Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File:                     oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier:          kGpo+LPfaO1+eIZPEkyem9m+8nsHvxuv064kfps7PPE=
Subject key identifier:   48:95:DF:64:2C:47:45:B4:6A:D5:42:EA:FB:5B:DC:9A:8D:C1:B8:D5
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer:       /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial:       01962DF441D2A5B1CB936F7651889192058A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number:          1451
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
                          2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: 4R8/gF63PBBz+8Um+zsUF8iKsRVzYq7+ogGzab3xYXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:41:d2:a5:b1:cb:93:6f:76:51:88:91:92:05:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=4895df642c4745b46ad542eafb5bdc9a8dc1b8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:ad:44:59:c2:f9:89:d9:21:ad:11:58:a6:
                    34:ef:91:57:fc:29:8e:85:ea:4b:b9:12:d5:19:01:
                    4c:2e:53:aa:b1:45:27:5c:c0:7a:bf:d6:49:ba:d9:
                    51:c7:74:66:93:03:48:46:33:98:48:51:45:a7:67:
                    43:d4:fe:d1:97:f9:bc:b4:92:9b:b0:35:90:f7:ef:
                    2e:b6:9e:39:61:29:97:23:40:0b:4b:34:78:6b:d3:
                    b1:5b:cb:26:c9:f3:2c:28:c9:9b:bc:03:34:18:93:
                    41:13:83:cf:b2:da:b0:cb:69:af:8e:c0:3f:27:b9:
                    94:ab:f2:ba:f8:9f:9b:87:81:80:f2:b6:f3:08:43:
                    f7:ea:03:38:c6:5e:bf:d6:3b:3b:93:ed:a9:0d:95:
                    b4:e5:aa:1b:73:a8:1d:a3:04:9c:4b:93:81:72:41:
                    b5:e6:d5:60:a2:e7:45:ca:ef:0d:35:56:4a:78:34:
                    86:97:a3:d5:45:51:6a:83:85:de:15:1a:dd:3e:9c:
                    79:6f:5f:0c:ce:22:fb:b1:92:58:e1:2f:1f:08:63:
                    8c:97:3d:8d:37:15:ec:c5:14:fd:cf:c4:f8:3b:11:
                    bd:46:eb:57:4b:6f:ee:71:44:9a:5d:12:99:b7:ce:
                    62:78:e5:70:b4:21:3c:4a:2e:2f:68:47:e1:a2:5e:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:DF:64:2C:47:45:B4:6A:D5:42:EA:FB:5B:DC:9A:8D:C1:B8:D5
            X509v3 Authority Key Identifier:
                keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:55:6b:28:3e:37:d2:6f:e3:48:74:52:e9:0c:cd:18:eb:33:
         e5:f1:3a:a4:f7:0a:e1:99:16:45:35:34:a7:08:bf:c0:9a:77:
         38:d1:10:0d:80:71:24:a7:a1:79:6f:e9:e3:be:c6:b6:86:2d:
         99:41:60:d6:c0:6a:87:2c:8e:94:9f:83:73:a2:74:85:e1:16:
         0c:59:81:ef:e6:08:75:85:39:e5:e8:46:6c:d5:3c:b3:cf:7c:
         57:56:0a:1e:f2:7d:20:e6:b7:fc:6d:48:d8:e0:fb:c1:45:a8:
         95:cd:5d:9f:29:3f:28:e3:bc:10:fa:c8:80:51:09:d6:be:ba:
         64:f1:df:e4:31:c5:86:7a:1c:8e:e4:9d:be:ac:b8:bf:45:61:
         86:7d:b2:b5:e8:df:73:a4:ca:df:56:a3:d5:e4:7d:d1:54:01:
         ca:67:d6:53:f1:40:86:fd:ae:61:9f:eb:1b:17:ed:b0:af:8d:
         9a:19:26:81:98:ef:7e:88:0e:e1:6d:0d:72:a5:51:93:d6:84:
         68:1c:f5:40:9c:dc:3f:4a:ea:f0:0e:de:f7:00:bb:9b:8f:b3:
         e9:94:7d:f5:d1:ac:e0:cc:5c:31:ed:8f:73:13:0e:8d:9c:da:
         98:b6:87:90:0a:0c:95:c2:fd:6a:fe:d6:80:c3:18:9e:a4:6f:
         27:3c:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----