:95:
                    3f:73:22:f4:48:0d:8d:5d:1f:c9:71:66:be:ac:b4:
                    c1:71:5c:98:af:e7:4c:7d:e0:7c:77:79:68:82:e0:
                    dd:a4:3e:29:33:f1:76:5d:5d:c8:aa:c8:d7:4e:ec:
                    28:cc:35:e0:55:f1:fc:a0:8d:43:70:99:22:51:93:
                    b5:f5:cc:63:b0:51:79:bb:9f:a9:ad:74:1c:6b:5c:
                    d2:a4:11:8c:09:af:18:b1:e9:b6:f5:f3:89:a2:5b:
                    4e:0e:c5:70:74:59:aa:d8:be:ca:cc:e7:6f:4e:46:
                    43:71:90:e1:13:90:16:75:8b:1d:13:f3:25:6b:90:
                    e1:82:d6:ed:fa:86:07:dd:59:4c:44:72:49:28:53:
                    10:a3:5c:06:72:ab:2d:8a:02:d3:30:cc:cb:36:a0:
                    3c:37:74:72:38:01:cf:c5:6e:9d:9e:41:da:16:dd:
                    e9:5d:4d:ce:ba:76:85:a0:da:96:29:89:45:53:18:
                    c0:d0:d9:35:4e:a8:4e:df:0c:67:31:53:0a:71:45:
                    95:ee:c5:5a:15:7f:50:fa:9b:12:53:08:0a:dc:a0:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DF:30:E3:76:1F:E3:79:AB:15:2E:D9:73:56:1A:E7:43:CC:C2:F5
            X509v3 Authority Key Identifier:
                keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:01:c0:e3:a7:ad:b4:2b:1c:ed:bb:fc:ed:8d:a5:2c:15:28:
         65:b1:44:24:f7:ad:ce:27:17:98:13:0c:aa:2a:00:17:10:fb:
         4c:a3:dd:03:a4:8c:dc:97:94:62:d1:d2:e8:45:0d:a3:a7:64:
         d5:e3:42:e7:21:53:8a:b4:81:10:60:50:52:04:0d:97:9a:5e:
         ab:67:b0:36:05:17:0e:fb:95:61:fb:9d:ed:bd:17:57:08:de:
         a2:2e:b7:ac:d5:b7:d6:54:b6:14:18:26:a8:8f:5f:52:b7:aa:
         e7:7c:86:9a:eb:ba:bf:e1:d5:b8:c2:51:0c:d5:34:29:64:28:
         8b:e7:0a:17:92:d1:a1:8e:95:fb:47:4a:04:e0:16:33:ac:1c:
         8b:ee:33:70:b1:fe:5d:cd:0a:13:ac:17:fd:a5:70:6d:a3:1b:
         e9:11:ef:62:19:9d:bd:4d:65:39:1b:89:75:96:9b:00:ba:23:
         80:63:72:1b:15:6b:21:00:9a:25:09:4c:4b:45:0b:ed:15:4f:
         40:89:97:82:bf:23:b0:5b:7c:fc:d1:fc:34:66:13:f8:ba:51:
         40:fc:d4:c5:a6:9d:e5:77:25:2b:ee:60:84:30:06:08:f3:65:
         83:c9:75:2e:cb:4b:cc:10:64:70:4e:fc:e8:bc:e7:0e:94:a8:
         1c:79:bc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----